Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GRAjUY09BVHQU-gotwsYIh6J_ow.cer
File: GRAjUY09BVHQU-gotwsYIh6J_ow.cer (raw, json)
Hash identifier: G0idhKe+cGaCWbvarxnegeG9rbe4FcX9+mIFzAGr2JM=
Subject key identifier: 19:10:23:51:8D:3D:05:51:D0:53:E8:28:B7:0B:18:22:1E:89:FE:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A5584CA252
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/b23591-aeda-476a-b20a-b9fea1189dce/1/GRAjUY09BVHQU-gotwsYIh6J_ow.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/b23591-aeda-476a-b20a-b9fea1189dce/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:00:53 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.200.192.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 710151021138 (0xa5584ca252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:00:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=191023518d3d0551d053e828b70b18221e89fe8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:db:65:6e:7e:8f:11:f5:d5:66:9c:c7:34:
f8:5e:54:38:ba:2a:79:fe:28:11:e9:15:da:fd:ec:
0b:20:e6:15:70:55:9a:9a:2a:60:d6:ac:7a:30:4c:
62:6b:d7:68:c7:f8:fe:5d:9a:35:6d:28:85:cf:4a:
a0:18:18:87:90:b5:11:b4:a9:e1:38:aa:67:ef:f5:
fb:29:cc:23:24:50:74:0b:52:8a:f7:45:75:21:be:
5b:c4:4b:47:2e:8e:76:ed:2a:fa:0f:ea:ac:e3:2a:
b2:15:ec:c4:bc:7b:22:34:e9:f3:bb:4f:a7:da:4f:
4e:d5:cb:8b:e9:3f:3f:82:02:51:1c:2c:f2:0d:1a:
df:3d:28:31:92:1a:cf:1f:c2:f9:ec:22:77:3e:04:
ca:e3:a0:27:9b:c3:5a:20:50:49:36:a8:63:05:2a:
26:3f:c6:95:16:02:34:d8:1e:a4:31:55:72:77:b6:
54:52:f4:07:64:99:6a:58:f5:b1:1e:f0:a9:40:85:
cc:da:84:92:d7:bb:e9:a9:5c:62:74:67:ef:9a:1c:
6e:b9:26:dd:57:28:53:ad:a9:9e:05:20:52:38:ad:
c7:f3:7e:2a:d6:79:b8:38:4b:22:6d:2c:43:6c:fe:
28:f7:03:93:21:d4:2f:83:00:b0:06:3d:0c:c4:e5:
0b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:10:23:51:8D:3D:05:51:D0:53:E8:28:B7:0B:18:22:1E:89:FE:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b23591-aeda-476a-b20a-b9fea1189dce/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b23591-aeda-476a-b20a-b9fea1189dce/1/GRAjUY09BVHQU-gotwsYIh6J_ow.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.192.0/22
Signature Algorithm: sha256WithRSAEncryption
00:c0:38:15:d0:70:e7:da:e4:b8:17:01:14:fc:d6:93:55:ae:
b8:6e:41:c5:ec:d0:e5:c1:c5:09:05:c7:95:22:99:63:f7:13:
08:d8:4c:f5:96:af:98:ca:c3:37:76:dd:29:68:e3:c1:6b:c4:
33:7b:c1:4c:a8:1f:3e:c9:8d:60:ce:4c:24:00:27:c9:4d:90:
5d:66:a2:71:58:1f:8c:83:f5:3d:d4:a3:b0:6e:96:9d:32:7f:
55:eb:79:81:a7:e3:ac:e0:5d:5d:8e:b8:68:04:1d:0e:72:2d:
0a:45:32:54:ba:91:2d:2e:a7:fc:79:d6:a0:9d:2f:58:61:19:
85:62:8c:f0:54:37:0d:15:07:88:53:a7:bb:31:fb:fb:a4:ec:
ba:ff:6a:31:95:05:59:b6:68:cb:9b:38:14:14:ad:90:1b:84:
fd:8f:e4:a4:81:50:f3:f6:12:b4:ef:b8:ac:f5:aa:a1:03:33:
ef:49:ac:b9:71:77:04:c0:e8:1c:2a:68:4b:18:5f:6f:ec:96:
f2:2a:c1:2e:09:c9:5e:92:bd:7d:80:ee:0f:57:b7:0f:d2:90:
f1:7e:5a:54:c4:86:e3:70:43:db:34:8d:b2:7d:ca:9b:d4:eb:
1c:24:eb:18:5f:1f:76:e4:dc:ec:c7:7d:f0:d5:0e:52:32:09:
0c:07:4e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:28 2023 by rpki-client on console-fra.rpki-client.org