Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IqJBUX5zGqY9VLav5P1WXn_Hq-I.cer
File: IqJBUX5zGqY9VLav5P1WXn_Hq-I.cer (raw, json)
Hash identifier: wSWgRm7cB6m1zqy9DsZ4vguBWN0QgQ02Mk7INKZuNdw=
Subject key identifier: 22:A2:41:51:7E:73:1A:A6:3D:54:B6:AF:E4:FD:56:5E:7F:C7:AB:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9AFB792689
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/dd1398-8c95-42a1-a95b-59a77329e2e1/1/IqJBUX5zGqY9VLav5P1WXn_Hq-I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/dd1398-8c95-42a1-a95b-59a77329e2e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:00:35 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.9.48.0/22
IP: 2a0e:ce00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665643984521 (0x9afb792689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:00:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22a241517e731aa63d54b6afe4fd565e7fc7abe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:70:00:b4:26:35:63:7b:03:9c:23:ce:29:
76:26:37:48:c8:20:88:eb:70:17:86:f3:3b:45:22:
b0:e6:78:d0:d6:aa:82:63:5b:23:1c:6e:48:10:05:
6a:27:68:5a:f4:52:c0:cd:f2:5b:67:74:a6:85:c8:
ad:91:c4:8f:b9:d2:40:1e:6f:21:f3:d3:96:96:e1:
88:74:30:1b:61:44:be:1d:fe:f3:13:45:62:f4:92:
15:5f:1d:f7:35:b3:62:95:be:83:a2:d4:6c:f3:38:
85:09:46:10:2f:8d:6b:d4:f3:2d:ae:d3:36:1e:9a:
e0:71:1a:22:ff:1a:d4:69:ac:91:ff:60:ad:ed:76:
ae:67:53:8c:94:b1:60:d4:9a:6d:62:65:aa:d4:39:
03:e5:86:09:24:30:eb:37:37:ec:6f:36:6b:a0:48:
c8:29:6a:9c:45:91:0b:f1:50:89:33:12:f5:95:71:
45:09:9d:0c:6e:95:79:46:fb:64:d7:bb:0e:1c:80:
19:90:3f:c2:2a:d1:10:e3:c7:54:72:4a:7d:ab:8d:
1b:4c:cc:39:ad:44:43:85:0d:f4:24:70:3d:92:7d:
41:71:89:a8:0a:07:da:fb:9f:f3:f8:5c:43:06:f1:
9c:bd:69:43:70:07:1c:63:e3:53:3f:29:c2:1c:39:
fb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A2:41:51:7E:73:1A:A6:3D:54:B6:AF:E4:FD:56:5E:7F:C7:AB:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dd1398-8c95-42a1-a95b-59a77329e2e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dd1398-8c95-42a1-a95b-59a77329e2e1/1/IqJBUX5zGqY9VLav5P1WXn_Hq-I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.48.0/22
IPv6:
2a0e:ce00::/29
Signature Algorithm: sha256WithRSAEncryption
a2:8a:cd:62:a2:42:b6:8f:6c:a8:d2:2b:d4:ed:51:b5:a8:22:
93:b7:87:6a:06:17:06:61:02:75:97:33:ee:89:e0:05:01:c5:
16:74:e4:bc:ba:03:2a:b6:1a:21:7c:af:53:1e:31:fb:1f:71:
f9:0d:e1:20:72:4e:a9:ca:50:cb:a2:3d:c1:25:79:06:60:68:
57:c0:f1:48:bf:56:6f:76:65:13:16:77:0a:d2:8e:0d:fd:e4:
13:84:e1:92:0f:f4:f8:a7:43:d1:a8:2d:8d:c4:1f:de:e2:5f:
02:29:ff:e6:94:3d:77:1e:a9:66:af:52:ab:ab:74:a7:a9:e9:
7b:ac:e1:cc:5f:e0:b2:99:67:a7:b1:01:2a:ae:aa:71:fb:3b:
e0:ad:93:fe:37:d9:d1:bc:7f:9e:3c:b7:87:28:72:c3:d1:69:
15:99:6a:38:81:5c:60:d1:56:56:4e:9a:12:78:ce:10:10:2a:
85:0d:72:09:c0:76:05:5e:88:a1:2e:21:4a:cc:72:ae:fb:15:
48:49:2d:93:d5:65:cf:5c:0d:97:f7:57:4c:a3:9a:0b:40:86:
1d:65:83:64:3e:85:1c:ab:4c:70:e3:a0:ba:37:cc:ed:12:5c:
a8:7d:a6:2b:c8:29:e4:44:4f:42:3d:ce:42:e8:86:bb:09:76:
9f:cf:66:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:29:45 2024 by rpki-client on console-ams.rpki-client.org