Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L6G5POZ7vhiMGz-RXU2-oIq_l_g.cer
File: L6G5POZ7vhiMGz-RXU2-oIq_l_g.cer (raw, json)
Hash identifier: AmQcJJ1pEmXC0Zn8ino2xOINJNRKktEPI0vfaiORqJg=
Subject key identifier: 2F:A1:B9:3C:E6:7B:BE:18:8C:1B:3F:91:5D:4D:BE:A0:8A:BF:97:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01852B078B1C1E1F5F67E86E227D8B15CFD4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/3f6f1e-2bd6-429a-a3e5-528f348b6401/1/L6G5POZ7vhiMGz-RXU2-oIq_l_g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/3f6f1e-2bd6-429a-a3e5-528f348b6401/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 19 Dec 2022 15:36:32 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 92.118.248.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2b:07:8b:1c:1e:1f:5f:67:e8:6e:22:7d:8b:15:cf:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 19 15:36:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fa1b93ce67bbe188c1b3f915d4dbea08abf97f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:9e:31:cd:51:75:8e:dd:76:93:78:78:c3:
14:32:2f:88:4c:32:19:ae:32:21:43:86:d0:5e:6b:
04:ea:4b:ab:97:18:f8:05:55:58:6e:81:5b:98:7e:
7c:fd:bc:f4:a3:e7:7d:23:d3:93:95:ff:93:d6:1f:
e9:cb:05:3f:0f:f8:a8:81:7a:80:c1:c8:4b:8f:4c:
84:c2:e8:ec:b9:05:30:9c:6c:27:b9:21:57:8f:59:
d8:a3:4e:ac:64:74:17:f8:56:7f:bb:d1:6b:54:86:
a6:d2:e2:16:53:75:2c:3c:5f:18:69:16:c0:36:e5:
21:9d:18:39:15:f2:75:04:d4:76:2f:02:26:0b:bf:
a7:69:5f:7e:ef:e1:3b:fa:a7:a2:26:1a:3b:ca:87:
c1:87:7c:38:d8:2a:7f:96:2d:81:63:64:1e:17:5c:
ff:e8:f6:6e:b1:23:83:30:df:1a:18:74:ee:91:49:
72:d1:ae:3d:76:73:07:2a:50:70:31:9e:41:ba:7f:
29:94:c2:0b:fc:c1:30:31:01:92:93:53:23:85:4e:
a1:ac:cd:d3:b0:09:b6:81:dc:34:b3:c6:eb:51:e3:
11:f0:a2:47:b0:e8:4c:64:28:6e:5d:95:18:6a:15:
f8:8a:27:eb:b9:b2:60:b6:8d:c5:07:cd:90:5e:52:
62:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A1:B9:3C:E6:7B:BE:18:8C:1B:3F:91:5D:4D:BE:A0:8A:BF:97:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3f6f1e-2bd6-429a-a3e5-528f348b6401/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3f6f1e-2bd6-429a-a3e5-528f348b6401/1/L6G5POZ7vhiMGz-RXU2-oIq_l_g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.248.0/22
Signature Algorithm: sha256WithRSAEncryption
48:04:b4:ef:ca:59:e3:a9:01:71:01:75:20:cc:c5:01:48:95:
2c:de:af:4a:53:b2:da:9f:66:54:9f:f8:70:1f:9b:98:da:bb:
43:22:43:9a:78:8a:32:3a:c0:17:c2:c3:b4:7a:2a:2e:3f:65:
46:2d:30:51:85:4b:70:27:fb:d5:5c:0e:05:45:96:d8:97:22:
d7:7c:51:31:29:72:ad:25:fd:55:7f:cb:18:ad:3d:eb:53:a8:
8d:68:b7:5d:c4:e0:a0:cf:43:31:25:28:2a:85:8b:f6:f8:9e:
ab:b3:43:92:28:88:4b:b2:70:00:8b:0f:48:49:93:8c:fa:c8:
ea:99:62:cf:84:ae:c7:c8:ff:41:95:f1:65:3c:af:bb:a8:4d:
dc:f1:4e:c6:8f:b1:75:6b:c2:e6:43:50:89:85:6a:2c:40:05:
98:22:de:33:3a:90:71:2d:30:62:a7:58:36:b4:ed:5f:46:17:
b2:c2:f7:21:dc:f6:f6:50:e1:a8:99:8a:7e:b1:8f:27:1a:0a:
6e:4f:03:10:3e:56:e8:5a:74:95:23:0a:a6:56:88:91:a5:69:
a7:3e:94:51:5e:7f:58:c6:6a:ee:12:ee:b6:20:0b:db:8b:6d:
2d:e2:1f:b6:85:60:77:cd:d0:04:f8:1c:97:bd:ad:2c:d5:4d:
4a:c8:7a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:30 2024 by rpki-client on console-ams.rpki-client.org