Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KxMneSEgMzuzU-t5a69KUNmylNs.cer
File: KxMneSEgMzuzU-t5a69KUNmylNs.cer (raw, json)
Hash identifier: 8Px/k/nRHA2XgqiG1/x2GA+cI/j1gFlmL0pfLSXkVEk=
Subject key identifier: 2B:13:27:79:21:20:33:3B:B3:53:EB:79:6B:AF:4A:50:D9:B2:94:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9C233F7895
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/8ff995-c806-4f54-a74c-77e14e8e4761/1/KxMneSEgMzuzU-t5a69KUNmylNs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/8ff995-c806-4f54-a74c-77e14e8e4761/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:59:55 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 194.153.78.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670606260373 (0x9c233f7895)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:59:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b1327792120333bb353eb796baf4a50d9b294db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:d1:97:06:ea:73:b0:fb:75:5f:25:a7:c6:
0f:0e:e4:05:21:0e:32:13:de:59:6e:6f:fc:d5:62:
22:24:f0:5d:95:07:e9:51:18:aa:11:2a:e9:03:8d:
ce:fc:da:60:c2:d1:e3:2f:df:16:ff:c7:f6:3a:77:
f6:ce:5a:83:e6:fd:06:40:40:f1:80:53:57:77:f1:
c6:59:81:82:e3:55:32:8b:f3:62:68:06:7c:90:0d:
f2:15:d3:12:e8:2d:b8:d3:fd:67:01:a0:30:92:30:
f3:e0:b9:33:ca:ed:73:c5:14:e1:c3:b7:25:57:f7:
a1:50:bd:84:f8:16:77:d7:63:29:08:63:f9:c3:68:
49:ec:0f:9f:f7:34:b4:87:70:c2:08:e9:8c:ce:c3:
63:a0:2d:e2:48:0c:3c:3e:8c:0d:78:cc:b5:2d:fe:
a4:cc:bc:9a:a5:bb:86:c0:e3:d2:f7:9a:e2:5a:0f:
63:a2:c7:58:f6:15:58:5c:50:73:1f:36:00:d9:f2:
eb:ae:f9:f6:d0:0c:cc:1b:94:46:e1:51:57:98:a3:
5b:38:d0:0e:a5:88:b5:91:d8:d8:e2:15:89:3e:8b:
02:75:dc:8b:ef:76:d7:39:ec:27:d3:68:d3:98:25:
fd:f5:1e:ec:0a:34:06:ae:95:00:ff:82:54:b3:99:
67:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:13:27:79:21:20:33:3B:B3:53:EB:79:6B:AF:4A:50:D9:B2:94:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8ff995-c806-4f54-a74c-77e14e8e4761/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8ff995-c806-4f54-a74c-77e14e8e4761/1/KxMneSEgMzuzU-t5a69KUNmylNs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.78.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:03:f0:15:14:e1:2a:8e:17:bf:25:ef:25:47:6e:9d:36:d7:
5e:b0:6b:42:31:c7:0d:82:05:eb:52:9f:e8:03:78:c4:2f:ed:
68:f8:79:06:84:6f:c4:01:7a:a2:14:2b:59:8d:73:5f:cb:21:
84:24:0e:04:1a:58:79:4b:fe:9a:71:75:2d:83:e8:15:38:f6:
ad:6f:6e:bc:1a:28:8b:34:13:22:94:51:d3:62:c0:99:fa:20:
9f:10:15:d1:77:08:fe:dc:65:25:f9:09:89:07:d8:da:ca:d1:
3e:17:8c:7d:00:c5:3a:f0:35:7c:85:cd:39:0a:1c:66:d8:1e:
c0:49:e5:c1:7d:db:60:f9:a5:e7:2d:4c:74:6e:f1:b1:af:2e:
74:c9:db:73:80:90:61:60:95:d2:e7:74:d7:4e:5f:86:b2:bb:
51:bb:8c:14:6e:1b:c8:80:10:77:07:63:3e:5d:55:dc:ee:fc:
ca:cb:bf:b2:ad:62:0c:30:df:03:9e:6f:37:0b:3f:fe:33:ab:
67:12:35:1d:c8:20:60:96:93:f6:77:35:94:69:64:1e:4f:71:
9b:c1:fb:92:46:00:ad:7a:32:77:79:37:5c:df:9e:9b:d9:46:
af:27:24:78:78:f2:01:de:21:9d:04:af:62:47:82:ef:e8:70:
d9:82:27:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:27 2024 by rpki-client on console-ams.rpki-client.org