Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JrVZL7u2uqV8qLblVmEsbtjrjqw.cer
File: JrVZL7u2uqV8qLblVmEsbtjrjqw.cer (raw, json)
Hash identifier: +w2G9qfrm64Z+9NIibHamNYSICI73Pd7tJbGGmiKenU=
Subject key identifier: 26:B5:59:2F:BB:B6:BA:A5:7C:A8:B6:E5:56:61:2C:6E:D8:EB:8E:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 996A5ED7E2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d194a-74ac-4d5b-ad3d-39dc6a2ed219/1/JrVZL7u2uqV8qLblVmEsbtjrjqw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d194a-74ac-4d5b-ad3d-39dc6a2ed219/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:56:39 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 195.149.79.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658914596834 (0x996a5ed7e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:56:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26b5592fbbb6baa57ca8b6e556612c6ed8eb8eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:3c:99:7e:d3:ba:bf:7b:9e:75:83:e3:51:
00:38:5f:7c:3f:95:44:6b:a5:be:b5:d5:70:b2:63:
36:fc:7f:bc:d9:40:3c:cb:5b:5b:69:a2:fa:14:7c:
61:c5:3f:69:ed:8c:c5:7e:04:8c:fb:79:48:d1:ad:
81:d6:dd:1f:1e:d3:21:c3:75:6c:c2:ef:27:e2:c7:
61:b0:33:85:c6:65:29:4a:cf:8e:db:9c:64:60:ee:
b5:b7:2f:46:44:16:da:a5:23:36:11:17:57:2e:e4:
db:cd:3f:68:5b:a2:a7:7c:8b:65:79:c6:3b:86:d9:
3d:59:20:c9:58:f6:d5:7d:ab:47:fc:93:36:e7:2a:
3c:b7:1a:98:8a:16:4d:d1:db:d1:48:48:79:55:86:
b3:8f:b9:25:26:59:b1:4b:9d:9e:b6:69:53:5b:70:
9d:a4:96:46:96:2b:a3:ff:b1:ff:7d:73:f6:a6:73:
49:b2:a1:23:58:58:c0:26:5c:ec:f2:99:3d:e4:38:
38:4c:e6:9b:f8:19:bd:ee:56:2c:2c:46:00:da:53:
62:c5:d0:f6:70:f7:99:7c:e3:72:25:73:86:28:ec:
0c:2d:76:a8:f9:1b:5d:f4:ff:f7:81:34:36:d6:5f:
7f:bc:e8:a6:53:c0:cb:d3:ea:52:45:0e:d3:50:fa:
81:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B5:59:2F:BB:B6:BA:A5:7C:A8:B6:E5:56:61:2C:6E:D8:EB:8E:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d194a-74ac-4d5b-ad3d-39dc6a2ed219/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d194a-74ac-4d5b-ad3d-39dc6a2ed219/1/JrVZL7u2uqV8qLblVmEsbtjrjqw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.79.0/24
Signature Algorithm: sha256WithRSAEncryption
22:c9:e3:16:51:9c:f5:04:15:99:4f:bf:92:04:30:fd:e1:50:
bd:fb:9c:b4:33:5a:82:a8:5c:fb:91:6c:0a:4d:21:d3:bf:fe:
53:e4:07:ba:76:2f:02:78:8f:16:97:7a:b0:e4:e4:e3:c6:6b:
19:88:93:88:f4:19:8d:cd:d0:9e:88:69:50:28:76:eb:ff:23:
a0:47:5e:11:2b:ba:23:5d:2a:12:35:02:65:ae:61:59:38:d0:
04:3a:1f:87:89:5e:08:f6:38:d8:f9:b6:dc:ad:96:c6:1e:eb:
b0:85:eb:6c:56:a7:69:c9:48:7d:cd:92:5b:21:c2:26:8a:31:
e7:7e:e1:b9:7b:f5:ff:f4:7c:ce:d7:70:42:c7:30:11:fb:82:
03:9e:ff:77:5b:09:e7:33:60:53:9e:ed:9f:e6:2a:03:17:ee:
de:26:16:b6:a7:67:5f:14:69:20:ba:2d:9d:6f:cb:8e:ae:f9:
24:30:15:77:96:06:09:f9:f3:c8:4e:48:b3:cc:b3:45:dd:91:
c7:f5:00:da:0b:e0:a2:f3:c5:aa:f6:1e:c5:59:59:5e:bc:05:
75:4e:64:28:c7:05:0c:43:7d:07:98:ef:5a:01:40:c3:80:9c:
b6:86:54:a9:da:d1:be:f0:4d:28:d2:d9:f0:6f:74:28:9e:54:
e7:c3:ca:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:07 2024 by rpki-client on console-ams.rpki-client.org