Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PH0zQYHMajVT91i3tw43Dy2LHAo.cer
File: PH0zQYHMajVT91i3tw43Dy2LHAo.cer (raw, json)
Hash identifier: 5owAOg9nXeZc1xrvVTvStVm0GPmDhEZPYTQwHKvX39s=
Subject key identifier: 3C:7D:33:41:81:CC:6A:35:53:F7:58:B7:B7:0E:37:0F:2D:8B:1C:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AF1AB2B58F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/5f93a4-9340-4ea9-9a80-8a099be0899b/1/PH0zQYHMajVT91i3tw43Dy2LHAo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/5f93a4-9340-4ea9-9a80-8a099be0899b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 25 Mar 2022 07:38:48 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.203.127.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 752067196303 (0xaf1ab2b58f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 25 07:38:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c7d334181cc6a3553f758b7b70e370f2d8b1c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:28:32:b2:ac:51:e6:34:95:f7:16:cc:c7:
07:fc:0b:13:25:b2:48:fb:06:47:e5:ca:66:6e:2e:
f5:85:1a:36:3b:47:a5:60:38:b4:0c:4d:54:b7:f0:
a8:41:2e:10:fb:60:71:29:9c:c3:f7:4a:4f:9c:65:
de:3f:e7:1f:33:42:20:9d:e6:96:e9:72:64:0a:00:
55:80:23:e9:e6:24:73:00:ff:f9:f4:af:4a:7b:5c:
1f:2d:de:97:39:3a:c9:36:ad:cf:1b:0c:83:3f:1e:
17:5e:fd:3d:ec:2c:b2:bd:54:11:7e:e3:54:ba:fd:
e6:e1:71:4a:ac:1f:2b:68:f4:70:bd:2a:11:02:79:
4e:7f:d0:b5:73:d5:3c:43:ed:ac:3b:01:a6:96:31:
2d:2d:35:b0:3e:25:31:b2:b8:c7:69:6c:27:0d:b3:
c9:c1:ee:e8:dd:24:80:46:55:4a:48:21:f1:1e:d6:
3a:c2:9f:c8:e7:74:1a:6e:25:f6:63:2a:c8:bd:6d:
0b:0c:21:42:9f:39:63:20:10:8f:51:2a:e0:94:0a:
6e:80:8a:d6:a8:4f:83:ee:63:30:f6:70:4d:df:fe:
60:43:62:45:48:00:08:e4:d8:b7:f8:fa:30:07:42:
1e:3c:f4:9c:39:6e:44:77:76:b3:55:42:76:49:a4:
8c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7D:33:41:81:CC:6A:35:53:F7:58:B7:B7:0E:37:0F:2D:8B:1C:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5f93a4-9340-4ea9-9a80-8a099be0899b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5f93a4-9340-4ea9-9a80-8a099be0899b/1/PH0zQYHMajVT91i3tw43Dy2LHAo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.127.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:36:a6:d1:24:30:97:31:29:09:fb:0f:23:0b:a5:28:ac:a3:
f9:14:72:dc:ed:d8:a6:c4:aa:4a:08:c5:f1:77:96:2f:6a:0e:
7a:dd:fe:9b:4d:f9:3c:83:e8:74:02:1d:ff:7c:a7:fc:c1:89:
00:a1:54:68:bb:79:cf:0f:cf:47:9d:50:00:3f:85:1c:c6:53:
69:a7:97:fc:57:4f:72:cf:72:97:e1:bf:57:7c:91:9d:67:a8:
fc:4d:96:8b:a1:a4:13:82:ab:07:62:07:55:ab:b9:b5:38:4f:
60:29:0a:8a:82:b1:af:d6:9e:20:f5:ab:88:a7:cf:2b:5a:fb:
0f:33:23:13:35:f8:f4:7c:34:ad:2d:4f:16:67:1c:8a:95:ba:
1b:1f:77:5e:cf:9a:1c:98:e1:14:d1:a7:d7:1a:5f:5c:5a:d5:
41:00:c7:19:9a:8c:b5:79:e9:21:0c:97:24:22:f7:2d:a1:51:
36:65:06:2f:ea:be:de:49:26:6f:45:fb:d8:ec:c2:bf:31:cf:
5e:98:21:29:28:7c:85:3e:4f:31:9b:d4:a2:f8:b2:93:18:1a:
3c:70:1c:76:9f:e8:eb:80:ba:46:cd:f0:02:87:d0:17:83:29:
16:b6:97:53:53:e4:d2:46:55:28:30:ab:92:7e:62:56:3c:67:
60:64:b4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:00 2024 by rpki-client on console-fra.rpki-client.org