Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jb5E2QeXikYCpDeDCOiBngJtgOc.cer
File: Jb5E2QeXikYCpDeDCOiBngJtgOc.cer (raw, json)
Hash identifier: 7XZGn6bQg2SnAlYrUs1H1Sc/Zp3ugKEAGGyOOX1veDQ=
Subject key identifier: 25:BE:44:D9:07:97:8A:46:02:A4:37:83:08:E8:81:9E:02:6D:80:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AAD29DF30F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/557b21-3f55-4322-b1e3-a3f5a094b4a4/1/Jb5E2QeXikYCpDeDCOiBngJtgOc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/557b21-3f55-4322-b1e3-a3f5a094b4a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:59:54 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.154.160.0/22
IP: 2a0f:bb00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 733678007055 (0xaad29df30f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:59:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25be44d907978a4602a4378308e8819e026d80e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:a0:c6:cd:6a:1d:30:17:06:d1:8a:64:03:
b2:3d:98:08:5a:96:34:ce:2b:c2:ab:a5:ed:32:aa:
41:7c:d1:75:76:fe:50:7f:79:be:56:2f:b0:c6:f1:
3a:9d:29:d7:af:f4:51:9e:f4:b0:22:34:2d:7a:e7:
bc:f8:c6:33:7b:a8:75:2f:37:67:5e:bb:a3:4d:4c:
c8:0c:1a:e7:e6:be:ac:dd:f3:c2:09:8f:1c:96:73:
cb:18:c7:19:3b:e4:a8:1d:c0:7d:91:3e:ac:16:f1:
23:78:18:c4:2a:bf:cf:2a:0f:85:f0:b4:1b:50:04:
6b:c2:c6:82:ab:55:a4:fc:8d:dd:fd:73:d4:33:09:
f4:3f:94:6b:7d:7c:27:ed:12:81:24:48:77:42:29:
5d:58:da:bb:98:07:cf:db:b6:5a:41:a5:2e:7a:a2:
69:c4:9f:9d:3f:56:f6:d8:75:f7:db:29:92:93:03:
46:bf:10:20:73:e3:58:0b:b4:e5:de:5c:06:14:0f:
8e:79:23:e5:d8:38:29:9e:ed:c2:4c:d0:fb:78:f4:
67:e3:50:13:99:65:4a:7a:74:78:74:88:8c:a9:4b:
c4:e8:27:8c:6b:bb:ce:3f:ec:ea:aa:2c:9f:83:64:
2e:fc:a6:19:c0:da:7e:87:5d:96:54:34:c1:59:a9:
f1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BE:44:D9:07:97:8A:46:02:A4:37:83:08:E8:81:9E:02:6D:80:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/557b21-3f55-4322-b1e3-a3f5a094b4a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/557b21-3f55-4322-b1e3-a3f5a094b4a4/1/Jb5E2QeXikYCpDeDCOiBngJtgOc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.160.0/22
IPv6:
2a0f:bb00::/29
Signature Algorithm: sha256WithRSAEncryption
50:b2:d4:12:3d:12:a8:08:77:8b:32:99:4d:6c:46:fc:1d:45:
21:b4:f2:d7:51:7c:03:e5:c7:c5:d1:d9:53:11:8f:e1:6b:c6:
70:a0:66:c8:06:0a:fe:f7:30:88:fd:48:2f:d6:67:9f:85:ab:
5b:f8:4d:d6:2b:b5:13:c4:99:c5:cd:1d:72:f3:24:3e:2a:bc:
c2:22:64:34:01:13:bc:d8:4b:d4:cc:ff:32:49:a4:3b:51:30:
a9:27:3a:25:47:f8:83:88:be:d1:a8:71:d8:9e:f3:a3:c5:a1:
ea:e5:19:f4:53:e3:a2:ad:4b:74:0f:4b:b6:e6:cd:9e:a2:bf:
87:ff:00:2a:f4:7a:8e:7d:75:64:fd:83:81:f7:9b:9f:b1:be:
16:58:8d:b1:a6:99:a7:34:b8:1d:c0:60:ca:bf:10:79:f9:b5:
3a:a7:a3:c7:a5:94:88:4f:ce:ba:4a:97:7e:24:78:5d:3b:8f:
ee:a2:d1:24:3e:3b:f0:89:cc:94:05:82:2c:93:c0:6f:26:85:
92:bf:1b:03:d9:51:63:7f:82:17:cb:9c:05:f5:84:a3:99:09:
65:ff:3c:d0:3c:fb:62:78:aa:92:3e:9b:4a:08:ad:21:b1:05:
d3:1f:0d:d4:d6:24:37:7f:0b:6d:f8:8e:c2:b9:fe:98:e2:96:
b1:58:22:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:01 2024 by rpki-client on console-ams.rpki-client.org