Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Id7bV-Vt-42XcS7jZRy1gQapQKk.cer
File: Id7bV-Vt-42XcS7jZRy1gQapQKk.cer (raw, json)
Hash identifier: ZGx5fK/1g9LZ6I2ISPYmQrCm27SXO9bpWcID8SIQpOg=
Subject key identifier: 21:DE:DB:57:E5:6D:FB:8D:97:71:2E:E3:65:1C:B5:81:06:A9:40:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A264C463C9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/860c3f-8e0d-4f51-97a9-6bfd851aae2d/1/Id7bV-Vt-42XcS7jZRy1gQapQKk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/860c3f-8e0d-4f51-97a9-6bfd851aae2d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:54:23 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.238.84.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697475294153 (0xa264c463c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21dedb57e56dfb8d97712ee3651cb58106a940a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:8a:05:51:57:53:45:d6:79:7a:5f:83:dc:
8b:12:8e:da:c0:80:d8:87:f0:a7:d5:8e:e8:ce:ad:
b2:d3:ab:45:a6:fc:b0:31:d9:a9:91:c3:57:76:45:
9f:5a:1d:a4:b7:8d:cb:05:12:34:a4:a0:2d:d9:44:
37:31:c0:25:79:8e:40:08:54:41:7d:66:0c:c3:31:
14:7e:30:67:b0:1f:fd:ec:0e:c5:0b:0b:a2:22:c6:
18:e1:ba:c2:7e:d8:55:df:c6:17:2f:26:6a:c6:5d:
fb:7d:96:a8:5f:4a:7b:49:8b:05:40:cb:52:d5:0c:
98:97:14:82:c5:11:d5:44:6f:41:99:9c:52:b9:0d:
3e:e5:3d:dc:17:42:af:3d:f0:74:7d:e4:fa:12:41:
b9:06:9c:ae:45:ed:55:9e:fe:d5:bb:91:c1:88:26:
7e:43:f7:19:1a:8b:c0:00:ec:05:62:95:0c:44:f1:
ed:4f:4e:0f:14:f1:f7:92:32:c4:90:3d:cf:08:47:
a8:b2:b2:46:4a:dd:a5:e4:92:1d:5a:aa:bd:4b:46:
f6:15:fd:80:c4:90:37:ab:e5:21:95:30:7d:b1:8d:
1f:de:71:14:ee:34:61:15:e9:62:a4:3f:4f:b2:0c:
fb:65:2d:25:af:16:e3:4b:d7:9e:76:47:7f:0b:45:
04:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DE:DB:57:E5:6D:FB:8D:97:71:2E:E3:65:1C:B5:81:06:A9:40:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/860c3f-8e0d-4f51-97a9-6bfd851aae2d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/860c3f-8e0d-4f51-97a9-6bfd851aae2d/1/Id7bV-Vt-42XcS7jZRy1gQapQKk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.84.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:33:e2:a3:27:f5:fc:55:df:dc:23:42:13:60:83:45:76:19:
17:c5:db:ca:05:09:49:49:0d:af:d1:a8:5d:70:53:f6:93:1d:
80:c9:36:b0:dc:98:81:01:17:f6:d2:e4:1f:ef:35:ee:1e:60:
35:51:8c:55:d6:8e:43:52:c7:50:48:9c:6b:cf:4c:90:f1:33:
bc:6b:97:7f:e3:5a:80:85:4d:d8:c9:53:bc:aa:bd:f3:43:7f:
5d:bc:8d:ce:3c:fc:ae:fd:25:4e:75:8d:63:2e:67:f1:1a:68:
6d:07:3c:24:37:0a:c4:2b:b9:9d:7f:a7:ad:5a:78:8e:57:9d:
d2:5a:1c:e1:47:32:e2:34:97:84:57:84:1c:00:32:d9:d8:39:
62:1c:51:a4:70:49:91:8d:f5:91:dc:48:fb:39:c4:48:23:b7:
c7:5a:72:7e:0f:ee:da:4d:81:e4:3d:b9:7b:e3:36:4b:d0:1f:
a5:91:82:55:13:1e:c9:62:52:60:da:b2:65:12:f6:df:95:31:
37:a0:b2:f2:56:2f:0b:6a:cd:67:cc:3e:36:6a:f5:54:97:62:
8b:f5:69:26:e0:94:64:56:2a:ab:8a:a9:af:3c:94:b5:b4:ea:
cf:d3:50:f1:68:53:cd:6e:db:4a:fc:c8:98:db:2a:be:66:40:
f1:7c:01:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:29:43 2024 by rpki-client on console-ams.rpki-client.org