Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ia5jx_qHU_AUcLNeKUoPtYbb9VM.cer
File: Ia5jx_qHU_AUcLNeKUoPtYbb9VM.cer (raw, json)
Hash identifier: xe4MhYuamEPAu+NcZbGQrnnxSSZUpIHolyKmmDhAiP8=
Subject key identifier: 21:AE:63:C7:FA:87:53:F0:14:70:B3:5E:29:4A:0F:B5:86:DB:F5:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9BE1EA7D3F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/91fa29-7103-4230-b2dc-36638b61c033/1/Ia5jx_qHU_AUcLNeKUoPtYbb9VM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/91fa29-7103-4230-b2dc-36638b61c033/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:57:51 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.165.252.0/22
IP: 2a0a:5600::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669510171967 (0x9be1ea7d3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:57:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21ae63c7fa8753f01470b35e294a0fb586dbf553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:12:09:ce:c1:62:4d:b2:08:a4:18:2e:13:ec:
76:94:91:75:9b:0d:5a:be:1f:52:99:ed:30:97:c6:
84:2e:95:e4:04:d4:0a:46:7d:3a:c4:13:29:8e:8e:
78:3e:58:7d:6f:75:32:14:39:2c:bf:25:3d:28:b3:
82:bd:d1:2e:2c:ed:21:b4:f2:33:31:ff:16:15:e2:
bf:79:05:3a:2e:5a:82:f1:26:13:cd:b6:db:60:85:
65:3e:67:51:7d:36:1a:16:0a:3b:2b:fc:0f:71:2b:
76:4e:56:72:de:9b:0c:16:35:df:03:f6:c1:1c:c8:
3e:ba:17:0c:8f:fa:8c:86:8e:a5:e0:3f:68:4b:42:
f0:2b:e1:21:2b:84:21:11:d1:c7:51:fb:fa:61:b0:
7c:eb:26:b5:b5:18:69:74:79:8a:e8:8a:0f:d9:ca:
a9:92:2d:88:1d:39:7f:73:82:bb:9f:aa:2d:f2:55:
02:30:88:85:df:fe:b7:9c:d6:6c:b3:55:22:03:ca:
4b:eb:88:69:4f:05:5c:eb:73:81:11:bc:a2:a4:d8:
37:de:e7:da:5f:ad:8b:44:df:a3:f4:bc:be:f3:53:
e1:73:8a:17:e4:e2:32:a8:e8:62:a9:95:0e:11:7e:
52:df:33:cd:7f:47:40:9f:16:0b:94:9b:2e:4b:18:
04:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AE:63:C7:FA:87:53:F0:14:70:B3:5E:29:4A:0F:B5:86:DB:F5:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/91fa29-7103-4230-b2dc-36638b61c033/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/91fa29-7103-4230-b2dc-36638b61c033/1/Ia5jx_qHU_AUcLNeKUoPtYbb9VM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.252.0/22
IPv6:
2a0a:5600::/29
Signature Algorithm: sha256WithRSAEncryption
78:3c:61:a2:c8:7d:df:2a:5c:d2:a7:84:12:da:a3:2d:bd:17:
c7:82:64:73:bd:de:83:f5:65:a8:84:54:65:04:59:28:dc:28:
b8:e2:41:92:df:e5:45:2a:df:e3:18:5b:d0:cd:a0:30:60:ba:
e8:21:fc:e9:f9:25:dc:f4:0c:92:31:43:ed:4b:fe:d1:fa:7d:
a6:1d:d2:9d:12:17:ce:a3:09:cd:09:bd:0e:c9:c4:22:ac:06:
c3:8d:82:57:2b:04:55:cf:0e:6e:d6:0b:a8:7a:8a:08:d9:99:
3a:a7:cb:86:2d:d5:42:f3:26:2a:0e:e6:97:f1:fd:6c:3d:80:
8a:12:80:16:3a:e3:ff:68:a4:8a:62:08:81:60:e4:93:eb:30:
f1:72:ca:a0:46:af:c4:30:fd:33:1f:ac:40:c5:24:09:1d:50:
c5:84:73:73:0a:ad:e2:08:24:aa:2a:4e:4d:c0:25:bd:67:c9:
03:b2:bd:77:56:5f:2a:0e:ea:a0:8a:31:34:9a:6f:a6:29:b3:
eb:8d:8e:c9:9a:ca:43:3d:3e:27:07:4f:98:cc:fb:b8:81:9c:
77:3c:be:6a:3c:a3:40:28:5a:d2:21:1a:92:7c:33:62:76:90:
52:94:05:69:48:b6:17:de:93:b7:3e:85:f8:50:3a:b8:d1:86:
85:fb:7c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:23 2024 by rpki-client on console-fra.rpki-client.org