Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HdmBdm9K2XD3iwd-EiTRCJrkHoY.cer
File: HdmBdm9K2XD3iwd-EiTRCJrkHoY.cer (raw, json)
Hash identifier: FWdYXxPw27v68wRMw/r1VhbBw4XJ1M084P71LsA6tzY=
Subject key identifier: 1D:D9:81:76:6F:4A:D9:70:F7:8B:07:7E:12:24:D1:08:9A:E4:1E:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9C3CA501D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/dd8c49-c2e2-4a42-9c5c-04f62868c43d/1/HdmBdm9K2XD3iwd-EiTRCJrkHoY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/dd8c49-c2e2-4a42-9c5c-04f62868c43d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:01:30 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.217.236.0/24
IP: 91.217.239.0/24
IP: 91.217.249.0 -- 91.217.250.255
IP: 2a0a:64c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671032345048 (0x9c3ca501d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:01:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1dd981766f4ad970f78b077e1224d1089ae41e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c7:17:61:6e:b8:53:c3:b1:23:a5:15:bf:b5:
37:5d:ed:58:cc:5f:e8:82:61:58:fb:19:9b:56:86:
1d:6b:ff:ff:ff:87:30:dd:0e:c0:00:f7:96:a8:8b:
50:83:e3:e0:f5:00:4c:f6:7c:d2:0e:d7:64:7b:8f:
6a:21:17:a5:f9:cf:18:81:de:68:56:8f:3c:d7:2e:
55:bf:62:4e:9b:79:28:a3:31:33:8b:01:53:fc:7f:
2f:f8:13:81:ae:f9:06:50:01:58:c5:47:33:ff:fd:
5a:f8:05:d8:66:b0:7d:68:10:5e:7c:57:5a:a5:d1:
b0:21:e0:0c:bc:00:58:40:5e:e2:d0:88:d8:21:8e:
d6:10:1f:21:63:8c:0d:81:82:4d:59:89:80:97:6d:
ca:67:a7:b2:36:2b:84:1d:ff:c8:9a:05:d8:43:d0:
c9:45:74:58:6d:89:ad:6a:89:6a:5d:58:61:4c:70:
54:33:a0:e9:fb:e3:08:8d:06:a3:92:4a:b0:a5:2c:
16:8f:4f:9b:a9:1b:c2:2a:f1:33:7e:60:af:64:f5:
f2:df:67:fc:3d:3a:8c:53:16:83:00:ef:56:0c:4c:
32:a8:2d:1c:3c:69:69:1d:44:8b:2f:50:14:0c:68:
23:98:7f:9f:82:3a:14:4d:d2:f0:cd:2a:6b:1a:8c:
e3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D9:81:76:6F:4A:D9:70:F7:8B:07:7E:12:24:D1:08:9A:E4:1E:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dd8c49-c2e2-4a42-9c5c-04f62868c43d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dd8c49-c2e2-4a42-9c5c-04f62868c43d/1/HdmBdm9K2XD3iwd-EiTRCJrkHoY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.236.0/24
91.217.239.0/24
91.217.249.0-91.217.250.255
IPv6:
2a0a:64c0::/29
Signature Algorithm: sha256WithRSAEncryption
05:10:a2:e9:40:c1:15:2e:eb:0c:86:d3:14:07:c3:0f:5d:4c:
45:42:d3:bd:a7:f8:b7:6d:91:c2:da:3e:aa:99:8b:af:50:96:
50:98:d2:9a:f1:e0:b5:d5:b0:69:07:11:e2:cb:cc:be:c1:f0:
4c:29:5d:b8:83:c2:e3:55:01:7b:f2:84:f0:76:2e:44:4e:3d:
76:1f:b9:73:1d:39:e1:9d:d2:32:b2:c2:1f:3c:ca:be:2d:21:
d1:c9:4f:ad:53:3c:cb:c5:a1:25:2d:88:a7:9b:5c:6a:d9:96:
c8:5f:e9:0e:64:09:9e:00:27:09:50:5b:b7:38:8d:e2:b4:1b:
93:6f:13:ff:43:46:ae:29:04:16:84:2c:b9:2d:a9:99:d4:59:
5a:8b:7a:a8:c5:1e:86:f0:a0:11:04:9c:a1:7c:7f:5c:b8:d0:
0b:7c:aa:e6:42:a4:e9:ca:48:db:eb:3d:a4:c1:2a:94:d5:1d:
f1:dd:6d:0f:0f:42:af:31:55:45:9d:88:a8:c1:76:c6:55:37:
ee:a0:f5:fc:f1:d7:ce:7a:0f:2c:86:b1:12:8c:8a:bc:b3:31:
f3:9b:d6:6b:20:0b:e1:92:48:24:6f:9f:46:39:2f:37:40:06:
4c:fd:8e:8a:7a:bf:56:ad:97:de:60:1a:7e:7c:d4:59:5d:0f:
22:9f:f9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:09 2024 by rpki-client on console-fra.rpki-client.org