Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LIrm7O3FTvbzxnvmBj3zPlOfqJc.cer
File: LIrm7O3FTvbzxnvmBj3zPlOfqJc.cer (raw, json)
Hash identifier: B41gtmo8Bpv9S/0I8hFyrQkbOlai5unhHDTYnb1/e0A=
Subject key identifier: 2C:8A:E6:EC:ED:C5:4E:F6:F3:C6:7B:E6:06:3D:F3:3E:53:9F:A8:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A6DCC1F921
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/a8adbe-c275-410d-8eb9-8efc6a4bb781/1/LIrm7O3FTvbzxnvmBj3zPlOfqJc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/a8adbe-c275-410d-8eb9-8efc6a4bb781/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:06:56 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 79.110.232.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 716668270881 (0xa6dcc1f921)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:06:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c8ae6ecedc54ef6f3c67be6063df33e539fa897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e4:02:11:0a:fc:c4:ca:31:e6:72:39:15:84:
9e:e0:94:93:1f:5f:7e:04:c8:cd:27:5f:3d:d0:70:
b6:5f:66:38:97:ae:48:80:36:8c:e0:b4:ac:05:8a:
42:49:c7:4d:38:09:9a:cf:a2:cb:aa:7b:11:57:09:
45:6f:d6:a6:5b:52:57:d0:f1:4e:b9:cd:ce:49:c2:
d9:12:86:63:f0:d7:1d:c6:0d:1c:9b:19:e6:85:3a:
c1:74:4e:35:09:26:db:da:ef:1e:a4:db:34:19:df:
9b:e5:ca:31:72:3d:60:9c:73:de:b7:a3:5d:11:af:
7f:8e:32:c1:4b:cb:98:66:f4:33:ab:84:d3:e6:f6:
05:ec:04:61:15:de:ca:9d:37:43:23:24:a9:cf:88:
e7:9f:ac:3f:a9:3a:cd:b5:84:59:e1:d3:e4:dd:20:
fb:53:fe:11:da:0b:74:8f:96:7a:93:f6:28:cf:40:
93:99:1a:79:0d:a4:90:e0:6f:ae:2e:6e:de:1a:65:
0e:34:3f:9f:cb:f5:79:20:47:43:c3:ca:57:08:6f:
99:a0:1b:79:10:c3:08:c9:17:10:d0:85:67:df:86:
dd:46:a9:96:7b:76:84:12:3c:27:38:7b:48:1c:f2:
f0:31:c5:ea:86:35:66:d8:53:b8:11:ad:39:88:aa:
d2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8A:E6:EC:ED:C5:4E:F6:F3:C6:7B:E6:06:3D:F3:3E:53:9F:A8:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a8adbe-c275-410d-8eb9-8efc6a4bb781/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a8adbe-c275-410d-8eb9-8efc6a4bb781/1/LIrm7O3FTvbzxnvmBj3zPlOfqJc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.232.0/24
Signature Algorithm: sha256WithRSAEncryption
20:24:58:5d:63:c2:14:97:0e:94:9a:c9:2a:fd:b3:08:0c:20:
d6:30:e9:90:9e:8b:9a:c8:ef:82:0e:d6:8b:69:fc:c0:83:99:
86:eb:2c:5a:14:59:62:4c:96:73:d2:5e:89:f4:98:90:1e:13:
a1:45:1d:75:34:04:20:75:51:2c:4e:2d:ef:61:93:10:67:7f:
38:bc:40:27:df:5d:1a:66:d7:23:bb:62:26:76:b2:10:ec:1d:
a4:d2:37:3e:0d:0c:05:19:f9:e3:19:1f:ad:ca:ee:4d:09:a6:
57:78:92:87:67:09:69:1b:ce:40:78:d7:99:87:d0:9d:2f:a7:
b8:b5:29:0d:42:fe:07:39:8a:06:31:bd:f5:d3:b6:1e:28:90:
25:12:8d:fe:18:c9:aa:4d:0b:6d:73:a7:40:a6:0d:46:36:ad:
1b:14:1a:d1:77:a7:d7:40:2c:1d:0d:ab:51:cd:d1:b5:7f:f8:
15:60:1b:33:40:3f:cb:dc:62:34:f4:a6:a2:df:bf:ff:1a:7f:
21:f3:0b:78:df:7b:13:b8:9f:d2:f3:98:9e:8e:26:32:9b:ad:
51:cc:eb:ae:33:d5:fd:04:99:78:e2:67:60:13:73:63:1f:09:
ee:1c:c9:4a:1d:46:32:99:26:f2:5c:cb:dd:38:35:52:17:9e:
7a:09:61:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:59 2024 by rpki-client on console-fra.rpki-client.org