Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ERconKrf05Ym3c16vBjjB6d_oFU.cer
File: ERconKrf05Ym3c16vBjjB6d_oFU.cer (raw, json)
Hash identifier: uERgnrwc9oZokTPn8CIPX3uDeuTf7kEQW92MCWunhJ0=
Subject key identifier: 11:17:28:9C:AA:DF:D3:96:26:DD:CD:7A:BC:18:E3:07:A7:7F:A0:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A01BCF537B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/bb2024-d03b-4d8e-b92c-e5a621312120/1/ERconKrf05Ym3c16vBjjB6d_oFU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/bb2024-d03b-4d8e-b92c-e5a621312120/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 06:54:39 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 194.105.58.0/23
IP: 194.105.62.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 687661339515 (0xa01bcf537b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:54:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1117289caadfd39626ddcd7abc18e307a77fa055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:70:ae:37:99:8c:0a:bf:84:64:66:ea:ff:54:
55:44:a1:0f:4a:ee:ea:45:de:a7:d0:fb:fa:11:b7:
a4:00:b3:53:89:49:ac:9f:24:1f:a6:7d:ab:8a:1d:
7c:df:20:fa:b8:ca:5a:e0:43:84:a0:fd:76:69:00:
4c:ef:93:43:9e:4d:b5:8b:3b:a5:f7:12:16:40:17:
71:03:d3:50:80:e9:4c:4a:cd:ee:72:9f:f0:f1:e1:
57:77:60:a1:9b:3b:c1:eb:3d:9a:2c:e7:74:97:26:
13:9f:09:bd:01:cb:c4:74:1a:33:fe:28:99:c2:a3:
42:db:48:2d:b0:8f:df:81:23:c4:e3:c9:c9:e0:70:
5e:ab:71:50:45:76:66:36:99:57:dc:2e:60:a1:04:
9d:5b:4c:63:c4:e0:1d:1e:24:03:fe:78:04:3a:75:
56:24:d4:d8:e6:f8:f5:58:34:21:76:50:1f:0a:2e:
5b:b3:ce:ef:b2:e9:f1:6d:a2:de:e4:af:46:40:4c:
ea:cd:65:e0:05:92:cc:f3:67:04:fb:5c:2b:d8:73:
f2:43:6a:6a:56:fd:b8:ac:d3:93:c2:4f:77:1e:2c:
70:6c:e7:49:1c:13:7f:d2:97:3e:d5:4c:93:2e:73:
0b:7f:96:d0:20:88:70:3c:ee:1c:f3:e3:e2:b2:2f:
b2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:17:28:9C:AA:DF:D3:96:26:DD:CD:7A:BC:18:E3:07:A7:7F:A0:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/bb2024-d03b-4d8e-b92c-e5a621312120/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/bb2024-d03b-4d8e-b92c-e5a621312120/1/ERconKrf05Ym3c16vBjjB6d_oFU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.58.0/23
194.105.62.0/23
Signature Algorithm: sha256WithRSAEncryption
10:d6:52:9c:6e:ec:65:28:3b:18:aa:8c:65:81:d5:f0:0e:71:
0c:b0:f2:73:33:f4:23:77:17:f8:22:53:59:42:da:97:37:1c:
38:68:63:10:00:59:ce:30:25:c2:cc:5c:65:d1:7b:ec:fe:48:
c2:72:e1:98:b4:9e:4c:04:4a:58:58:d3:85:b4:4e:b2:54:cd:
c9:cc:b0:6f:ca:ab:46:54:d1:ee:f5:ba:09:f1:a5:7e:92:93:
98:08:72:76:ef:4c:f8:0b:60:fc:eb:7b:42:26:e6:b6:1f:0f:
e3:0d:17:02:30:25:cb:3a:0c:5b:fc:1c:3b:44:ad:c9:89:b6:
ec:e9:8d:6d:43:b2:f9:36:60:44:c0:a9:e2:2d:7c:f9:67:89:
a7:cc:c8:4f:4b:44:70:1b:6a:c9:68:fa:36:60:f3:2d:39:16:
27:f1:9d:c9:9d:97:d5:71:e0:74:d2:45:0a:eb:7d:d6:bb:b7:
42:4a:a0:83:72:db:51:e4:05:6d:4e:25:08:3d:ff:55:1e:49:
0f:e2:56:6f:67:c5:bb:4c:d9:45:49:11:41:75:0e:dc:a0:fe:
f8:e0:82:ba:9e:92:ad:96:25:42:f8:81:3d:19:39:7e:40:3d:
1b:1b:5c:53:97:74:da:08:11:58:2c:00:06:a9:11:18:6b:f5:
80:62:9e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-fra.rpki-client.org