Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LDVK6LELY9EMG3BHjPXA9U3egh0.cer
File: LDVK6LELY9EMG3BHjPXA9U3egh0.cer (raw, json)
Hash identifier: o6QNqEGXEJp0lbFcvwBp/34vkxzYPA3IHa4AbOEJd6c=
Subject key identifier: 2C:35:4A:E8:B1:0B:63:D1:0C:1B:70:47:8C:F5:C0:F5:4D:DE:82:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B0F76B62F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/34a8f4-63a9-49e3-b094-8b6d5bc7832a/1/LDVK6LELY9EMG3BHjPXA9U3egh0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/34a8f4-63a9-49e3-b094-8b6d5bc7832a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 28 Apr 2022 12:40:15 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 194.88.30.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 760065254134 (0xb0f76b62f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 28 12:40:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c354ae8b10b63d10c1b70478cf5c0f54dde821d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f0:ed:38:6f:7f:bc:70:bc:73:21:41:1f:dd:
3d:8e:a1:73:fe:17:0b:dd:03:d0:50:fa:b4:d6:06:
56:0a:dd:79:cb:44:db:68:fa:b4:87:68:03:ed:71:
23:f0:6e:46:7b:5e:39:91:e3:33:5a:1e:e7:b3:1a:
e8:26:44:54:f9:e4:1b:d5:0e:8d:4a:41:9e:ff:4a:
13:db:14:b7:96:78:56:a8:d2:d0:f6:d5:5f:e7:9d:
94:19:47:40:15:95:95:1c:f1:13:1b:74:e0:6e:a2:
c9:1b:8d:de:c5:6f:d8:e8:dd:26:a8:0f:da:78:b5:
53:b1:31:ee:64:1b:62:02:f0:21:cb:60:6c:86:4f:
d4:e9:e0:d5:b2:fc:16:19:b4:97:3e:84:37:06:14:
c7:36:85:ac:83:26:80:29:9e:d2:27:9c:e3:9f:56:
3c:b3:86:11:7a:1d:0d:1c:cb:55:fc:e8:c4:f2:fc:
5f:d7:fb:5e:0b:06:27:55:51:1c:6a:6c:d8:33:10:
56:aa:91:2d:03:e2:ea:86:eb:2d:87:43:73:d9:47:
18:83:32:2d:ab:4f:93:4f:53:9e:6f:2d:4b:29:a7:
1a:02:25:33:78:0e:71:07:41:1a:ab:c1:11:ba:a1:
0b:7a:eb:71:99:96:5e:2a:e2:49:9c:b4:e8:60:50:
67:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:35:4A:E8:B1:0B:63:D1:0C:1B:70:47:8C:F5:C0:F5:4D:DE:82:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/34a8f4-63a9-49e3-b094-8b6d5bc7832a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/34a8f4-63a9-49e3-b094-8b6d5bc7832a/1/LDVK6LELY9EMG3BHjPXA9U3egh0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.30.0/23
Signature Algorithm: sha256WithRSAEncryption
74:d4:d9:0c:bd:66:0a:39:88:a9:b7:93:44:32:3b:bb:2c:1a:
b6:d5:77:3d:e5:49:ed:6e:87:62:b1:bc:9d:d5:a1:ba:84:18:
a1:e7:1e:48:8d:14:98:e1:a5:80:0e:40:ae:dd:33:6d:da:ff:
fe:87:52:38:da:4b:b1:df:b6:e7:24:38:5f:3d:fa:a1:53:16:
26:6e:8c:db:27:aa:b6:1c:ee:5d:b6:8d:76:d3:4e:ad:ff:3d:
18:5e:79:7a:01:66:8d:57:2e:f3:47:fd:42:88:e0:29:34:6d:
bb:8d:64:b1:5c:0f:d2:bb:d8:7c:1f:dd:b4:29:ed:e0:a4:ea:
85:68:43:38:e6:1b:de:f2:87:4c:cf:7a:9f:26:a8:eb:4d:9b:
d1:28:6c:31:a9:fa:8f:6a:30:e9:a1:34:32:7f:a1:67:a7:0e:
44:b5:4b:ee:54:93:19:7c:85:67:83:b0:7c:2a:38:fc:90:b7:
36:de:f5:f9:3c:a4:be:f0:e6:cd:0c:86:12:07:50:82:27:da:
ec:35:44:18:91:39:51:8f:14:2a:59:ab:6c:14:c6:1b:7a:66:
df:83:56:50:9c:30:72:35:b3:35:1e:8c:16:de:64:1c:c7:1c:
f7:c4:eb:5f:7c:65:ef:59:21:87:06:a0:f1:84:eb:17:20:66:
1b:ca:1c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:32 2024 by rpki-client on console-ams.rpki-client.org