Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MigtNfrMykNwcCz_AvIZKlQN0yg.cer
File: MigtNfrMykNwcCz_AvIZKlQN0yg.cer (raw, json)
Hash identifier: SWut+mcKizRfm4n5nFHIbYMNrgRa4HXpwRArX8z9E8k=
Subject key identifier: 32:28:2D:35:FA:CC:CA:43:70:70:2C:FF:02:F2:19:2A:54:0D:D3:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FAD733BB81B56E82092965A4F82127
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/1f620c-d0bd-41e0-b04d-a72010b4ce94/1/MigtNfrMykNwcCz_AvIZKlQN0yg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/1f620c-d0bd-41e0-b04d-a72010b4ce94/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:36:05 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 213.232.204.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fa:d7:33:bb:81:b5:6e:82:09:29:65:a4:f8:21:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:36:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32282d35faccca4370702cff02f2192a540dd328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c2:4d:18:c6:c9:6d:12:d3:97:96:d5:2f:1b:
23:71:05:b3:dc:a3:fb:cd:80:62:bf:83:b0:59:f2:
c2:9b:85:9d:5a:af:59:11:d8:9a:33:60:fe:dd:5c:
f4:2f:99:38:35:0e:bf:4d:d7:f2:1e:eb:b0:da:c2:
d0:2b:e4:83:9b:94:a8:62:a6:6a:83:77:be:5c:11:
84:01:6e:9b:2d:59:c5:7b:29:1c:6f:a8:ce:d1:36:
eb:82:55:e1:57:cf:55:1b:80:8c:63:e9:8d:c5:62:
96:2b:d3:cc:88:44:f6:11:02:96:dd:db:17:d3:7e:
7e:30:11:c9:80:1a:8e:54:61:fd:41:5c:5e:68:b5:
aa:ee:92:23:44:48:9d:b1:f5:e2:e0:76:96:8a:01:
d1:92:f3:ae:47:d7:82:ea:ad:66:db:af:a5:d0:61:
61:06:4e:a5:b4:68:7a:79:fa:9b:1f:0a:7d:ac:05:
05:6d:21:78:5d:54:6c:fb:5e:91:5c:1c:62:63:7f:
64:9b:88:23:50:ec:72:ab:c0:6b:e2:ae:1a:e5:d7:
0e:98:85:e0:e2:9e:90:27:d9:aa:4f:0d:22:50:04:
40:cb:c0:e4:3e:51:94:f2:b6:77:35:d4:f4:fa:fc:
73:01:2e:eb:a8:64:b8:6b:b7:72:58:a7:59:ea:49:
b6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:28:2D:35:FA:CC:CA:43:70:70:2C:FF:02:F2:19:2A:54:0D:D3:28
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1f620c-d0bd-41e0-b04d-a72010b4ce94/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1f620c-d0bd-41e0-b04d-a72010b4ce94/1/MigtNfrMykNwcCz_AvIZKlQN0yg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.204.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:bb:b0:38:aa:30:9c:81:67:14:a0:1c:4e:9a:42:1b:03:8a:
e7:6d:99:85:b7:df:08:f1:d2:47:20:54:b7:f4:11:8d:66:a4:
da:76:f5:df:23:b5:1d:9f:7a:0e:22:24:4b:c9:4a:27:98:b7:
1b:f7:52:4f:cd:04:d5:21:e8:53:d5:ca:ef:c8:4b:0e:9d:6b:
6e:49:b7:ef:23:2f:d6:12:78:6c:74:42:e6:a4:ce:9f:d0:b2:
bc:61:44:1b:7d:85:96:a7:9d:51:e6:29:6d:21:63:32:c0:60:
a6:eb:cb:81:3c:7c:b3:00:1b:3b:ed:00:e0:34:bf:1f:25:5d:
ff:7a:50:bc:9d:7d:c6:2d:5d:cc:f2:e2:40:31:2a:6f:10:34:
45:89:d9:0f:1d:7a:b4:ee:43:ed:62:12:63:4b:df:cb:1a:f6:
f8:73:1b:ad:18:d5:85:66:ae:5f:80:4f:e9:db:ae:4b:57:96:
b3:e6:16:73:92:bd:53:67:84:34:66:92:10:57:92:61:76:f6:
27:18:72:27:32:29:e9:09:8c:3a:37:b6:f8:78:27:15:26:fd:
0a:49:2f:c4:30:f1:3a:5f:ed:36:84:e9:ca:a1:12:c0:b8:cb:
94:1e:32:ac:ed:bd:60:ff:3d:54:d6:a1:17:59:c0:fb:0f:56:
84:2b:8e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:54 2025 by rpki-client