Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TXpUTXPjaPaYMMyL4LIDIiJn7lA.cer
File: TXpUTXPjaPaYMMyL4LIDIiJn7lA.cer (raw, json)
Hash identifier: d9m19SNRuuj1J4h14ikJs5NkBA0ax7hk/RGPg2nyQMw=
Subject key identifier: 4D:7A:54:4D:73:E3:68:F6:98:30:CC:8B:E0:B2:03:22:22:67:EE:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A31044C0C8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/df0a38-9cad-464c-a836-42306f633155/1/TXpUTXPjaPaYMMyL4LIDIiJn7lA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/df0a38-9cad-464c-a836-42306f633155/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:01:55 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.220.70.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 700352610504 (0xa31044c0c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:01:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d7a544d73e368f69830cc8be0b203222267ee50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6c:4b:f7:51:a2:20:cc:7f:89:c2:3e:98:55:
36:3e:46:83:4c:4f:0e:1d:27:1f:23:63:1c:93:94:
f6:39:b4:82:58:68:93:d5:ff:7a:63:a0:90:78:ad:
58:76:9f:31:6f:b0:7c:4c:cf:2f:4f:80:0e:2f:49:
ab:3e:d5:56:b4:b2:86:e3:02:2a:74:8d:00:79:e9:
c4:5b:40:5d:25:90:f1:ee:30:a9:5f:5a:17:d4:82:
8f:b0:22:e8:d8:54:bc:9f:f1:dd:46:c1:7a:d1:02:
90:fa:45:a9:c0:86:3a:16:30:06:95:44:5e:96:09:
e8:04:71:44:21:a0:c3:75:0d:a7:f0:52:68:66:ea:
a2:3f:9b:0c:25:ba:f5:99:3c:dc:e1:8c:f1:05:85:
a2:8e:c6:29:62:f2:f1:4f:d1:f2:3d:b5:79:5c:e8:
1f:f2:f3:9e:7d:5e:fb:d1:4a:5c:8a:8e:ec:ea:92:
c6:8c:27:eb:55:a6:bf:67:91:7e:50:d5:e9:d9:ba:
8a:c6:34:76:8b:7a:2b:6e:ba:75:59:26:94:e8:ee:
52:a1:62:0a:8d:57:b7:a4:ac:a0:f7:64:fb:4e:05:
3e:07:87:f6:af:e9:5f:e7:5c:b9:b4:04:4e:42:ad:
db:1f:e0:4c:af:ba:2d:9e:61:4e:48:11:52:0e:b2:
47:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7A:54:4D:73:E3:68:F6:98:30:CC:8B:E0:B2:03:22:22:67:EE:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/df0a38-9cad-464c-a836-42306f633155/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/df0a38-9cad-464c-a836-42306f633155/1/TXpUTXPjaPaYMMyL4LIDIiJn7lA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.70.0/24
Signature Algorithm: sha256WithRSAEncryption
61:74:e9:75:db:fb:88:de:17:ee:0d:41:ff:eb:e3:1f:b2:f3:
04:13:1e:dc:05:5b:d4:a0:85:b3:72:18:ed:5f:77:9f:6b:93:
69:1c:5e:6e:9d:e2:ed:f5:6e:26:4f:95:67:b3:d4:14:e8:14:
58:30:d4:18:24:cd:14:64:2e:d6:bf:53:6e:93:fe:39:85:72:
44:cd:7d:d4:25:cd:3a:d7:d0:04:f7:31:f1:39:2c:aa:b5:8c:
62:4d:c5:e9:6b:7f:ae:37:67:97:2e:ac:77:6f:be:7c:8e:b0:
9b:eb:85:2e:b6:ab:8d:f8:f8:44:67:27:d7:30:e7:51:32:57:
3c:45:2e:70:34:bc:2c:a7:fe:d0:3d:e7:65:ab:9d:96:97:45:
f4:09:7c:01:04:21:52:b4:50:65:a2:80:5c:04:ae:1e:6a:89:
79:da:e9:1e:21:e2:6b:a5:a6:27:fc:90:7b:b9:72:da:d4:00:
9a:87:76:f6:b9:8e:a2:28:b3:79:44:2b:04:73:19:80:f8:13:
81:2a:a6:33:7d:82:29:93:3c:de:b9:00:fe:04:d1:7a:b3:9a:
a5:26:7d:a0:27:a2:38:14:54:64:7d:b4:4f:50:15:aa:33:95:
53:8b:78:de:87:8b:ca:4c:f1:41:88:27:80:71:cf:f0:1b:05:
a8:b3:c0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:14 2024 by rpki-client on console-ams.rpki-client.org