Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HCyxhe10cCIcVcrlHt4Xs0-xbmk.cer
File: HCyxhe10cCIcVcrlHt4Xs0-xbmk.cer (raw, json)
Hash identifier: rcm1DaHVd7iu7PuyvxbGjuGXx+lQ+xhhf3JNP23fXvw=
Subject key identifier: 1C:2C:B1:85:ED:74:70:22:1C:55:CA:E5:1E:DE:17:B3:4F:B1:6E:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B1DFF4E5BB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/469fd3-7398-4860-a89c-1a322f756199/1/HCyxhe10cCIcVcrlHt4Xs0-xbmk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/469fd3-7398-4860-a89c-1a322f756199/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 18 May 2022 05:11:19 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.110.244.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 763966580155 (0xb1dff4e5bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 18 05:11:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c2cb185ed7470221c55cae51ede17b34fb16e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:2a:a4:eb:8a:50:48:4f:d0:79:84:6f:7b:
f9:45:a6:87:77:bd:eb:d7:3c:23:c8:6f:15:b3:f5:
bb:e6:95:21:d4:eb:83:38:9c:7a:27:4b:f9:64:f7:
e0:24:2b:b5:89:79:6f:c9:c3:8d:cc:23:48:f9:ac:
d9:ec:9d:35:50:44:5c:d7:47:b5:41:be:c4:a8:2b:
cd:7a:4a:97:67:79:9b:53:9b:d4:89:1c:c6:16:4d:
80:31:cf:f7:99:46:0d:cd:17:0c:f2:03:5d:df:6c:
84:7c:21:35:8c:b9:db:91:c5:23:ce:e0:2e:a1:c5:
a9:80:08:80:f9:ec:34:2d:e8:98:7f:e8:8a:d3:74:
49:bc:2a:c5:6c:3a:a2:95:d4:da:20:2c:ba:17:dc:
d2:92:8e:cf:c2:bc:7b:53:50:07:f5:dd:5d:76:b7:
f8:0e:29:5e:e0:80:8d:54:a8:88:d2:b1:39:bb:d9:
e1:6c:f1:ab:b1:3e:3e:b1:42:ed:fc:b7:a4:c8:7f:
32:05:58:c5:0c:56:ae:48:51:7c:17:63:9e:24:cc:
70:db:e3:72:79:ed:d7:7d:59:cc:4e:76:17:ac:64:
ed:3c:ae:8e:ab:46:5a:1c:28:b6:59:40:1b:d4:dd:
55:a7:b7:17:7f:d7:3f:1b:5d:f0:b0:1e:57:f0:91:
ea:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2C:B1:85:ED:74:70:22:1C:55:CA:E5:1E:DE:17:B3:4F:B1:6E:69
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/469fd3-7398-4860-a89c-1a322f756199/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/469fd3-7398-4860-a89c-1a322f756199/1/HCyxhe10cCIcVcrlHt4Xs0-xbmk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.244.0/22
Signature Algorithm: sha256WithRSAEncryption
60:8e:d8:94:11:4d:81:9f:48:de:55:e4:36:1b:a5:e1:00:57:
4f:76:aa:30:f7:0e:34:d9:43:80:06:dc:e7:06:e2:02:99:e2:
34:a5:c4:15:6d:ca:83:e4:e6:6a:1d:fd:67:e9:b5:92:df:7b:
0d:f1:66:32:9d:e6:81:4c:7e:6b:11:c8:54:e5:a7:aa:a9:a1:
04:cc:85:a4:10:28:ff:4b:5c:ff:b9:9c:ac:46:cb:99:7e:54:
b9:30:60:0f:28:d0:09:4f:3f:b1:a2:14:22:88:bd:03:80:9f:
14:79:f2:88:3f:f0:56:84:7d:21:cb:77:29:30:df:5a:4e:40:
eb:e8:dc:52:1c:be:1b:ae:55:f0:cc:c8:69:d1:fa:b5:00:37:
40:a3:d5:0f:dd:6f:94:08:cb:d9:3f:05:08:5c:8e:82:f0:89:
e7:4e:3a:de:8c:af:a7:76:44:45:75:8e:b9:40:0f:40:e9:c1:
82:46:09:2f:ef:13:f9:14:4d:e5:1d:5d:79:3e:f9:be:1d:06:
dd:87:6d:e9:12:c6:b7:94:91:de:b4:32:e9:e1:1f:73:ea:33:
be:ab:4b:34:64:3a:7a:7b:3c:2a:ac:f4:79:e4:d5:ef:4a:1f:
c9:98:3d:6d:fe:6d:a9:e9:f5:be:ec:4f:ef:ea:4c:9f:3b:65:
16:d1:3d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:29:13 2024 by rpki-client on console-ams.rpki-client.org