Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JGN3ZHpytTXTw_CGDU7ve2-aPv4.cer
File: JGN3ZHpytTXTw_CGDU7ve2-aPv4.cer (raw, json)
Hash identifier: +2MmtwM7trV4WFLt/DxPmdd2hTLPlBR53fve7fVQ07s=
Subject key identifier: 24:63:77:64:7A:72:B5:35:D3:C3:F0:86:0D:4E:EF:7B:6F:9A:3E:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED300E4578F528AC72A69C444E789CE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/d53db5-26b1-44ba-b3ae-7d2f244cb6d6/1/JGN3ZHpytTXTw_CGDU7ve2-aPv4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/d53db5-26b1-44ba-b3ae-7d2f244cb6d6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:33:20 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 213.109.194.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d3:00:e4:57:8f:52:8a:c7:2a:69:c4:44:e7:89:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:33:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=246377647a72b535d3c3f0860d4eef7b6f9a3efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:09:cf:43:a7:fb:ca:e4:a1:34:ba:7b:f0:23:
2c:d2:9f:43:14:db:40:52:b5:1f:b4:7b:31:3c:2d:
06:3c:89:ad:26:50:b1:3d:34:b5:20:20:e6:70:2b:
cd:26:56:d0:97:56:1f:4f:62:fe:3e:8f:42:8a:ab:
6d:c4:45:75:a8:66:f6:48:4f:5c:5a:a2:eb:a2:f6:
89:06:b1:13:97:96:09:2b:ae:9c:38:ce:26:f8:99:
f3:c2:44:15:17:54:18:00:6c:4d:3d:6d:34:57:3f:
72:f2:ce:6d:d7:e9:a7:53:52:62:5c:04:3b:ec:1c:
c4:8a:df:16:40:3f:b7:ae:d9:85:f4:44:aa:5b:8d:
78:47:33:53:0d:52:dd:e9:f9:c2:60:4c:f8:1a:bc:
0f:19:2d:b7:52:da:9d:31:f1:01:80:4a:4c:af:86:
17:74:ea:ab:6d:84:41:f5:8a:b9:62:91:be:58:0c:
1a:1b:a1:c2:1c:93:4a:ad:20:89:ae:b0:56:aa:78:
7d:f4:ce:b6:90:03:28:14:ad:a4:77:64:00:aa:e8:
b3:a9:2d:60:b9:e3:4e:3e:de:5d:13:09:e7:0a:14:
06:1b:e2:4d:1f:b5:75:f6:01:14:9b:c5:fc:48:3a:
92:bb:e8:f0:ad:b7:5b:78:3c:e7:8d:8c:a9:de:e3:
70:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:63:77:64:7A:72:B5:35:D3:C3:F0:86:0D:4E:EF:7B:6F:9A:3E:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d53db5-26b1-44ba-b3ae-7d2f244cb6d6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d53db5-26b1-44ba-b3ae-7d2f244cb6d6/1/JGN3ZHpytTXTw_CGDU7ve2-aPv4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.194.0/24
Signature Algorithm: sha256WithRSAEncryption
94:4f:61:92:a0:12:cc:86:f5:0d:0d:21:a4:ef:bd:af:a0:76:
54:7d:cb:10:7a:1c:52:d0:c5:56:5e:c6:2b:b3:e8:61:1a:85:
6c:c2:4c:fe:6b:60:e3:c3:ba:9a:b4:50:25:52:bc:24:1d:8a:
ef:95:49:aa:65:61:51:2c:9c:38:25:f8:57:ba:c1:59:34:a4:
e9:6a:93:b3:4d:e8:88:75:6f:1e:eb:58:66:fb:31:4f:6c:d8:
a3:c3:ec:b4:c1:41:2e:f5:f5:6f:2f:f7:e6:43:a9:05:ff:51:
22:00:7a:5c:94:2b:a7:46:0f:c4:8d:72:af:5e:23:bc:67:0a:
8e:db:8b:48:ec:46:d7:2e:c5:86:7b:44:9c:06:af:3f:57:2f:
10:64:e3:c4:43:0c:b7:3e:91:3f:7d:8d:43:12:ef:b9:84:ea:
38:20:a1:29:f4:15:90:ed:5a:0e:60:61:f6:f1:c7:af:b2:b4:
4b:44:23:cf:43:aa:9a:f2:72:04:c0:e6:0f:8e:28:b8:9e:06:
54:e2:2f:d0:a6:9e:7e:f8:75:bc:00:33:4f:43:92:2d:c3:05:
79:f9:f2:9e:60:8a:d3:d2:23:f6:c6:64:fb:47:fe:b9:a7:5d:
db:20:83:27:58:96:35:00:c0:41:f3:f5:d7:20:19:77:6b:9e:
44:a0:af:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:14 2025 by rpki-client