Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sg6LtrawtvEp6_gTj51i-gnfIG8.cer
File: Sg6LtrawtvEp6_gTj51i-gnfIG8.cer (raw, json)
Hash identifier: J3bpERikxl771YJShluhzfrocnDfdd6vlpDp0PkSkV8=
Subject key identifier: 4A:0E:8B:B6:B6:B0:B6:F1:29:EB:F8:13:8F:9D:62:FA:09:DF:20:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A3EB41C74C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/01f412-750d-4896-b805-dfcc06fa6d97/1/Sg6LtrawtvEp6_gTj51i-gnfIG8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/01f412-750d-4896-b805-dfcc06fa6d97/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:58:47 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.105.189.0/24
IP: 2a10:c9c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 704026625868 (0xa3eb41c74c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:58:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a0e8bb6b6b0b6f129ebf8138f9d62fa09df206f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:eb:37:b5:9e:37:e2:23:b5:30:7a:89:5e:59:
4c:73:e2:7a:d0:21:d0:d4:9f:de:c3:ba:17:e2:f2:
5b:6f:6a:ea:b4:44:34:ff:aa:38:64:6f:75:25:2f:
a1:0c:77:3d:25:0b:97:37:4a:22:70:74:59:54:7a:
49:e4:3c:50:b0:e6:ae:0f:68:62:a9:61:10:69:f4:
8c:84:fd:a1:13:88:77:ee:33:72:ca:14:e5:8e:7b:
ea:15:56:d3:26:bc:d6:6d:d3:ee:40:73:92:95:c6:
79:b6:f9:d0:b7:57:f3:48:7f:07:34:e0:4f:60:18:
c8:41:df:6a:b6:73:2f:29:15:58:5f:31:a9:59:80:
a4:26:74:16:c7:a6:b8:6f:2d:29:a5:6d:34:ef:a6:
fc:33:84:68:95:37:c5:58:03:0c:48:a4:3b:7d:0a:
9d:68:6b:8b:a1:a4:19:30:a3:52:79:92:db:f5:a1:
1a:b5:58:95:33:f8:51:2b:1b:94:68:d8:68:75:6a:
98:df:0f:97:cf:db:92:89:2b:a2:33:cb:ee:64:99:
db:d5:be:42:83:4f:e0:1f:9f:4e:ac:39:62:0d:d1:
2c:3c:9a:74:c4:c7:ec:e5:14:3f:b9:45:40:cc:94:
a5:f3:a4:c5:25:9b:88:29:29:fb:24:fe:02:3b:16:
22:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0E:8B:B6:B6:B0:B6:F1:29:EB:F8:13:8F:9D:62:FA:09:DF:20:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/01f412-750d-4896-b805-dfcc06fa6d97/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/01f412-750d-4896-b805-dfcc06fa6d97/1/Sg6LtrawtvEp6_gTj51i-gnfIG8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.189.0/24
IPv6:
2a10:c9c0::/29
Signature Algorithm: sha256WithRSAEncryption
26:25:e0:c7:8f:32:69:ce:7e:04:41:ce:c8:80:60:ce:ce:38:
3d:86:11:75:f3:94:0d:37:b8:ad:88:f7:45:d0:d4:3f:bd:7f:
1e:44:e3:73:4e:c2:0e:98:1b:1b:4f:26:83:8b:80:a1:7c:d5:
ee:b7:4b:80:e4:23:7f:5c:d9:46:c9:f2:b8:35:0c:92:c4:0c:
1a:3b:b2:d2:a3:e2:45:61:2c:75:fb:f3:73:ee:93:f1:fb:ab:
5d:64:57:01:85:58:a6:87:05:98:e7:e1:06:be:5c:54:a9:16:
da:29:6b:0d:91:6d:10:9e:48:49:7e:7a:b7:db:d7:37:3a:d2:
31:ee:4f:39:0c:11:70:42:59:21:40:b2:ad:3d:a9:f5:39:ea:
2a:4b:ec:c7:73:9d:4d:5f:d8:78:4e:30:86:1e:5a:4e:59:13:
ef:72:76:d1:65:43:50:1c:f9:b7:58:d0:ba:dc:9c:a6:fb:2d:
67:85:37:73:72:6e:72:e6:53:04:ef:f1:e1:7f:48:50:33:57:
56:b9:ff:a5:16:fd:cf:5e:ed:ea:22:cf:5d:3c:63:3e:ab:8c:
3f:d7:87:34:f0:94:11:ba:bf:0b:23:1d:ee:88:68:79:b1:09:
62:4a:3c:67:64:2d:bf:87:94:7a:10:34:65:4b:8c:b1:76:22:
a6:73:4f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:56 2024 by rpki-client on console-ams.rpki-client.org