Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GKPZLdqRA2czl3PWymSB-yB70sc.cer
File: GKPZLdqRA2czl3PWymSB-yB70sc.cer (raw, json)
Hash identifier: ZuTLwGJ+dEfCm2OCFlADTjSmtv6LpkIStMye6BQOl5U=
Subject key identifier: 18:A3:D9:2D:DA:91:03:67:33:97:73:D6:CA:64:81:FB:20:7B:D2:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A2B03B8C38
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/e66f89-5df5-47ac-b7af-e7592308e706/1/GKPZLdqRA2czl3PWymSB-yB70sc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/e66f89-5df5-47ac-b7af-e7592308e706/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:57:31 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.141.23.0 -- 193.141.24.255
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 698741394488 (0xa2b03b8c38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:57:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18a3d92dda910367339773d6ca6481fb207bd2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:42:96:9c:8a:92:f3:c7:f9:9d:9d:34:a4:2d:
00:ed:2b:fd:66:52:94:86:0b:63:13:fe:48:db:e2:
25:69:ed:c5:13:b6:4d:24:ad:b1:11:bc:87:a3:de:
00:38:36:a8:c7:7a:39:6b:e8:58:6e:7e:23:2e:ec:
75:8d:bd:98:b5:f8:26:6d:79:f3:03:91:70:06:65:
ad:2e:92:b4:30:7e:c9:63:49:b8:ea:f7:9a:ea:07:
94:30:e4:2d:a8:9b:96:a1:87:41:bc:01:51:25:13:
7d:99:f0:03:ff:9a:92:6d:fa:99:2b:77:c8:c5:c4:
f1:e9:80:e9:20:20:9a:2f:15:b4:5e:dd:1d:e5:c9:
96:b4:1d:2f:a4:57:8a:1c:45:98:72:1e:c4:5b:bf:
1b:60:0c:73:63:4e:38:53:46:1b:e0:b9:2c:01:c2:
9c:6a:7d:7a:1a:73:06:38:62:ac:ad:04:c2:bd:56:
f1:92:98:80:a7:3d:6c:f5:8b:2e:d1:fb:19:ad:d2:
5a:cc:09:76:f3:53:bd:83:35:2c:b9:97:1e:cd:c8:
70:3f:4a:1e:66:05:26:d1:c9:6b:9a:57:10:d5:15:
56:a8:bc:ae:b2:03:58:58:e1:f8:8f:f8:7d:b9:d1:
5f:5c:1a:6d:a0:6b:03:54:b0:e8:bf:bb:d0:09:b0:
80:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A3:D9:2D:DA:91:03:67:33:97:73:D6:CA:64:81:FB:20:7B:D2:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e66f89-5df5-47ac-b7af-e7592308e706/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e66f89-5df5-47ac-b7af-e7592308e706/1/GKPZLdqRA2czl3PWymSB-yB70sc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.23.0-193.141.24.255
Signature Algorithm: sha256WithRSAEncryption
24:d2:b7:e4:a1:8f:a2:11:8c:e2:3b:94:d9:51:20:c2:ac:79:
92:d9:b0:44:20:1a:01:88:be:9a:d7:15:12:76:81:56:0e:33:
9e:c8:f9:28:ea:42:0d:64:f7:c6:f6:35:d6:98:83:5e:cf:e5:
3a:1c:3b:f8:ed:ad:d1:62:ce:06:39:c3:50:83:05:3f:b9:6d:
65:99:83:1e:2a:45:ac:0b:3d:c6:1f:d5:5c:42:20:f6:16:af:
4a:49:b8:0d:fc:58:fa:dd:f1:f7:36:eb:e6:ea:61:f6:de:c7:
e8:b3:4a:67:bc:a5:5c:aa:95:2f:a6:e3:7f:03:e7:1f:07:48:
66:f3:19:d5:de:b1:72:93:df:49:a6:b2:35:d3:10:9d:a0:67:
0d:c9:44:d8:cc:65:c3:50:b9:99:1b:02:35:e4:d9:0b:4b:c8:
c2:a4:f5:50:4c:14:d5:e1:73:f0:82:80:b9:64:b7:46:d2:0a:
65:f7:7b:18:82:6a:c2:47:b3:51:a3:c7:2e:9c:76:3b:17:13:
5c:f8:f1:22:bf:7e:43:bc:5a:14:2c:ef:eb:26:f4:cf:03:2c:
48:f0:f7:41:35:b0:0c:ed:34:e3:0d:fe:42:b4:3e:4c:b5:9e:
fd:4f:21:57:6c:1f:1d:e7:4d:84:88:02:6a:99:21:5f:15:f6:
05:c1:84:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:28:53 2024 by rpki-client on console-ams.rpki-client.org