Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FsJSbD7xM9JVnoQlBoVZ808AdXI.cer
File: FsJSbD7xM9JVnoQlBoVZ808AdXI.cer (raw, json)
Hash identifier: TsUdoZf6G5N/ZM5J/eek9zFepRHIuFuEcAOTH6/sEI0=
Subject key identifier: 16:C2:52:6C:3E:F1:33:D2:55:9E:84:25:06:85:59:F3:4F:00:75:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A88741F093
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/cdf1b9-809e-4cb8-ae81-dec0a7ec2b3d/1/FsJSbD7xM9JVnoQlBoVZ808AdXI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/cdf1b9-809e-4cb8-ae81-dec0a7ec2b3d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:00:24 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.144.124.0/22
IP: 2a0f:6e40::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723823751315 (0xa88741f093)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:00:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16c2526c3ef133d2559e8425068559f34f007572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f4:04:52:c9:34:c1:b8:a1:57:20:17:15:0d:
ca:8e:4f:6c:c4:d0:0c:99:ce:bb:82:d6:57:49:64:
41:f3:6a:22:27:8b:d1:e0:74:8c:e5:18:86:a2:ef:
86:15:26:77:d0:73:b6:c4:dc:38:c9:f6:c6:8d:ad:
af:3e:8f:26:b8:99:0c:b7:63:8a:f0:8f:7f:41:26:
c3:c3:48:4c:e2:55:a6:f0:5e:98:dd:3e:34:ed:c5:
e6:ca:50:a4:fc:ca:2e:8f:33:e3:5d:2e:e9:9e:07:
84:c6:e5:c9:dd:d4:67:6e:7d:a1:ab:40:bd:f6:5d:
22:f8:41:10:b0:ad:78:2d:d0:3e:e7:4f:95:d0:9d:
85:76:76:a9:63:d5:31:2e:8d:22:86:dd:be:9c:a9:
b7:f2:85:8b:f5:d9:21:82:bc:78:28:6c:9d:d3:de:
a6:6c:72:f0:be:7c:6c:97:c6:a1:0f:a1:fd:d3:55:
97:23:29:9b:f3:53:c2:de:e6:55:91:be:a7:18:5a:
b7:60:40:6c:fd:39:c9:9e:72:d9:bf:b3:0b:9b:a2:
e3:59:89:d2:ce:3b:0f:5c:48:54:9c:d1:1a:98:35:
18:6b:f2:92:7c:bd:14:28:b6:47:75:38:22:cf:40:
31:6c:ef:26:28:a7:f6:8f:32:3d:df:34:2d:28:2b:
07:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C2:52:6C:3E:F1:33:D2:55:9E:84:25:06:85:59:F3:4F:00:75:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cdf1b9-809e-4cb8-ae81-dec0a7ec2b3d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cdf1b9-809e-4cb8-ae81-dec0a7ec2b3d/1/FsJSbD7xM9JVnoQlBoVZ808AdXI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.124.0/22
IPv6:
2a0f:6e40::/29
Signature Algorithm: sha256WithRSAEncryption
5f:7d:aa:58:be:8f:2f:60:6d:98:10:d9:99:20:5e:6e:49:4b:
57:3d:c5:74:a2:1d:c9:82:e3:34:1c:6f:e1:5a:f4:a2:e2:66:
3e:38:10:e1:46:2e:e9:2c:1a:92:84:96:20:48:e5:61:82:5d:
1d:75:98:6f:e7:42:9b:d6:e2:20:20:c5:94:3b:54:57:80:ac:
17:3f:da:d5:06:fe:39:aa:1a:28:3f:3e:fa:95:06:29:16:93:
f0:f0:be:69:79:54:24:b2:53:3d:86:c7:74:07:d9:c6:75:59:
f5:50:fa:6c:70:31:7d:1d:01:9b:88:e6:27:8d:a5:d0:ab:c4:
5d:ad:1c:bb:34:73:87:b9:68:6d:8d:7e:93:35:47:c5:34:00:
95:9f:8e:83:ab:e9:bc:c2:a1:b0:76:71:0f:21:82:23:64:43:
1f:21:f8:7e:84:bc:97:ed:f7:66:cf:34:81:dd:83:00:d5:48:
23:dc:8c:34:07:f4:03:b9:df:ee:6a:fd:f2:02:38:db:fc:b7:
04:16:a1:10:f3:02:8a:a3:e0:d4:69:d4:8c:25:25:77:6f:d1:
4c:83:25:c3:b5:da:35:64:85:54:76:0d:dc:bc:ad:b8:a7:7b:
a2:7f:f6:ac:7e:73:9d:00:83:06:f6:08:bb:80:1a:23:39:51:
9b:49:90:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:56 2025 by rpki-client