Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ni6aeO8M8SWwpWp6CAOzsKW8SiM.cer
File: Ni6aeO8M8SWwpWp6CAOzsKW8SiM.cer (raw, json)
Hash identifier: AlAN/fu5XVAh297ZfuusqYlOOUiana6CltLWcjeKFSM=
Subject key identifier: 36:2E:9A:78:EF:0C:F1:25:B0:A5:6A:7A:08:03:B3:B0:A5:BC:4A:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9B7D9B1771
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/61c4b5-07b0-4f75-b6ac-b2d9e5f082d0/1/Ni6aeO8M8SWwpWp6CAOzsKW8SiM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/61c4b5-07b0-4f75-b6ac-b2d9e5f082d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:54:21 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.144.176.0/22
IP: 2a0e:f040::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667827246961 (0x9b7d9b1771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:54:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=362e9a78ef0cf125b0a56a7a0803b3b0a5bc4a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:f7:15:a0:41:c6:a4:33:b4:52:da:d3:93:
00:12:98:84:48:1a:e7:07:dc:93:7d:b7:0c:bd:7c:
29:ff:78:13:4c:ad:8f:d8:16:3a:fe:b7:5d:7c:31:
65:a6:92:eb:4b:fc:ae:37:2e:1b:d7:46:ac:93:67:
b7:1f:f5:72:15:6c:4f:2d:22:eb:b5:f9:14:92:1e:
ad:3c:cb:d6:8d:69:47:ae:4f:0d:d0:09:35:11:18:
33:f9:5c:00:41:5a:26:50:d7:58:08:8d:15:6f:e7:
30:56:7b:0f:e8:6e:26:49:03:90:0f:0d:44:92:f8:
f8:a9:8e:48:72:16:8a:14:6e:24:be:e5:55:df:f2:
10:09:5c:d5:8b:36:8b:fc:81:bd:7f:b3:5a:d7:25:
a1:48:6a:dc:ef:83:5c:2d:74:03:74:59:14:9d:ad:
ae:22:6c:42:6e:d8:86:57:74:df:49:08:22:56:4f:
42:90:cd:32:f9:df:88:1d:fa:3d:9d:e9:76:fa:0c:
c0:dc:c2:ce:89:b1:77:c1:e8:ae:e4:3b:38:d5:77:
1b:6e:ac:bd:3a:42:e2:e0:dc:f4:fb:5b:9b:72:da:
68:23:d3:7f:ba:b4:4c:27:48:8a:cc:dc:c6:00:75:
39:9d:ff:25:4d:28:1e:38:ac:7a:d0:21:75:d2:ea:
45:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2E:9A:78:EF:0C:F1:25:B0:A5:6A:7A:08:03:B3:B0:A5:BC:4A:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/61c4b5-07b0-4f75-b6ac-b2d9e5f082d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/61c4b5-07b0-4f75-b6ac-b2d9e5f082d0/1/Ni6aeO8M8SWwpWp6CAOzsKW8SiM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.176.0/22
IPv6:
2a0e:f040::/29
Signature Algorithm: sha256WithRSAEncryption
a5:3a:9e:29:90:66:e4:7f:a6:54:84:74:eb:71:01:da:c6:b1:
3c:cd:78:95:79:9a:15:56:53:b8:eb:64:1a:9f:84:60:3a:25:
b5:e1:c4:d5:bb:dd:b9:ee:1d:18:02:cd:40:08:80:bd:fd:63:
19:54:5e:94:fe:91:3d:29:06:9b:9a:5a:cc:ca:b7:80:d2:38:
94:25:6d:04:09:fe:c5:45:42:5e:d1:8f:a3:d0:b4:05:d0:96:
a1:10:00:01:1e:6e:e5:a0:56:f0:89:ab:7f:2e:f0:c6:5e:c5:
99:7d:f2:da:0b:d6:76:d6:34:69:16:69:29:d1:65:b3:af:91:
e1:46:12:c7:8f:f4:9b:06:8f:9a:6b:fb:56:d2:71:fd:3d:98:
78:67:21:df:5e:fb:f1:a6:a5:f6:df:3a:21:f7:ea:4d:9b:eb:
5e:ba:46:7a:a4:30:c8:76:14:e1:b7:b5:62:01:45:fa:d4:77:
44:2c:72:02:12:95:eb:54:42:35:bf:af:e3:ba:2c:74:a5:77:
6f:c6:d9:e7:60:62:99:2d:c4:df:6d:bf:4b:9d:2b:9f:9e:11:
da:73:ed:49:8f:1d:c3:b0:1a:ea:b5:bb:7d:31:c0:72:0c:bf:
d4:fd:fc:0f:a1:d0:d0:99:a3:4f:1c:f9:a4:e4:fe:a1:ca:34:
5a:03:fb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:21 2024 by rpki-client on console-ams.rpki-client.org