Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R8fXfEmLKDHM3OfpPpqNIuT1VSs.cer
File: R8fXfEmLKDHM3OfpPpqNIuT1VSs.cer (raw, json)
Hash identifier: xtCyTjnCTLmnNZw8LaVxJCYcAt1DKtOij/J7GORbV+I=
Subject key identifier: 47:C7:D7:7C:49:8B:28:31:CC:DC:E7:E9:3E:9A:8D:22:E4:F5:55:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A0F54F13EA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/5277e9-c709-405e-adea-313dd2abc955/1/R8fXfEmLKDHM3OfpPpqNIuT1VSs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/5277e9-c709-405e-adea-313dd2abc955/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:03:20 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.150.24.0/22
IP: 2a0f:8e00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691310367722 (0xa0f54f13ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:03:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47c7d77c498b2831ccdce7e93e9a8d22e4f5552b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6d:88:ad:48:64:79:54:a1:7c:58:f3:a0:18:
45:1c:3e:ed:45:08:4f:f7:d3:10:69:5a:2a:6c:38:
f7:d7:54:81:e2:9a:9b:b9:7f:78:77:28:6d:e9:a6:
7f:9e:42:26:43:fa:30:0e:70:f4:12:1c:36:dc:73:
e8:83:cf:20:43:a5:f2:08:d1:b3:c5:96:54:f4:2b:
6e:9d:bf:13:d0:31:f2:03:d1:6c:ac:33:d6:5c:c7:
f6:45:f7:ce:34:0b:81:95:97:2b:f1:d1:59:41:53:
4d:ef:1a:d5:34:e9:96:c6:ab:66:7e:4f:33:b8:b6:
dc:6d:85:f9:af:25:2f:cd:75:0e:60:9d:c6:74:5a:
97:93:ee:cb:10:85:42:35:fc:9c:57:be:16:c7:fc:
f8:25:0c:9f:d2:53:0e:b5:57:af:67:a4:65:f3:0f:
6a:04:7a:c0:ae:68:76:8d:bd:24:9a:a9:52:4a:0a:
bc:12:ad:d7:12:03:71:57:6b:d0:6e:9d:91:1b:65:
b8:5a:e1:4a:74:42:58:b7:a0:84:67:5d:a0:a9:5e:
5a:c3:50:92:d2:d3:1c:41:ae:cc:ee:df:de:1f:91:
85:b2:67:c3:a4:b0:ca:d0:e9:7e:47:ed:39:aa:a3:
b4:61:4e:1f:b5:ce:34:21:ac:aa:7d:e8:c8:cb:ab:
be:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C7:D7:7C:49:8B:28:31:CC:DC:E7:E9:3E:9A:8D:22:E4:F5:55:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5277e9-c709-405e-adea-313dd2abc955/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5277e9-c709-405e-adea-313dd2abc955/1/R8fXfEmLKDHM3OfpPpqNIuT1VSs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.24.0/22
IPv6:
2a0f:8e00::/29
Signature Algorithm: sha256WithRSAEncryption
5f:3c:19:47:80:e4:f4:f1:41:e6:b6:c0:54:cf:0b:33:fc:12:
bb:9d:37:03:ba:a9:a2:3e:ef:df:33:4c:48:9a:3a:88:73:c7:
c5:ca:47:1f:0f:6c:5d:22:59:30:ca:3a:9f:d5:bf:28:20:29:
91:1d:e3:fd:37:47:84:9d:8a:6b:55:bc:86:bc:52:8c:0c:a5:
bb:cc:d3:5b:2e:dd:8f:4a:b2:d5:be:4e:e5:a2:c5:c3:99:de:
80:4f:58:3f:6d:47:22:02:1d:a7:c8:c7:f5:9c:b5:f0:14:86:
05:0b:66:3a:60:77:b8:fe:af:93:fd:07:25:93:fc:02:ab:32:
d0:07:47:54:52:da:25:18:f8:9e:df:b5:0e:5a:eb:9a:e7:3b:
43:46:1b:50:fa:07:75:64:e1:a7:d2:72:21:a1:48:d4:1c:d6:
89:1d:35:f3:5e:07:75:6a:e1:a1:79:a4:c4:ca:74:28:44:7b:
88:50:1c:3f:b6:7f:d3:f2:25:e5:fe:0a:c6:f7:9d:a2:3d:2b:
eb:e8:87:7a:c9:24:f1:bc:0d:55:45:3d:6d:73:a8:e3:d4:fc:
49:85:0c:1e:e3:51:eb:8b:08:fa:07:f9:0c:3a:55:78:92:db:
1b:31:20:c3:ec:75:e5:74:dc:3d:86:79:7e:cd:14:98:2b:c8:
43:55:61:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:25 2024 by rpki-client on console-ams.rpki-client.org