Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UGn-c1fKKZW8bUZLVQ70wlSJZEo.cer
File: UGn-c1fKKZW8bUZLVQ70wlSJZEo.cer (raw, json)
Hash identifier: ka8Jl5DURswsJec6H9Nhi1y/ozvO9ckWct0Am/hWHBM=
Subject key identifier: 50:69:FE:73:57:CA:29:95:BC:6D:46:4B:55:0E:F4:C2:54:89:64:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A6B167FBE8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/818fe3-f06f-4567-b10a-94075e1f9d34/1/UGn-c1fKKZW8bUZLVQ70wlSJZEo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/818fe3-f06f-4567-b10a-94075e1f9d34/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:05:22 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.208.136.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 715940953064 (0xa6b167fbe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:05:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5069fe7357ca2995bc6d464b550ef4c25489644a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:94:81:09:7a:c4:13:d7:60:95:37:b3:fb:
36:4f:c4:f3:1f:02:6d:eb:ed:48:6a:21:32:ae:ba:
40:0e:a4:7d:33:9c:c5:c5:b4:27:62:87:8d:2b:68:
16:1a:6c:78:5c:fe:6c:a1:3a:5d:1c:02:dd:e8:df:
ba:e7:86:9d:54:ec:7a:bb:8e:35:ce:a5:8b:fe:4f:
f0:66:ee:37:ce:58:b0:d6:11:0b:f8:3d:3b:44:0b:
31:c4:7d:3e:33:e7:c4:58:94:ed:ee:14:9e:43:16:
64:82:23:2f:c3:60:da:66:c3:27:25:3d:86:60:14:
d9:41:97:4d:67:b1:a4:38:ef:c8:86:e3:6f:dd:77:
df:7c:5f:aa:e6:b9:74:31:ce:6a:5c:2f:02:16:ac:
57:f2:c5:72:3c:3d:cb:bd:84:df:d2:22:31:11:19:
a8:b5:ec:6b:0c:a6:48:f7:f7:8e:64:d9:01:c9:6d:
bd:37:c8:34:75:9f:30:40:a5:97:11:39:57:97:a6:
bc:c3:0d:33:33:84:6f:17:75:ec:2b:9c:88:c4:2e:
90:d6:88:eb:44:06:ac:44:ff:a6:4f:42:48:59:e8:
d0:2b:fc:f2:2b:ed:77:e2:37:30:74:a2:a7:a5:77:
57:42:67:92:61:80:ac:bb:c1:a0:32:b1:32:cd:fc:
41:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:69:FE:73:57:CA:29:95:BC:6D:46:4B:55:0E:F4:C2:54:89:64:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/818fe3-f06f-4567-b10a-94075e1f9d34/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/818fe3-f06f-4567-b10a-94075e1f9d34/1/UGn-c1fKKZW8bUZLVQ70wlSJZEo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.136.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f6:e0:da:2c:fb:6e:c9:f3:de:64:3a:66:f4:ed:2d:47:e5:
60:9e:d5:2f:64:3d:dc:d1:0a:d3:59:9e:e4:53:8f:ea:1a:7e:
b9:3a:9e:c2:ab:20:bb:85:c9:dc:c5:2f:72:e7:35:53:66:0b:
7d:16:0d:96:c4:a7:2b:0d:6b:94:d5:3f:6f:fd:b2:d0:ff:7c:
29:67:52:8b:d6:d0:c0:cb:a2:a6:fb:36:3d:bd:3f:ef:97:6b:
a5:0b:7c:10:1a:61:24:d7:c6:58:9e:00:b5:0b:b4:b7:3b:74:
ab:e0:48:40:33:ea:dc:27:1a:10:3b:9a:57:b7:48:9b:f3:82:
c8:e5:f3:d2:ff:3b:65:61:71:c0:48:ec:7c:e5:90:32:16:fa:
dc:5c:28:27:c8:22:35:a1:49:8e:1a:63:3e:82:68:d2:ce:2c:
34:f3:79:3d:e0:3c:16:2c:d4:74:f5:92:71:7a:65:75:77:ff:
c5:f9:94:d7:a2:9c:89:c4:80:dd:f7:c3:50:e9:44:40:99:66:
96:7c:2f:b9:1b:cc:1d:04:49:72:6a:80:93:a7:27:6c:ab:f7:
97:66:f4:ae:69:ca:40:c2:e8:fc:cf:97:c5:12:d0:5d:ae:a2:
82:30:03:40:06:e9:45:f5:0b:bd:d8:08:a1:4c:7b:0f:72:49:
28:43:89:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:43 2025 by rpki-client