Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NNY6Ew-aWkFw3uQkTp69lVjgepk.cer
File: NNY6Ew-aWkFw3uQkTp69lVjgepk.cer (raw, json)
Hash identifier: l1KappEuKF0FOxeGWZgRH6MO44wMYkaGmgiixlDA+PI=
Subject key identifier: 34:D6:3A:13:0F:9A:5A:41:70:DE:E4:24:4E:9E:BD:95:58:E0:7A:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A662F72995
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/94f085-4126-44df-acd5-b3be18876089/1/NNY6Ew-aWkFw3uQkTp69lVjgepk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/94f085-4126-44df-acd5-b3be18876089/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:01:57 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.128.148.0/22
IP: 2a06:cfc0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 714624936341 (0xa662f72995)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:01:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34d63a130f9a5a4170dee4244e9ebd9558e07a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:20:9d:5b:d7:d5:5d:20:27:24:2f:35:8f:12:
cc:4b:90:47:dd:dd:e4:51:a6:62:81:b5:91:48:57:
4d:72:6a:74:61:e5:65:c9:d6:04:e2:64:65:22:25:
2e:b0:d3:84:7a:ca:0f:9d:22:27:bc:2b:bc:25:a4:
0c:c1:fb:e5:14:dc:88:ce:1b:2b:f1:1c:9e:fd:88:
6f:35:9b:3c:8f:f9:fe:30:42:4b:8a:63:89:64:c1:
6e:09:73:6c:cc:76:51:e4:3a:63:57:dd:5d:e5:fd:
78:72:38:f5:b9:3b:21:5f:0e:6b:09:05:bb:e4:85:
33:2d:34:b2:5e:3a:9e:05:44:c5:6e:ef:08:4f:43:
23:0d:04:28:ca:b6:a5:cc:0f:29:7c:1b:65:8f:1e:
a6:86:86:12:81:6f:c4:8f:07:f7:11:ea:72:44:ea:
fb:23:9b:20:17:55:d5:e9:2b:ea:b0:ee:58:5e:98:
d9:5a:c8:14:9c:f1:25:cc:95:01:96:41:32:b8:cf:
52:27:88:ef:5b:36:6d:ce:ed:a3:e7:8b:c7:c6:e0:
21:fc:cb:9d:9d:1f:ee:32:1f:30:73:d4:ae:e9:04:
8d:bc:28:9e:c6:0a:16:13:f1:66:74:bb:5c:d3:99:
0c:8e:8d:61:5a:ca:bb:6b:24:d3:9f:95:48:89:55:
76:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D6:3A:13:0F:9A:5A:41:70:DE:E4:24:4E:9E:BD:95:58:E0:7A:99
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/94f085-4126-44df-acd5-b3be18876089/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/94f085-4126-44df-acd5-b3be18876089/1/NNY6Ew-aWkFw3uQkTp69lVjgepk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.148.0/22
IPv6:
2a06:cfc0::/29
Signature Algorithm: sha256WithRSAEncryption
4b:5f:fe:83:44:29:6e:f9:96:f0:68:d6:fd:4b:47:b4:42:38:
56:a3:70:b9:70:4b:a4:e8:f6:06:8c:f8:fc:b9:00:8e:05:e2:
de:f6:ae:05:7a:f3:a2:fd:4d:38:36:d9:a3:31:74:6e:f9:bc:
03:f9:c0:0e:b4:52:03:bf:83:d4:76:63:8e:a0:b0:7c:06:7b:
1f:cc:f7:8c:74:dd:6d:28:36:1f:07:7a:7b:a9:4e:a8:69:06:
65:0d:90:47:d7:75:3e:f2:70:75:6a:d3:0a:c2:37:c9:fb:94:
15:e9:9f:e0:89:3f:9c:bb:1e:41:81:af:5c:e4:ad:8d:36:fa:
13:49:28:34:c4:a6:07:a2:ba:bd:83:b0:fb:57:42:8e:92:7d:
ba:4a:a5:f1:f8:fb:d5:b1:bd:e6:2d:f3:bc:1b:c4:2f:ad:23:
56:12:54:d3:93:9f:b3:41:4a:c5:ff:70:83:e5:8a:8c:31:6e:
9b:8c:c5:5f:07:0f:bb:32:02:3b:62:97:8f:0f:28:fa:ee:60:
06:10:5a:a9:d9:0a:ac:67:4e:f0:31:0b:41:80:d7:2f:9f:6b:
b2:a2:57:8d:7d:ee:4d:2f:05:ae:65:57:45:e2:e1:ab:ef:54:
e6:02:2a:88:8f:36:75:f8:ee:e4:d3:e0:1b:ec:c3:77:91:c2:
89:0a:3b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:32 2024 by rpki-client on console-fra.rpki-client.org