Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O0uElwuGHDKxagKWkFBz5hW0EvQ.cer
File: O0uElwuGHDKxagKWkFBz5hW0EvQ.cer (raw, json)
Hash identifier: 11CQWoW0rwqM/2vS7tk2btHLPBZ6gc/CqMvjXM5IbLA=
Subject key identifier: 3B:4B:84:97:0B:86:1C:32:B1:6A:02:96:90:50:73:E6:15:B4:12:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AEE00D4C18
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/d5c904-d1ee-4fdc-b492-498d1d823e9b/1/O0uElwuGHDKxagKWkFBz5hW0EvQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/d5c904-d1ee-4fdc-b492-498d1d823e9b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 21 Mar 2022 11:38:32 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 2a0f:8b80::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 751083277336 (0xaee00d4c18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 21 11:38:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b4b84970b861c32b16a0296905073e615b412f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:bd:98:7d:be:5d:34:e3:f5:2d:b8:64:06:
ce:57:80:f7:fc:8d:18:c1:61:66:2c:12:66:6e:ea:
02:b2:35:a2:e0:bf:a7:14:60:4d:79:66:71:bf:c5:
24:48:dc:e6:2c:23:fb:d4:0f:11:fc:a1:7d:07:89:
7d:38:3b:bd:a6:7b:88:3a:f3:4d:e0:36:4b:16:61:
18:1d:eb:c0:e4:8a:f9:32:e4:e6:ea:7f:26:17:ed:
c9:76:26:96:6c:ea:12:d6:ee:d9:ca:62:1c:39:a5:
45:9f:56:22:ef:a5:d9:8d:a3:13:b6:ad:38:58:d2:
ce:8f:bf:e7:02:f0:4f:9f:d8:8a:ad:45:7c:33:5c:
ed:8e:c9:6c:cc:3d:f6:a7:22:1b:e6:e7:d5:f1:be:
8b:f2:7e:88:b2:f2:b3:9b:56:94:2f:e1:cf:10:88:
66:94:48:1a:c4:4f:c1:cc:27:84:fc:ac:ed:d7:c6:
fb:8d:5f:fe:99:fd:98:0e:26:8c:28:f2:2a:53:0e:
fa:d8:09:6f:55:4b:db:95:93:7a:98:9f:0d:c4:6c:
14:87:5a:54:e9:db:8c:b6:7a:69:40:22:a1:1c:8c:
7a:20:07:fe:90:4b:ff:89:0a:f3:74:00:ef:ee:c3:
78:4a:a9:12:70:b1:0a:2e:aa:61:cf:94:70:b9:ea:
1c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4B:84:97:0B:86:1C:32:B1:6A:02:96:90:50:73:E6:15:B4:12:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d5c904-d1ee-4fdc-b492-498d1d823e9b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d5c904-d1ee-4fdc-b492-498d1d823e9b/1/O0uElwuGHDKxagKWkFBz5hW0EvQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:8b80::/29
Signature Algorithm: sha256WithRSAEncryption
9d:a3:38:46:d5:62:bf:ef:f1:5f:e9:16:ef:4f:4e:b7:bc:f2:
50:d3:e6:d8:f2:de:f5:0b:b2:a3:69:df:7f:4a:b3:29:d7:18:
33:15:01:77:7e:6f:ec:df:c3:19:38:e1:ab:c7:52:34:d1:0b:
04:18:e2:25:63:1b:7a:af:89:a2:e3:b3:18:4b:a7:00:2f:00:
b5:98:b7:4d:56:f8:b1:64:e2:ec:17:40:96:92:21:1e:71:07:
cc:08:32:7b:8f:ee:bb:ba:26:25:eb:a7:8a:6b:b1:d4:8c:68:
b3:45:44:fb:38:31:6c:94:01:39:8e:2c:b2:10:ee:66:61:ff:
d7:c9:d0:e3:e8:e1:91:1c:c4:f9:9c:d7:b7:04:8b:44:51:76:
de:4f:15:9f:41:77:ca:ba:63:f8:a1:cd:a2:f4:30:5a:5b:c7:
a3:21:6d:b9:0e:c5:93:9d:ec:4c:a0:ee:f9:37:18:2f:b9:a4:
0d:66:6d:77:b1:00:c9:2a:d5:b0:43:9f:6f:1a:5b:1a:dc:34:
3a:95:21:b7:84:6d:5a:86:68:2b:19:8f:11:17:a2:97:e1:d7:
32:18:d6:ff:21:1f:9b:5e:52:51:40:57:b4:a6:c8:db:6c:24:
07:54:78:47:7d:bf:9c:13:b3:32:9d:b0:ab:b8:b2:0b:86:dc:
d0:e7:fc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:42 2024 by rpki-client on console-fra.rpki-client.org