Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UYLfW7Z7klRv3U1zDdB9jLerQDA.cer
File: UYLfW7Z7klRv3U1zDdB9jLerQDA.cer (raw, json)
Hash identifier: IrX/AWQm37aHgB6BKlHR2aDnTvw3SN9IHQMlYxQzV1A=
Subject key identifier: 51:82:DF:5B:B6:7B:92:54:6F:DD:4D:73:0D:D0:7D:8C:B7:AB:40:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A543FE704A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/912a06-f3c8-4559-9a24-b2dd1a745a50/1/UYLfW7Z7klRv3U1zDdB9jLerQDA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/912a06-f3c8-4559-9a24-b2dd1a745a50/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:59:50 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.249.24.0/22
IP: 2a0d:e780::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 709810352202 (0xa543fe704a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:59:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5182df5bb67b92546fdd4d730dd07d8cb7ab4030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ce:1a:5c:e1:3d:17:87:d5:3c:b3:2d:46:ef:
a9:78:81:d9:6d:df:fb:b1:4c:2d:17:be:a6:e6:57:
77:b6:e6:ef:6b:f3:f7:c8:8e:19:d3:4d:de:ca:b8:
40:37:d2:78:c6:a6:5f:7a:5e:fe:bc:26:c3:de:0b:
0a:9e:76:06:a3:17:21:31:3a:22:4b:73:47:c8:2b:
0c:de:8b:df:47:65:6c:8a:9b:8f:9e:ad:a0:76:18:
f2:31:66:38:b0:ad:ae:4d:da:2c:e6:5d:ba:19:cd:
25:09:e5:f0:d8:2f:2f:fd:81:ad:c8:52:dc:49:89:
a7:d1:7f:19:b1:6a:70:70:bf:a5:a9:7a:22:34:c1:
2c:2a:18:81:e3:ad:3a:51:7c:cc:95:2f:c4:11:ac:
06:33:12:fb:6c:ab:89:3e:15:49:31:69:bb:4b:f0:
ce:a0:0b:1c:fe:96:3f:20:02:3c:93:f8:0f:8b:c4:
94:cb:03:c5:b6:e4:3f:9a:ed:11:2c:a4:04:4c:3b:
66:df:8a:cd:9e:f0:f3:d4:e6:d9:a5:50:f7:db:19:
45:c0:60:d3:cc:e6:3c:8c:37:9a:2d:c2:96:58:f2:
f2:c2:a5:c8:a2:7d:ba:5a:6b:71:32:6e:cb:c8:2a:
e7:f2:f6:34:21:76:32:a3:32:e3:9a:79:58:cc:eb:
98:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:82:DF:5B:B6:7B:92:54:6F:DD:4D:73:0D:D0:7D:8C:B7:AB:40:30
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/912a06-f3c8-4559-9a24-b2dd1a745a50/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/912a06-f3c8-4559-9a24-b2dd1a745a50/1/UYLfW7Z7klRv3U1zDdB9jLerQDA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.24.0/22
IPv6:
2a0d:e780::/29
Signature Algorithm: sha256WithRSAEncryption
79:72:f4:4b:5c:57:eb:b9:fa:30:3e:7c:f7:a8:f1:85:4a:78:
2b:e4:a2:e0:90:70:4b:a3:a2:f9:a0:90:e8:5a:92:eb:51:fb:
ad:98:76:e1:0e:1f:68:6a:37:a1:33:4d:e0:71:da:76:39:99:
12:62:ed:8d:7b:1f:58:b7:56:43:aa:92:e4:05:b1:39:0f:ec:
8f:e7:ef:cb:c4:9a:91:cf:3f:91:24:20:33:95:c7:c6:27:cd:
56:93:2d:26:38:62:b6:43:05:e9:8a:9a:55:a9:ac:9b:42:df:
27:eb:47:0b:ac:a0:76:e3:7a:0f:72:24:4e:6b:f8:15:ca:9d:
93:f6:0e:cf:91:db:14:70:7a:ef:14:21:2a:5c:9f:be:41:0d:
0d:f7:12:26:67:01:f9:64:0d:a0:b0:44:f8:56:53:0a:ad:d8:
08:83:58:69:c1:af:24:b2:96:d3:76:bd:fa:7d:16:12:58:ac:
6b:26:ed:19:07:0b:14:da:81:de:0a:0d:4d:89:25:01:b9:b5:
31:10:5a:1d:47:7e:80:bf:3c:25:de:fb:d6:e4:df:8f:4e:b8:
4f:26:da:f9:b7:ee:0f:7e:43:1c:ad:1f:4c:f8:77:e8:04:ca:
2a:a3:a8:5d:dc:ae:7d:06:97:ed:53:70:88:10:e4:2b:32:66:
89:2f:18:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:33 2024 by rpki-client on console-ams.rpki-client.org