Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HW2rw2KPJx-MWwzbGE0YvN5bmQA.cer
File: HW2rw2KPJx-MWwzbGE0YvN5bmQA.cer (raw, json)
Hash identifier: L1f7QUpkRZjLu5JdWiYq95RgzfBY8nZcNWEkWRvtvOA=
Subject key identifier: 1D:6D:AB:C3:62:8F:27:1F:8C:5B:0C:DB:18:4D:18:BC:DE:5B:99:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A4E22309A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/HW2rw2KPJx-MWwzbGE0YvN5bmQA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:56:25 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 141.98.112.0/22
IP: 2a05:b480::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 708168583591 (0xa4e22309a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:56:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d6dabc3628f271f8c5b0cdb184d18bcde5b9900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f2:56:c9:be:77:3d:00:56:c7:aa:5c:bf:01:
a0:80:81:9d:86:c8:d4:2f:8f:f2:2d:21:42:f8:b2:
12:77:30:0b:9e:eb:55:2e:5a:79:6f:51:8b:1b:1c:
5b:d1:4f:e2:b0:eb:1a:cc:b9:7d:e8:c4:cc:06:21:
1c:1a:c4:a1:19:eb:e0:52:23:2c:9b:fa:87:95:c5:
c7:bd:ce:f2:42:19:e7:21:8c:74:55:05:f3:1b:0a:
9b:fb:a2:00:47:3f:50:f0:15:89:68:e2:b0:15:76:
a7:16:48:20:68:92:08:a3:70:65:85:c0:97:dd:d7:
e9:75:26:b1:20:8a:4c:7c:8a:d5:e3:1e:80:83:c4:
3b:3c:bb:11:b9:5e:9c:da:18:bf:52:6c:fe:e3:32:
78:71:a2:7c:46:3a:14:a4:b4:3d:e3:7b:7b:e3:99:
ee:0a:f7:57:51:92:c7:b9:04:24:78:fb:43:bb:d7:
b8:44:7a:20:94:2e:e7:6d:98:95:8c:ce:c0:91:b3:
16:8c:e8:b4:1f:66:33:6c:2e:42:b4:81:2a:c1:16:
32:ae:1e:dc:12:20:3d:21:ea:b4:1b:d9:e0:01:a3:
b0:d0:fb:ca:49:66:d8:7e:5e:8f:18:ca:c3:e7:ed:
6e:f9:2d:d7:39:9a:fd:5b:7b:8f:93:07:e0:63:65:
51:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6D:AB:C3:62:8F:27:1F:8C:5B:0C:DB:18:4D:18:BC:DE:5B:99:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/HW2rw2KPJx-MWwzbGE0YvN5bmQA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.112.0/22
IPv6:
2a05:b480::/29
Signature Algorithm: sha256WithRSAEncryption
ad:6e:67:f7:86:45:94:6e:a1:ad:92:33:04:e3:7f:3c:08:1e:
e0:a9:6a:40:b3:64:9c:11:2a:c2:3b:58:2a:95:21:f6:5c:93:
62:d9:5c:f9:7a:07:8d:ae:ce:92:27:12:70:d7:6d:69:7b:37:
b6:0e:67:1e:cd:79:98:d0:26:f0:f5:92:4e:51:77:d3:c5:ab:
9e:18:5d:cc:0b:7b:a6:af:1d:6e:5d:e9:69:a7:84:87:66:8d:
22:03:de:0a:7c:be:3c:97:ed:49:1b:ce:c2:59:9c:fe:8c:61:
74:04:ed:92:75:ec:a6:67:73:4b:0f:8e:f4:d6:e6:cb:07:d6:
dc:54:64:37:42:18:73:7f:65:21:71:e7:2d:5c:97:82:57:79:
80:1f:b5:de:d7:d9:7c:c9:c5:63:9c:e5:27:84:44:de:29:1a:
1e:ae:30:11:e7:4e:88:bd:ea:f1:8f:d6:4f:37:a0:a8:a9:bd:
e6:e4:12:33:87:16:a3:49:52:5f:23:39:78:78:70:9f:a3:f1:
ad:9b:2c:00:13:51:09:fe:1d:84:56:fc:68:7b:24:7e:14:38:
1d:f8:7e:a1:c9:5b:b1:ca:b7:a2:2e:b7:81:c2:fa:80:ed:98:
6c:86:eb:02:5c:39:cd:b2:36:03:d8:42:7a:03:cb:af:a9:35:
c2:ab:3a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:29:18 2024 by rpki-client on console-ams.rpki-client.org