Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IEd34QqBKEDEsVbFM7FE4VDXakg.cer
File: IEd34QqBKEDEsVbFM7FE4VDXakg.cer (raw, json)
Hash identifier: m168X+Dg14pNSc1cV5yZuFrWNspwPNV9rQyXw90xu7Q=
Subject key identifier: 20:47:77:E1:0A:81:28:40:C4:B1:56:C5:33:B1:44:E1:50:D7:6A:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A76C557B4A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/f381cd-1145-4a16-9dcb-24030e266d75/1/IEd34QqBKEDEsVbFM7FE4VDXakg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/f381cd-1145-4a16-9dcb-24030e266d75/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:59:51 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 85.8.156.0/22
IP: 2a09:7300::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 719077079882 (0xa76c557b4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:59:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=204777e10a812840c4b156c533b144e150d76a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:b2:80:56:f7:42:2a:24:9f:3e:e8:16:35:
c6:bb:89:26:4e:13:c2:94:55:d6:9a:d3:35:b3:2d:
09:12:a6:7e:1f:ba:76:d4:f6:7e:6f:ae:2b:ec:2c:
3b:ce:44:5a:1a:16:3d:4d:45:44:b0:12:c8:9e:d6:
4a:ab:18:75:1d:9a:c6:fa:cf:65:af:92:69:fd:0a:
f3:26:f8:e2:20:8e:09:5b:17:45:dc:99:04:ed:eb:
35:49:3d:3e:0a:c7:89:15:7d:48:c7:8b:b2:71:56:
ef:9d:fa:e9:01:4d:6b:1d:68:a3:82:99:a7:01:f8:
4c:25:37:6e:24:ec:80:92:e0:40:34:65:b2:3d:87:
af:2f:19:e3:10:e9:7d:b5:a9:a8:72:fc:e9:6a:1f:
81:ce:08:7c:02:98:18:39:02:42:ad:9e:9f:32:66:
12:ef:f9:05:31:7a:9f:cf:b1:df:37:ae:80:04:2f:
54:c8:4f:a7:dd:78:1a:86:2b:85:c3:21:1c:e5:a8:
4f:f4:1c:fe:77:bf:44:99:45:4c:68:0b:54:f1:03:
e4:79:49:9b:fb:68:00:95:83:9e:be:42:0e:5a:e9:
cc:5c:1f:8d:68:5f:ee:4c:a5:10:fb:c1:4e:27:fd:
ee:ab:72:89:46:2a:a6:0a:a3:53:91:5b:19:b7:7b:
e0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:47:77:E1:0A:81:28:40:C4:B1:56:C5:33:B1:44:E1:50:D7:6A:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f381cd-1145-4a16-9dcb-24030e266d75/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f381cd-1145-4a16-9dcb-24030e266d75/1/IEd34QqBKEDEsVbFM7FE4VDXakg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.156.0/22
IPv6:
2a09:7300::/29
Signature Algorithm: sha256WithRSAEncryption
51:b4:45:6b:c0:04:e2:e3:68:2d:3e:e6:84:6d:21:e0:c0:06:
fc:63:7d:b6:9c:bc:c1:4b:37:82:3b:e7:39:ab:fb:07:a5:71:
39:ef:26:ac:e3:67:3b:50:4e:48:b4:37:5b:0a:1d:1a:93:4f:
43:aa:b9:bc:db:28:8f:0e:2d:a1:af:3c:19:87:c9:ee:ea:9b:
f1:4d:81:da:ab:81:d6:ef:c4:67:07:de:e1:0d:d8:4e:9b:9a:
09:08:3f:29:82:2f:8b:96:da:34:60:4b:0a:c9:54:1a:9f:4a:
16:fc:af:f2:47:d6:f0:5a:ed:ff:bb:4b:e3:30:f1:f0:34:fa:
43:b0:9d:8b:3c:00:7b:85:63:5e:20:8e:fe:1a:09:e7:30:53:
2f:7e:49:ec:a3:aa:f6:39:f6:0a:f4:c7:50:67:45:4e:25:95:
cf:4e:a7:36:22:dc:12:10:07:79:7a:db:d1:48:8e:74:1b:17:
c1:92:37:1e:c8:52:4f:9d:ae:df:85:36:a2:24:d0:65:2d:35:
55:5b:32:7e:db:b1:17:57:40:d6:5c:77:b7:0b:0a:2d:ce:3d:
32:11:64:84:17:ad:e5:6c:92:61:28:e8:8d:63:29:1a:a1:8e:
f5:80:32:a5:8c:4c:21:01:4d:43:93:0b:f9:2a:42:31:22:82:
d9:f8:a4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:17 2024 by rpki-client on console-fra.rpki-client.org