Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hq3W_48hqbiENym5slYYWSeQIyk.cer
File: Hq3W_48hqbiENym5slYYWSeQIyk.cer (raw, json)
Hash identifier: +JGNFZLAdgWQvZdD8hMzoO4OkYR1O8Sp5vnPMR9MfmE=
Subject key identifier: 1E:AD:D6:FF:8F:21:A9:B8:84:37:29:B9:B2:56:18:59:27:90:23:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9CC9598D1F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/85b222-7627-4fc8-9146-0e713c6967c6/1/Hq3W_48hqbiENym5slYYWSeQIyk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/85b222-7627-4fc8-9146-0e713c6967c6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:55:06 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 195.216.234.0/24
IP: 195.216.238.0/24
IP: 195.216.245.0/24
IP: 195.216.247.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673392987423 (0x9cc9598d1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:55:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1eadd6ff8f21a9b8843729b9b256185927902329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a1:f6:e5:2d:74:38:4a:94:74:f1:42:85:d4:
b9:84:33:9f:19:64:7a:7c:5f:af:90:08:9f:98:6b:
a6:2b:9f:f4:11:ce:0c:d6:f2:db:b8:a8:68:5d:80:
df:09:0e:b3:2a:6b:19:a9:80:1c:8d:97:ea:b1:76:
fd:ad:39:09:c2:d2:7f:22:1b:91:63:fb:48:18:07:
95:14:19:f5:85:c4:5b:26:97:44:55:d1:31:73:86:
33:52:02:1f:d3:ba:0a:b4:1e:92:20:0b:29:54:4a:
47:95:e8:e3:25:93:d0:81:d6:1d:9b:c6:83:e6:26:
d3:e3:30:5d:3f:1d:54:dd:4c:8f:25:5f:0d:fa:40:
cc:92:1d:31:cc:b5:76:fe:74:62:5b:f7:1d:1f:a4:
a9:e1:9d:af:07:94:49:a7:f6:af:7d:ba:6d:3e:a6:
2a:31:ec:d9:70:97:fa:cf:31:bf:c6:b3:48:16:be:
2e:07:62:c3:d0:f5:ae:5a:35:94:f6:31:43:ed:11:
36:3f:c3:1e:93:4f:9e:5d:13:23:3f:3c:64:4b:9c:
d5:e8:64:8a:5d:28:35:64:ef:3b:33:8f:fd:e0:49:
7d:5e:e3:3a:5b:ea:1e:f1:f6:5e:a6:5f:89:ed:f6:
31:03:b4:23:72:9b:47:6f:a7:46:d2:e4:6b:bb:bd:
b2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AD:D6:FF:8F:21:A9:B8:84:37:29:B9:B2:56:18:59:27:90:23:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/85b222-7627-4fc8-9146-0e713c6967c6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/85b222-7627-4fc8-9146-0e713c6967c6/1/Hq3W_48hqbiENym5slYYWSeQIyk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.234.0/24
195.216.238.0/24
195.216.245.0/24
195.216.247.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:08:5c:d0:d4:1a:97:f8:67:1e:e8:f1:8e:be:56:96:4f:70:
4c:a2:00:aa:53:83:df:10:a8:88:f3:43:77:c1:22:c4:d2:50:
a1:04:3d:ba:c3:08:18:50:5b:69:3a:e7:1e:0f:9e:29:ac:ae:
33:a1:14:70:9f:c6:3f:de:4d:14:ec:53:82:52:ef:be:c1:e9:
a1:4d:86:3f:ba:cf:08:7d:70:6d:78:37:93:7d:ea:5b:c4:bc:
19:37:09:74:bb:4d:a9:09:4c:c1:ed:39:da:1f:2e:fa:f9:50:
cc:0f:dc:04:2e:78:fb:c8:fa:96:6a:f8:05:09:04:c0:f8:c2:
28:f7:73:78:89:23:d1:74:44:a4:85:92:eb:23:e5:ae:f8:e1:
66:48:9f:bb:40:ad:3b:35:ca:1c:5a:92:5c:d3:24:7f:4b:07:
e8:a0:44:dd:ca:ca:25:6c:88:7d:ec:56:c4:e7:d7:5e:41:20:
8b:59:fa:9d:a4:3f:25:ef:82:02:3e:50:f8:de:0c:94:a4:a2:
e7:2e:e5:ae:8a:23:51:ad:db:5b:76:96:1f:0f:64:61:68:cd:
bf:c4:c8:cd:2f:41:b0:22:40:c1:46:2b:76:df:a6:92:ae:8d:
2a:c6:0a:c4:0b:a3:84:97:f6:c9:f8:63:1f:9d:e6:5f:73:a4:
4b:d2:cb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:29:26 2024 by rpki-client on console-ams.rpki-client.org