Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NRZc_XpYrcCuxEPAakLev_Y-Mv4.cer
File: NRZc_XpYrcCuxEPAakLev_Y-Mv4.cer (raw, json)
Hash identifier: KuU+7w0cCKSzv7bvL2ro2WiYz1UK761nSpDfUdhd780=
Subject key identifier: 35:16:5C:FD:7A:58:AD:C0:AE:C4:43:C0:6A:42:DE:BF:F6:3E:32:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AAAC1FB302
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d95e1-0f6a-4461-9dd6-cecafa6a2014/1/NRZc_XpYrcCuxEPAakLev_Y-Mv4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d95e1-0f6a-4461-9dd6-cecafa6a2014/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:58:26 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.155.118.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 733032198914 (0xaaac1fb302)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:58:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35165cfd7a58adc0aec443c06a42debff63e32fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:54:6f:12:5b:53:e4:d1:a6:cb:a1:a2:ca:1a:
a4:2c:20:4f:f3:fd:ab:e7:92:43:ee:f9:43:5f:d0:
92:81:67:a7:fd:88:b1:76:28:08:1e:c8:b6:ea:0f:
bf:e5:8e:28:00:97:4d:e4:0c:81:69:40:0c:8c:46:
64:d6:17:75:64:05:f4:36:88:71:03:a5:84:d5:39:
a0:4e:73:18:38:d0:ef:e6:9b:19:ae:3c:e7:0c:93:
2d:13:13:e4:60:82:e1:c0:e5:5a:5d:78:d4:ae:22:
7e:a7:35:98:5f:f8:87:1e:2e:dc:f7:36:7c:e0:81:
1a:52:d6:b5:45:fe:a4:11:da:fe:99:f1:b7:e3:83:
2a:04:80:1b:9a:67:58:c1:a8:50:1f:21:a0:a4:b7:
f3:e4:1f:97:88:3a:07:39:90:35:2a:5f:b2:0c:c2:
23:dd:71:73:e4:60:92:ff:81:eb:44:34:1c:de:5e:
e7:88:67:48:65:c2:80:cf:f8:5f:45:51:34:50:c8:
61:91:bb:4e:07:e4:af:63:e3:6b:ca:ee:9e:be:a5:
33:8a:11:ee:6a:ec:d3:95:67:57:09:f5:30:38:50:
22:9a:9d:f2:2f:a4:fc:cd:07:dc:1e:88:f8:32:e5:
51:81:23:79:0f:7c:23:29:9c:bd:9f:69:a0:0f:bd:
5a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:16:5C:FD:7A:58:AD:C0:AE:C4:43:C0:6A:42:DE:BF:F6:3E:32:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d95e1-0f6a-4461-9dd6-cecafa6a2014/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d95e1-0f6a-4461-9dd6-cecafa6a2014/1/NRZc_XpYrcCuxEPAakLev_Y-Mv4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.118.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:76:d1:9b:41:a2:c8:00:9b:d9:17:7c:96:7e:ae:38:7f:27:
b5:18:ba:f1:23:9f:05:e2:7d:88:d2:05:93:9c:f6:67:a6:5c:
43:44:e1:ca:78:08:3e:cd:c6:5c:c8:26:20:62:62:a2:d7:70:
ab:f4:65:a0:dd:b6:14:cc:e2:f9:47:b5:90:d7:3b:d2:65:1d:
f5:99:b1:b3:7e:0a:3b:b9:48:22:2e:1d:00:b5:9f:dd:73:4d:
ef:76:4b:7d:16:d8:f2:c9:2e:c2:fa:2b:a1:b1:e4:30:3e:8d:
e7:72:5e:b1:22:99:72:28:17:97:60:94:77:f6:b4:6b:78:ea:
e1:0a:c6:9e:ed:0d:1a:f7:1d:75:25:bc:71:f4:b3:12:f4:21:
bb:91:c9:32:4c:d0:ea:89:b8:a6:80:3a:cf:02:ab:12:05:bd:
ae:4d:bb:06:e1:76:a1:3c:c2:90:68:46:96:c2:9e:75:48:4f:
a4:ae:bd:a9:e9:94:42:35:88:d8:61:3c:95:10:28:d9:9b:38:
9c:e8:5d:e3:1a:f9:34:4b:9f:a3:e6:4b:ad:64:ea:26:09:bf:
2e:f6:21:75:e3:8d:69:79:3c:1b:4b:16:c9:83:7c:d7:93:30:
a6:cc:90:06:d9:44:79:28:c9:f6:ef:b2:bc:7c:06:b9:b0:5c:
ce:35:b8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:16 2024 by rpki-client on console-ams.rpki-client.org