Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MO8YbCE1W5GVY2N5wPx-mmQr6Aw.cer
File: MO8YbCE1W5GVY2N5wPx-mmQr6Aw.cer (raw, json)
Hash identifier: L7oq139iUXfOrCq2rSHer87KxCD9rzKvWSnE/fOGJpM=
Subject key identifier: 30:EF:18:6C:21:35:5B:91:95:63:63:79:C0:FC:7E:9A:64:2B:E8:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0183184D64D3F5C1A9FB4C93E2EC05E0A3D5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/b2dfb3-39e1-412b-896a-48e502212c41/1/MO8YbCE1W5GVY2N5wPx-mmQr6Aw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/b2dfb3-39e1-412b-896a-48e502212c41/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 07 Sep 2022 14:14:28 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.37.60.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:18:4d:64:d3:f5:c1:a9:fb:4c:93:e2:ec:05:e0:a3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 7 14:14:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30ef186c21355b9195636379c0fc7e9a642be80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f8:b0:09:1a:f8:57:06:1e:77:a1:7e:96:1a:
9b:1e:b5:63:39:7b:f1:b3:2f:a4:c2:a4:5d:80:4c:
1a:7f:6b:e4:34:c6:27:9f:ea:2a:64:72:d2:dd:60:
94:0e:d3:38:5b:37:3b:aa:ed:4e:ce:64:d1:da:5a:
50:3d:85:0b:0d:9e:be:db:e3:85:63:b1:a6:3b:ad:
9c:9b:ad:f2:18:00:da:0e:f9:46:fb:e1:07:80:b5:
3a:12:1b:a8:fd:4b:18:5d:70:3a:a9:37:f1:a8:61:
08:1c:40:3c:01:f4:8a:97:62:6d:17:d2:74:fe:98:
18:f3:7b:f1:e7:3a:c4:6d:5e:75:9f:b4:56:71:48:
60:39:bd:f1:5f:de:d3:a5:0e:03:70:c4:d7:c2:d7:
97:ed:a4:4f:6a:7f:f1:f4:14:36:1f:93:96:8c:f0:
f4:cc:74:32:5f:3f:cd:c5:f5:56:c6:38:c0:3c:9b:
5a:55:34:41:bb:18:73:e8:73:6b:92:c3:e7:15:f6:
17:f8:d1:f4:7b:b8:10:a5:f9:5d:77:93:b9:be:bf:
90:4e:64:37:0b:c6:a0:68:25:69:e0:04:25:79:d6:
68:0a:37:14:61:5c:54:33:f1:52:db:a7:ba:24:f3:
19:b0:48:3e:ab:0d:05:02:2c:98:d4:a4:37:f8:12:
fc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EF:18:6C:21:35:5B:91:95:63:63:79:C0:FC:7E:9A:64:2B:E8:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b2dfb3-39e1-412b-896a-48e502212c41/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b2dfb3-39e1-412b-896a-48e502212c41/1/MO8YbCE1W5GVY2N5wPx-mmQr6Aw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.60.0/22
Signature Algorithm: sha256WithRSAEncryption
88:57:14:6c:2c:00:a6:39:4a:3d:f4:fa:88:40:b5:0a:8d:0e:
41:87:30:12:af:86:91:f8:3b:e9:68:02:c1:58:d3:11:d4:ed:
95:3a:a2:b3:c8:c6:7d:c0:b0:e0:b0:50:f4:07:4a:90:2d:95:
8b:f5:81:10:2a:cc:b2:aa:ef:3c:3a:46:78:18:f9:ff:c9:2f:
0e:61:9f:1f:7e:ca:91:64:10:e1:cb:a3:6b:fb:f1:72:f0:5e:
ce:b3:f1:74:4b:b5:8b:6b:83:98:63:a9:3d:a5:80:90:93:fb:
dd:de:d7:6d:07:b8:34:6c:fd:cb:c3:4c:17:9f:a9:36:df:c9:
71:6c:fc:6d:6b:d0:ac:f0:48:68:f6:60:55:29:cd:b0:df:8d:
13:e2:d0:af:ec:5d:16:70:b6:79:86:d6:9c:6f:44:49:da:07:
54:b2:ec:c0:aa:81:1e:59:3a:42:40:3c:55:e9:aa:2c:6c:bf:
79:f0:01:2c:6c:00:76:af:e2:fc:d1:48:9c:aa:21:fe:a4:fa:
d6:30:4c:58:b7:a3:3c:04:23:e0:d2:85:8a:8e:2b:9e:79:c0:
56:b1:ec:f3:60:eb:b2:6f:b4:92:51:66:8f:dc:e7:eb:a3:04:
da:a0:a6:00:bc:ff:f8:54:9d:55:e2:7c:7b:63:0e:5f:f6:e4:
01:84:11:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:15 2024 by rpki-client on console-fra.rpki-client.org