Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TTXLoej_Sw-x-PJBsP2pC0MISb0.cer
File: TTXLoej_Sw-x-PJBsP2pC0MISb0.cer (raw, json)
Hash identifier: aXulmsYEI+GmpKm1lEIG2mZ1yAfuTI1TZ24pb3Ic3ic=
Subject key identifier: 4D:35:CB:A1:E8:FF:4B:0F:B1:F8:F2:41:B0:FD:A9:0B:43:08:49:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A9A5465F74
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/beee2a-ee4c-4b8b-ba59-0048ba4e2945/1/TTXLoej_Sw-x-PJBsP2pC0MISb0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/beee2a-ee4c-4b8b-ba59-0048ba4e2945/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:59:32 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 195.54.160.0/23
IP: 195.54.166.0/23
IP: 2a0f:4bc0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 728622325620 (0xa9a5465f74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:59:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d35cba1e8ff4b0fb1f8f241b0fda90b430849bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:82:47:f4:14:ad:5a:1f:b1:17:fd:bd:f8:fc:
34:e5:ce:c2:97:3e:ce:25:ec:99:46:cf:3f:0a:ea:
2d:8a:5d:5a:c1:0c:2c:c8:c7:c2:c3:53:13:03:1b:
ec:f8:c7:4b:52:bf:fd:57:05:4b:76:ad:ef:a8:b9:
2c:b8:11:6d:5f:5f:59:df:69:4c:cc:1e:4b:71:eb:
aa:eb:15:28:cb:fe:be:90:31:7b:52:93:0b:36:1e:
03:7d:87:f6:e0:d8:c1:a7:43:ae:77:9a:33:a7:44:
17:d6:61:1c:be:80:45:cd:54:55:75:7e:0e:34:54:
75:b8:58:d8:59:af:e1:23:ad:e3:cd:22:c3:2a:85:
b5:e1:22:74:15:5e:99:56:aa:91:d3:8d:1f:eb:77:
50:e8:d6:b1:50:78:ad:2c:1f:67:02:0e:d9:c7:bf:
5d:63:da:18:bf:77:3b:06:97:60:33:94:70:7d:4a:
00:44:56:95:97:9b:a3:8c:43:56:98:a8:ab:ad:44:
74:ac:18:99:bc:94:3f:3d:21:00:9f:a5:d5:cf:ac:
fe:ed:27:87:6a:ea:51:f0:45:9c:dc:d0:32:22:65:
e9:fa:05:e3:80:07:97:52:58:ff:d8:92:c2:90:af:
bf:f6:82:47:60:03:c1:02:e1:79:f3:b0:de:d4:79:
8c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:35:CB:A1:E8:FF:4B:0F:B1:F8:F2:41:B0:FD:A9:0B:43:08:49:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/beee2a-ee4c-4b8b-ba59-0048ba4e2945/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/beee2a-ee4c-4b8b-ba59-0048ba4e2945/1/TTXLoej_Sw-x-PJBsP2pC0MISb0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.54.160.0/23
195.54.166.0/23
IPv6:
2a0f:4bc0::/29
Signature Algorithm: sha256WithRSAEncryption
7d:1e:cb:7f:98:88:ce:4c:e7:ee:58:73:f0:9f:3e:d2:de:0f:
e6:99:3e:79:b4:2d:86:bc:2c:01:81:d5:3d:a2:dc:65:cf:93:
06:87:34:03:62:8f:c8:d5:a0:85:c4:7d:68:58:5e:dc:08:fe:
0e:34:8d:72:2e:a7:5e:67:2d:cf:c7:46:b5:e3:c8:4b:17:f2:
dc:5f:4b:e9:8c:4d:1d:8f:b0:1c:50:ec:95:07:3f:ed:9d:f3:
a7:21:ac:16:f3:17:39:ed:93:98:ec:da:ab:c9:93:3a:db:f8:
c9:cc:88:ff:66:ac:f4:db:03:7c:bc:ad:dd:6b:88:d6:e5:a6:
44:f6:75:63:0d:ed:e4:4d:d7:c8:46:93:5e:aa:12:d8:62:44:
ae:0b:37:56:53:94:34:cc:e2:77:17:64:a1:cb:43:79:77:e4:
6b:b5:2e:d9:98:ab:cf:95:b2:bc:53:05:93:3c:40:c1:64:d6:
ac:85:f7:1b:39:82:4e:3d:ea:6e:ad:7b:d0:eb:8b:83:12:96:
2c:bd:ce:7c:6f:00:65:f0:b2:bf:e6:a9:30:ad:99:ea:9b:e9:
00:14:24:ee:80:a4:31:4f:78:6a:a0:2a:01:54:92:fb:80:28:
5d:56:58:f7:ff:e7:63:0a:6c:a4:d5:42:46:e0:23:09:29:c9:
63:5a:80:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:13 2024 by rpki-client on console-ams.rpki-client.org