Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GR04IPE3E56-NqGshxOKXpgzn80.cer
File: GR04IPE3E56-NqGshxOKXpgzn80.cer (raw, json)
Hash identifier: ETfVBXeN8K3BtFc/i8/YGf6OSq9jVwb030LumN6ducY=
Subject key identifier: 19:1D:38:20:F1:37:13:9E:BE:36:A1:AC:87:13:8A:5E:98:33:9F:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9E5E79EEC6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/1b40af-b75b-4831-a3fa-92c6e2a156c6/1/GR04IPE3E56-NqGshxOKXpgzn80.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/1b40af-b75b-4831-a3fa-92c6e2a156c6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:02:11 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.213.201.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680189882054 (0x9e5e79eec6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:02:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=191d3820f137139ebe36a1ac87138a5e98339fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d5:1a:b8:07:dd:5f:ca:44:df:c4:63:1c:42:
10:09:c9:bd:cd:1c:d3:98:2a:de:61:fe:54:3b:97:
b3:87:7f:4f:ef:d3:53:09:c5:e1:9a:c1:fb:38:57:
03:dc:ff:f9:00:bc:a1:89:dc:5e:21:8d:2d:55:ac:
58:69:03:94:01:4a:bd:67:69:90:f1:b4:f8:bf:81:
6d:d3:c7:04:80:92:46:39:5d:df:6e:e7:e0:37:32:
ce:e2:03:49:04:06:e4:a2:6b:d7:a3:11:66:72:aa:
f5:2e:32:38:60:8b:26:bb:ab:92:78:59:27:0f:16:
36:31:74:28:ef:a1:19:57:b9:66:d5:31:56:f6:91:
5a:a1:2c:4f:02:95:18:5f:78:44:b4:7f:15:22:07:
47:ef:5c:9d:ac:9e:a2:c5:8e:a2:b2:ba:d2:0d:da:
62:3f:a2:d5:d5:ea:f1:2d:2b:47:fd:44:21:f3:49:
6f:42:0f:82:ba:cc:e6:12:a8:83:e3:ac:ba:d0:21:
88:90:bb:b8:82:ee:05:ae:85:56:09:d8:99:40:74:
72:98:55:9d:2b:59:a7:95:47:84:9c:cf:ea:35:51:
94:95:34:40:eb:0c:7e:a6:4c:7e:23:62:e6:23:76:
4c:24:4c:94:b6:d1:c7:3c:7d:55:2d:6c:11:86:96:
10:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1D:38:20:F1:37:13:9E:BE:36:A1:AC:87:13:8A:5E:98:33:9F:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1b40af-b75b-4831-a3fa-92c6e2a156c6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1b40af-b75b-4831-a3fa-92c6e2a156c6/1/GR04IPE3E56-NqGshxOKXpgzn80.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.201.0/24
Signature Algorithm: sha256WithRSAEncryption
19:1a:12:c2:00:d4:65:7f:04:9d:26:6d:9f:8a:09:e4:7d:c5:
7b:0f:8a:cc:ec:7f:7e:11:69:b9:a2:1b:2b:70:3d:ea:e3:14:
c3:94:59:dd:57:48:13:61:f3:cd:57:c4:6a:af:a1:29:55:15:
06:9f:f9:73:0d:2c:d3:47:af:70:0d:d6:20:c9:b0:3b:23:4f:
bf:b0:ac:44:e5:54:5c:78:72:f4:c4:e6:23:f1:56:7f:01:a6:
b6:81:b7:34:36:fd:0c:60:3a:1b:93:d5:bf:1d:d8:2e:67:4f:
20:f2:2e:8e:df:d9:7a:5b:30:0a:4a:49:61:92:b1:ff:7f:90:
e1:e8:7e:9a:e1:cc:e8:de:34:6b:04:ba:47:4e:d2:20:ae:b0:
ac:0c:4b:7a:24:1b:32:f5:ef:06:d6:5b:3d:d9:7f:89:50:5f:
57:68:9b:45:d3:07:3f:91:96:f4:eb:97:51:f7:ce:4f:7e:39:
fd:e0:7f:fd:d0:29:42:88:05:d5:5d:67:ad:dd:95:5e:09:4d:
13:e8:ae:d4:b6:d1:a1:7b:11:21:df:94:4f:c6:21:ec:e2:64:
c9:fa:6e:fd:a7:ff:15:b4:ab:6b:10:60:74:3a:30:e6:35:e5:
b0:db:05:72:36:c8:4b:dc:a6:58:b1:5b:61:3e:8e:84:1a:51:
e1:64:02:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:51 2024 by rpki-client on console-fra.rpki-client.org