Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EpIDu2lCm1nsaxuTQnXxhL3WP_s.cer
File: EpIDu2lCm1nsaxuTQnXxhL3WP_s.cer (raw, json)
Hash identifier: OoUl1vR+rmlLezC1evFKgyIg/RQL4q1OZAuGCX4uhJQ=
Subject key identifier: 12:92:03:BB:69:42:9B:59:EC:6B:1B:93:42:75:F1:84:BD:D6:3F:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9B05DFCAA5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/57be97-795a-483f-b52f-026731d9e3fe/1/EpIDu2lCm1nsaxuTQnXxhL3WP_s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/57be97-795a-483f-b52f-026731d9e3fe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:01:03 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.234.254.0/23
IP: 91.235.234.0/23
IP: 2a0f:a380::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665818483365 (0x9b05dfcaa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:01:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=129203bb69429b59ec6b1b934275f184bdd63ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:bc:6e:90:09:74:66:19:0d:22:50:d3:7c:93:
14:af:58:27:89:ca:ff:ab:0c:ab:e0:73:4f:ec:01:
16:33:78:1b:f1:11:9b:f0:2a:c0:dc:71:f0:33:49:
13:0e:1b:6a:67:f1:ad:f8:b8:c5:a3:fc:02:b3:38:
0d:cf:1a:70:ac:4a:88:e5:86:12:7b:07:d9:fe:14:
98:e1:3d:10:7d:48:98:ff:a7:50:21:a5:3d:c4:d7:
88:54:f8:22:03:93:54:42:b4:48:ea:f2:57:d0:0e:
f1:9c:ba:a9:2b:94:94:3d:2d:f2:a6:09:a2:60:fb:
76:97:64:c8:91:2c:9a:10:23:bf:5b:98:97:0d:c7:
e4:a7:d7:7f:df:7a:e7:92:62:99:2e:a4:17:60:12:
66:68:8b:6a:77:fa:40:c9:a8:bf:86:8d:6c:21:b3:
31:2f:cc:d5:a3:c8:32:e4:28:1d:ab:6f:5e:39:bc:
4d:9d:d7:98:60:9c:e9:ee:64:ae:f9:46:6e:63:1d:
4f:1f:f5:ff:5c:75:46:58:86:d9:aa:61:91:50:c2:
9d:b9:37:ad:9b:a3:b9:27:c1:3d:23:66:6e:98:c0:
a0:01:b7:c9:d5:40:5d:91:f7:b0:e8:ff:37:2f:6f:
ae:5d:b4:dd:04:0d:97:c9:fe:c4:b4:ad:05:30:9c:
3f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:92:03:BB:69:42:9B:59:EC:6B:1B:93:42:75:F1:84:BD:D6:3F:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/57be97-795a-483f-b52f-026731d9e3fe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/57be97-795a-483f-b52f-026731d9e3fe/1/EpIDu2lCm1nsaxuTQnXxhL3WP_s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.254.0/23
91.235.234.0/23
IPv6:
2a0f:a380::/29
Signature Algorithm: sha256WithRSAEncryption
50:93:11:09:09:e5:55:fb:e9:cf:dc:8f:c6:bc:4c:5d:50:7f:
8c:b4:cd:b5:0d:74:03:56:49:f3:af:76:31:fa:74:67:da:81:
d3:29:79:0f:8b:e3:20:c5:b0:07:3a:50:19:ce:ec:e7:56:8b:
f9:33:d9:25:1f:36:6f:23:ab:d2:59:2d:b4:00:00:55:92:25:
9f:10:58:b0:39:30:d3:5b:8a:76:ef:1e:34:b3:c5:b1:2e:3a:
97:f3:f0:cf:61:39:05:0d:cf:a4:03:86:fa:94:d3:1f:22:31:
75:44:74:6e:05:96:2c:20:cd:65:01:e4:ab:0c:39:29:8a:e2:
f0:5d:7e:e4:ae:ff:c8:a3:a0:6c:a0:9d:1f:7a:e5:73:b0:2d:
18:7b:7b:d5:5b:bc:e7:b4:3f:e1:cf:40:05:51:90:df:e7:d4:
52:7b:05:23:c0:56:5b:1a:10:ad:74:6c:e7:77:96:69:cb:12:
b5:66:39:cb:49:9e:e5:c7:39:a5:e7:4c:ee:25:ae:2e:56:8d:
90:1b:f3:c2:c2:74:51:fc:02:e1:e7:12:4a:0f:9d:36:a0:a8:
7d:87:aa:71:30:0a:fd:b9:6d:6f:7c:d0:99:73:11:29:be:1b:
1e:64:82:1b:e5:93:d5:a4:44:8d:2c:18:eb:ac:8e:bf:36:31:
22:07:a5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-fra.rpki-client.org