Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jic4wNLa4Es8nsVQSFL3rXTOIVI.cer
File: Jic4wNLa4Es8nsVQSFL3rXTOIVI.cer (raw, json)
Hash identifier: l7E9gzJMFjKmF7flshXLzNkY7aA2u8lHt/rUFc3cZq4=
Subject key identifier: 26:27:38:C0:D2:DA:E0:4B:3C:9E:C5:50:48:52:F7:AD:74:CE:21:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AB0CCDEA92
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/Jic4wNLa4Es8nsVQSFL3rXTOIVI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 16:04:59 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 85.209.132.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 734654229138 (0xab0ccdea92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:04:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=262738c0d2dae04b3c9ec5504852f7ad74ce2152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2c:c3:ca:a2:4b:b2:28:5d:a1:bb:40:84:1f:
2c:fb:94:e5:8b:37:ba:c0:a7:f9:94:0f:b7:d1:dc:
38:87:09:e8:7f:4b:e8:b1:13:7a:b5:20:c0:ae:a5:
88:95:c9:ca:e5:75:3a:72:88:31:10:99:70:ff:86:
b8:89:e8:38:37:5a:4c:78:45:5a:cf:1d:d4:81:82:
00:3e:7b:85:ae:73:78:48:bb:ae:7a:3f:12:77:fd:
bb:77:cb:f8:ea:cb:1d:a6:df:d8:24:f8:78:e0:1d:
f0:51:63:c4:2e:9c:87:ca:56:f7:c8:2b:f3:4a:00:
55:6f:6b:e2:69:96:f2:aa:50:2e:2d:5a:87:48:3b:
f2:5e:90:66:2f:aa:f3:f2:b2:4a:b4:60:46:25:46:
23:14:c3:15:de:70:d1:8c:6a:79:7d:c9:e5:1b:99:
dd:fb:31:91:4b:45:75:16:4f:92:a6:22:b8:94:5c:
ff:56:b7:51:eb:84:51:e2:c0:81:7c:aa:67:61:83:
ea:7c:06:f8:42:74:a3:e9:40:0c:0d:ec:38:cc:4c:
2a:65:1a:ee:2a:73:54:d4:db:94:10:a2:34:91:ba:
99:5b:77:b7:2d:22:8a:02:d0:6b:b1:c7:7a:2e:11:
16:47:ce:01:e2:18:9b:90:cd:ce:2e:40:96:19:b1:
fe:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:27:38:C0:D2:DA:E0:4B:3C:9E:C5:50:48:52:F7:AD:74:CE:21:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/Jic4wNLa4Es8nsVQSFL3rXTOIVI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.132.0/22
Signature Algorithm: sha256WithRSAEncryption
65:14:b1:39:22:98:0e:67:7a:be:0b:08:09:78:9b:2f:05:03:
a8:61:60:38:a7:e1:4c:37:2e:67:b2:88:fa:71:21:e1:eb:50:
9a:51:d1:7b:10:d5:ed:46:79:10:9a:79:1a:0b:28:a4:2c:72:
08:56:13:3d:96:f2:2b:12:1d:2b:05:2c:47:cb:e7:fe:37:58:
7c:8a:97:5b:7a:ff:8f:72:69:11:24:03:a9:4e:04:10:5a:ca:
ad:e1:1d:25:3c:4a:0c:7f:74:e8:79:37:e7:d0:11:45:6f:e6:
42:d6:bf:1e:fd:75:f1:87:65:48:ea:c1:33:07:7f:26:50:33:
86:39:ab:36:81:86:7b:24:3b:ff:48:2f:7b:49:b1:58:b8:5d:
c0:f7:34:60:9e:9c:c4:93:de:b3:f3:55:63:b7:09:fe:c8:48:
57:21:63:60:28:23:8d:12:8c:e9:f0:d8:8e:7f:b8:6b:83:5c:
9f:02:cd:c1:f8:a2:35:84:92:b4:0d:ff:67:60:11:89:9e:34:
e4:f0:4d:24:9b:3d:09:49:b0:c0:fe:79:65:56:71:82:2b:2b:
16:32:bf:dc:94:c3:61:62:10:e4:a4:9a:07:4a:48:7a:e6:ba:
c1:87:4a:41:d2:0a:97:dc:04:ec:18:cf:a3:0d:5e:90:31:52:
fd:e8:41:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:39 2024 by rpki-client on console-fra.rpki-client.org