Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LTpTTBXXnkbxJhDhRggywkbO5VI.cer
File: LTpTTBXXnkbxJhDhRggywkbO5VI.cer (raw, json)
Hash identifier: pAi0l4yoxUFB2qp0UpXyRBQ/V9N9jQCGm/7ym80bnG0=
Subject key identifier: 2D:3A:53:4C:15:D7:9E:46:F1:26:10:E1:46:08:32:C2:46:CE:E5:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A78DB8F642
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/dcd690-dc34-42bc-b5e1-e07a8925cea9/1/LTpTTBXXnkbxJhDhRggywkbO5VI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/dcd690-dc34-42bc-b5e1-e07a8925cea9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:01:48 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.188.212.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 719637247554 (0xa78db8f642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:01:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d3a534c15d79e46f12610e1460832c246cee552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c6:15:a5:ea:ef:49:fa:f8:80:4a:76:7c:fc:
85:80:6d:a7:58:85:94:95:85:96:4c:7b:81:c7:f8:
12:a6:32:e0:20:6f:55:85:fc:31:fe:7c:48:a8:f7:
a7:01:5e:34:44:19:28:e1:49:a9:dc:62:1e:4f:9f:
59:20:28:ab:3a:4b:2a:f5:61:e8:f5:28:59:59:63:
63:73:7b:9b:c7:ec:57:ea:ac:79:a6:8b:c6:21:20:
93:c4:06:dd:20:e1:6f:44:d0:50:a4:69:c6:d9:8e:
60:5b:ad:ee:d6:67:bc:70:86:ef:ef:b5:7f:d4:20:
ec:6e:48:13:a0:77:4f:23:c9:17:2a:60:d1:bf:23:
18:c8:e5:ae:76:07:0f:2f:eb:ad:71:d1:7e:06:06:
fc:1d:c2:50:01:a0:ef:9a:7e:18:df:ac:3f:29:d0:
df:6e:4b:16:4c:b5:89:10:e3:54:aa:f9:37:09:ee:
47:46:87:d7:bb:8f:69:e2:0a:65:51:4e:49:4e:ef:
32:92:79:20:d6:f8:d9:95:80:df:ef:4f:5e:e9:45:
6b:3d:b4:02:44:10:ee:e0:06:d7:40:b3:17:de:9d:
ae:38:e3:18:4b:2c:cc:9d:8c:bc:06:bc:2e:c8:d9:
cc:eb:c1:64:17:30:cf:bf:85:01:45:f8:f3:34:ef:
d9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3A:53:4C:15:D7:9E:46:F1:26:10:E1:46:08:32:C2:46:CE:E5:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dcd690-dc34-42bc-b5e1-e07a8925cea9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dcd690-dc34-42bc-b5e1-e07a8925cea9/1/LTpTTBXXnkbxJhDhRggywkbO5VI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.212.0/22
Signature Algorithm: sha256WithRSAEncryption
39:03:1f:d7:3d:64:4c:b6:a5:17:ad:8a:fc:ec:e6:97:ef:07:
75:fb:60:38:a6:41:4b:96:07:f4:c2:47:a8:b7:14:74:5b:be:
96:8e:b9:9a:b8:f6:05:ec:f4:77:47:da:84:ee:ee:56:a5:0f:
87:20:ef:3d:8f:61:0e:dd:8c:8e:e9:06:08:82:c3:38:00:53:
20:42:6f:2a:2c:11:39:05:78:6a:fd:1b:5e:e9:e2:f0:84:ca:
7f:f7:9b:d6:a5:de:2e:55:58:86:f4:3e:c3:f6:ae:30:1b:57:
0f:68:a5:85:71:74:be:59:f8:6b:37:d6:16:a2:87:a1:0a:80:
46:c1:45:05:5f:d9:39:53:0e:0b:22:09:7f:f4:35:31:ba:f3:
90:f0:e5:f9:d2:15:f6:29:28:02:fe:d7:75:07:6d:05:ce:26:
25:2a:45:ba:be:ae:15:c6:41:e9:d2:de:b7:eb:c9:78:da:5f:
45:22:2e:1c:3d:71:c5:5d:dd:11:72:dd:97:ae:df:f1:54:46:
d1:c0:b6:cc:20:1b:9e:fb:37:62:d0:25:5d:f2:05:3d:a8:e6:
8f:c6:c3:05:d6:96:7b:1f:6f:69:47:89:72:f0:7a:b4:c5:39:
ce:57:ad:13:6e:ed:0c:f4:eb:2b:14:93:f1:97:5f:29:07:a1:
16:7a:b9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:37 2024 by rpki-client on console-ams.rpki-client.org