Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LpNuM60WfrFFOAMJGCSx8mmoohM.cer
File: LpNuM60WfrFFOAMJGCSx8mmoohM.cer (raw, json)
Hash identifier: 0FBeKW5k/IXTs8/gW9S8h8oFom4BHmPMbqK6Xdoze2g=
Subject key identifier: 2E:93:6E:33:AD:16:7E:B1:45:38:03:09:18:24:B1:F2:69:A8:A2:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9D65DF475E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/fbabbb-5e36-4b54-9335-3240ae5c3118/1/LpNuM60WfrFFOAMJGCSx8mmoohM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/fbabbb-5e36-4b54-9335-3240ae5c3118/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 04:02:42 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 194.49.7.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676018997086 (0x9d65df475e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:02:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e936e33ad167eb1453803091824b1f269a8a213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:c8:ec:dc:91:ad:90:1b:ba:ad:34:57:e5:
a7:4e:92:e0:f6:6b:66:09:d7:9b:6b:c1:f2:60:7e:
ee:92:a4:6f:59:d8:9c:de:69:fc:bc:4c:02:a8:d4:
d3:9e:b2:a3:8e:1b:10:7e:74:db:40:be:2c:7c:8a:
82:61:6a:87:49:20:ea:da:d9:0b:1e:ec:86:48:d1:
cb:d7:2b:74:07:e3:13:57:1f:e3:c7:30:56:57:7a:
79:d0:24:15:d2:cc:e1:2b:3a:07:32:e6:d9:25:aa:
3d:0e:e2:c7:ab:44:3e:a0:26:f5:dc:2f:16:2e:75:
1f:8f:a3:19:14:95:93:3d:8a:07:93:c1:ae:da:3f:
ce:6e:12:79:65:5f:3c:16:26:50:65:72:78:82:80:
a0:86:4b:43:1f:37:83:7d:43:03:27:b6:80:3c:9b:
c7:d7:aa:2f:e9:5b:c0:f9:97:61:49:df:f3:08:c3:
54:ca:7d:34:24:de:ae:c3:58:f0:ad:ac:cf:cc:f2:
1b:df:39:bf:2e:10:98:91:fe:d2:b0:71:56:a1:4c:
52:dc:88:23:63:2f:56:6f:0d:69:82:53:fb:48:e8:
e5:ae:40:f3:cb:97:45:2e:cc:11:51:d8:88:2e:89:
1e:4e:86:76:97:4d:0c:80:bd:23:c3:11:b7:84:15:
9e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:93:6E:33:AD:16:7E:B1:45:38:03:09:18:24:B1:F2:69:A8:A2:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fbabbb-5e36-4b54-9335-3240ae5c3118/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fbabbb-5e36-4b54-9335-3240ae5c3118/1/LpNuM60WfrFFOAMJGCSx8mmoohM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.7.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:af:b6:90:70:62:8e:31:c5:2a:07:c9:60:97:63:10:5f:f2:
8d:67:11:6f:bd:cf:52:fd:a7:98:29:0d:45:e3:41:e2:eb:aa:
e6:26:cd:a1:a5:1b:1f:f3:f2:70:72:f0:5b:0a:42:03:17:a8:
0a:7c:94:65:b5:4c:d6:39:e9:b7:7a:52:fe:ca:27:20:5e:0c:
1b:1e:d7:71:4b:50:55:4b:6a:bd:12:85:8c:7a:7d:e4:ef:11:
0a:6b:31:94:62:29:1e:de:6a:01:92:89:28:ca:cc:69:c3:be:
6b:54:c6:c2:24:22:1d:46:e5:be:86:2e:09:af:5e:19:e3:8e:
5a:f7:1b:79:66:ef:fb:fa:5c:2c:13:37:cd:ff:7a:b9:13:d9:
f6:38:5e:b2:9f:da:d5:b9:39:18:d5:91:9a:d8:bc:f0:d6:e1:
c7:ae:94:4f:c3:f1:9b:71:5d:b5:c9:ac:2d:b1:e1:0a:40:c7:
27:b2:31:9c:9b:4d:bb:e2:5e:4d:8a:ac:1a:a4:fb:90:5d:55:
bb:c6:5f:9d:6d:c8:11:4e:61:b6:6e:af:68:14:a0:b3:24:89:
df:5a:73:b0:23:18:3f:a6:22:03:f6:74:ba:fb:d0:fa:5a:f9:
25:f6:e0:97:d9:d4:ac:22:cb:ac:f3:35:40:d9:33:07:a2:b2:
2e:d5:a5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:44 2024 by rpki-client on console-ams.rpki-client.org