Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PhHTaecTUF5gnPy_MYIwMK__Clk.cer
File: PhHTaecTUF5gnPy_MYIwMK__Clk.cer (raw, json)
Hash identifier: 5XTtAQMgzE4im8pzmHNRw2o6qrkpgVltM0+y0Ju/3PU=
Subject key identifier: 3E:11:D3:69:E7:13:50:5E:60:9C:FC:BF:31:82:30:30:AF:FF:0A:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A2B2CFEECC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/94c5ca-567c-4e87-b10c-bac6b5f25c2e/1/PhHTaecTUF5gnPy_MYIwMK__Clk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/94c5ca-567c-4e87-b10c-bac6b5f25c2e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:57:47 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 212.102.109.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 698784673484 (0xa2b2cfeecc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:57:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e11d369e713505e609cfcbf31823030afff0a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:23:5e:ac:e7:36:4f:5f:66:84:53:23:28:
e9:c9:cd:0c:3c:5c:f7:4c:af:d2:a1:39:02:51:c7:
69:af:9e:ae:fa:f9:18:86:c1:f3:32:8f:7d:fb:d7:
66:bb:65:73:f6:8f:7e:0b:42:eb:fd:79:b1:7d:21:
db:6d:12:b6:4a:23:88:fa:9c:17:d0:03:63:3d:2c:
ab:e4:c4:8d:62:a3:2f:42:54:b0:7c:d1:5f:c0:83:
6a:b3:2c:e7:64:75:7c:48:65:6e:1b:56:e6:d8:ba:
f2:0b:84:95:4c:80:10:fa:f0:93:59:74:bd:38:e6:
5c:9c:e7:2c:51:74:68:26:17:41:19:a2:e1:78:53:
8f:78:d4:4a:03:1c:7f:67:b1:6c:d8:45:15:ce:c0:
81:94:53:a0:da:fd:15:d6:71:6a:e5:ee:8b:f4:24:
a8:10:a8:17:c5:df:50:8a:e0:fa:00:d2:e6:c7:90:
54:c4:84:0b:62:16:a3:9c:e0:fb:a3:fa:e5:9e:bf:
db:50:81:2b:e0:c6:e3:0e:d7:f0:04:47:27:8c:29:
c7:ae:38:b9:64:a1:c3:86:13:f0:8c:43:51:95:7d:
c7:66:b9:dd:83:17:41:c0:1c:19:0a:62:8b:72:0a:
ce:71:95:2a:f9:ca:1b:30:4e:97:71:ae:22:c9:79:
c7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:11:D3:69:E7:13:50:5E:60:9C:FC:BF:31:82:30:30:AF:FF:0A:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/94c5ca-567c-4e87-b10c-bac6b5f25c2e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/94c5ca-567c-4e87-b10c-bac6b5f25c2e/1/PhHTaecTUF5gnPy_MYIwMK__Clk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.109.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:19:02:7c:c1:55:de:ae:ec:dd:ea:c6:2b:8a:39:67:63:fe:
9c:48:b7:51:c8:9a:f7:b8:d4:82:5b:59:6b:ba:46:ab:42:9e:
9d:06:d2:4d:9e:e1:48:5e:5a:ff:5d:19:3b:eb:58:01:23:8b:
50:e5:1c:a1:64:90:1e:be:c2:ea:02:4e:d4:61:d4:a1:51:0f:
61:05:00:82:50:0e:a1:dc:77:ef:78:ab:03:14:14:02:b7:8a:
56:25:43:d5:3d:0a:0f:42:88:37:07:b2:7d:87:48:34:f8:6f:
0f:4f:c7:95:5c:57:ac:fc:2a:8e:a0:19:4b:47:07:17:61:8e:
32:dc:4e:4f:a9:3d:cf:d9:6a:d3:2b:03:5f:bf:b2:1d:12:cd:
40:70:5b:21:1f:a7:e0:8c:29:68:94:e7:d4:cf:79:57:3b:b0:
4b:7a:b7:8e:98:3d:5e:d3:0c:da:a3:43:78:29:fb:29:66:ca:
21:64:bb:31:8e:9e:0e:e0:e1:85:ea:8e:f6:ff:1f:2a:2c:bb:
0e:33:f2:19:40:f3:07:98:88:33:e6:c2:2a:54:88:5e:82:58:
2c:bf:d5:d3:7a:3c:24:29:64:03:e9:06:a2:1e:fc:68:b9:3f:
09:a4:d9:b3:06:8e:9e:ad:0a:3d:2d:c4:22:a0:8b:19:e2:b5:
d7:19:a3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:05 2024 by rpki-client on console-fra.rpki-client.org