Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NUR56bWheG5uh0B66d3lEXeaUH8.cer
File: NUR56bWheG5uh0B66d3lEXeaUH8.cer (raw, json)
Hash identifier: q9T+YnXdpNnRm6fa6qc6madPb7p7Ap2XLKzHgEs81Hk=
Subject key identifier: 35:44:79:E9:B5:A1:78:6E:6E:87:40:7A:E9:DD:E5:11:77:9A:50:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A44485F875
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/dad716-1871-46ab-8f70-491b6368fa40/1/NUR56bWheG5uh0B66d3lEXeaUH8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/dad716-1871-46ab-8f70-491b6368fa40/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:03:05 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 81.161.228.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 705524267125 (0xa44485f875)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:03:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=354479e9b5a1786e6e87407ae9dde511779a507f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:56:31:63:3b:88:b4:c7:d7:b5:99:c7:d1:
50:cf:7c:69:2d:b8:f7:20:f2:58:66:2e:3a:7d:a8:
ce:49:b8:d6:c1:a7:7b:46:bc:c2:e3:fb:27:65:f3:
e9:a6:f1:2c:1d:e9:ac:da:e9:01:4f:7b:54:25:ee:
34:63:35:b1:80:28:58:54:27:10:6a:4f:57:29:5e:
55:8a:22:a9:cd:fa:e3:c4:2b:1d:03:02:73:c5:d7:
6a:54:b3:8c:00:86:59:59:30:77:a4:ae:4a:ce:a4:
4c:c4:3c:75:c7:ee:35:ec:ed:e7:5b:51:13:63:fb:
36:22:97:83:0a:df:73:5e:15:e6:24:34:da:36:78:
af:2d:f4:d5:46:94:9d:71:d3:5d:e4:d0:48:02:13:
69:43:e8:12:d8:4b:c0:ba:d9:bd:a7:11:67:ed:00:
13:87:04:08:96:24:9b:99:c9:b6:83:af:23:86:a5:
c5:ab:cc:c8:26:6e:23:a2:3e:70:76:21:92:eb:fb:
e7:fc:3b:2b:90:c4:e4:f1:73:7d:ea:be:87:95:3a:
20:20:17:95:6f:7e:a6:7e:df:7e:13:f4:c6:e8:e3:
dc:8e:dc:7c:a0:0b:f5:37:05:30:1c:81:fd:a1:54:
ad:27:dd:b3:56:1b:23:da:61:96:1c:d4:20:c2:74:
c5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:44:79:E9:B5:A1:78:6E:6E:87:40:7A:E9:DD:E5:11:77:9A:50:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/dad716-1871-46ab-8f70-491b6368fa40/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/dad716-1871-46ab-8f70-491b6368fa40/1/NUR56bWheG5uh0B66d3lEXeaUH8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.228.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:67:80:18:0e:b2:87:e3:d0:88:7b:d7:e8:7c:5c:ac:c7:d3:
ae:d0:7c:7c:8f:88:35:89:7c:3e:1f:68:d9:fc:76:64:2b:09:
af:d0:6d:ea:5c:d8:8d:d9:5b:d9:a5:8f:5d:9a:28:33:b3:00:
61:55:30:4c:2c:aa:7f:92:60:fc:84:21:f8:4b:ee:01:17:c0:
8b:c2:48:a5:b3:dd:a7:ed:86:90:74:83:82:5d:5b:b7:26:6e:
7a:22:18:fc:b9:c2:9c:73:61:ee:e4:3f:81:f2:42:f2:ce:6c:
5c:ff:d5:97:8b:f8:99:a0:95:0b:11:08:e5:b9:9e:fd:75:b3:
82:d1:f0:65:05:7f:5c:c4:92:26:fb:34:1b:ec:d2:e8:4c:35:
fa:0c:7f:14:81:65:53:51:13:96:9e:86:e8:33:e4:e8:aa:8d:
b2:0b:b2:63:cb:5e:c1:a7:9f:11:5f:e3:0c:39:e4:b1:d4:8b:
ce:d3:3f:db:05:72:15:d1:c2:fc:58:9e:8a:57:72:b7:22:09:
51:81:d6:35:b0:b7:b8:cb:2b:18:de:9f:01:54:fe:2f:6e:f8:
2d:01:2e:d6:47:4b:84:70:0e:df:8e:0e:f3:07:f0:17:07:a6:
22:2d:ac:a4:59:62:29:dd:8b:14:bf:6c:2a:17:31:e0:4c:77:
23:52:20:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:34 2024 by rpki-client on console-fra.rpki-client.org