Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KshhoepNI8n_ZD-DD1hfcX0BCZE.cer
File: KshhoepNI8n_ZD-DD1hfcX0BCZE.cer (raw, json)
Hash identifier: HFe3kExS/3lX8x73150jd1RSNW5VsEyfIJ79mjBPrl4=
Subject key identifier: 2A:C8:61:A1:EA:4D:23:C9:FF:64:3F:83:0F:58:5F:71:7D:01:09:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9C3F818B33
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/6e8ca9-3c97-461a-863e-b8ddb29565fb/1/KshhoepNI8n_ZD-DD1hfcX0BCZE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/6e8ca9-3c97-461a-863e-b8ddb29565fb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:01:36 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.84.20.0/22
IP: 2a0e:9380::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671080352563 (0x9c3f818b33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:01:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ac861a1ea4d23c9ff643f830f585f717d010991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2f:9b:24:4a:78:c3:f1:99:4b:b1:35:71:18:
b6:46:97:9d:38:a0:dd:d0:24:a0:5c:ec:cb:20:18:
d7:e1:b0:85:fb:ce:86:8f:e1:56:19:d7:ce:fc:80:
55:a1:b2:54:b8:7e:0d:f3:4c:fb:7e:9a:28:30:21:
cb:1a:11:5c:75:41:84:81:19:e8:4c:b7:50:5c:67:
65:81:c0:a2:aa:ef:4d:25:0b:27:c6:a1:77:91:b2:
fc:6c:d9:00:fd:f8:dd:ca:42:dd:92:71:13:fb:bf:
17:0c:04:d2:5d:9e:83:e6:fe:8d:5e:b6:93:61:3e:
8d:d9:02:19:c8:33:76:d4:95:2b:3d:70:59:2b:6a:
f1:ac:9e:a4:73:18:b2:45:29:eb:85:2a:21:8e:ec:
bb:32:c5:1e:06:3e:33:52:66:51:70:1f:f6:b1:48:
23:d0:2c:65:68:18:ef:64:32:18:65:67:ce:c4:06:
08:f8:3d:00:e1:a6:cd:87:41:c0:ff:ac:c0:11:18:
8e:47:8b:b9:e5:0a:2b:da:e3:79:01:3f:20:30:ee:
4e:b8:37:f9:00:f0:ac:7a:a3:fd:44:2d:2e:42:27:
ab:57:7c:22:75:e7:de:2d:07:0f:6e:db:74:cd:f5:
55:9f:c6:8d:2b:03:6f:a4:03:4d:91:f8:da:ea:c4:
14:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C8:61:A1:EA:4D:23:C9:FF:64:3F:83:0F:58:5F:71:7D:01:09:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6e8ca9-3c97-461a-863e-b8ddb29565fb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6e8ca9-3c97-461a-863e-b8ddb29565fb/1/KshhoepNI8n_ZD-DD1hfcX0BCZE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.20.0/22
IPv6:
2a0e:9380::/29
Signature Algorithm: sha256WithRSAEncryption
87:88:61:3a:da:e8:8d:57:ee:43:4b:09:62:d1:dd:05:61:c3:
a6:b5:7e:fa:9d:2d:3b:46:d4:e5:d5:06:5b:81:a4:f6:3e:47:
81:cd:7d:5e:75:2f:65:56:4d:9c:df:3c:66:e5:11:08:dd:ac:
a4:91:3c:f5:ef:39:9a:4c:6b:d0:d4:32:f5:58:81:b1:53:84:
ab:97:81:a2:96:b9:7a:25:58:04:e5:67:f2:07:b4:34:7c:de:
9b:cd:32:5f:9c:26:75:6d:fa:7f:d5:8d:85:11:b4:84:68:fd:
f0:f0:a6:2d:0e:32:5e:b9:56:12:4f:2c:f8:58:4a:c5:f1:79:
eb:b1:5f:08:10:ac:cf:9d:a7:45:74:34:ae:d7:b2:28:b2:84:
1b:93:17:9d:ee:80:90:45:58:8f:a2:2d:e5:ee:2c:c3:8c:c0:
17:9e:f5:96:92:5a:29:b8:a1:a8:01:9d:2d:35:59:ce:4d:60:
8e:0e:47:eb:a8:a2:aa:42:ef:93:97:ce:84:b9:ba:6a:95:04:
bd:d8:cd:84:88:0c:48:06:23:0e:4e:06:d5:74:15:34:6a:ee:
d2:8a:d9:ed:f9:29:5b:86:2e:f3:68:2b:81:15:3d:e6:a8:28:
da:64:58:49:a7:38:a3:09:bb:80:96:9d:34:33:3c:90:f6:44:
d8:4b:a4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:26 2024 by rpki-client on console-ams.rpki-client.org