Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ud-piIf0VoJ6NvZlZX9VDEJeOPk.cer
File: Ud-piIf0VoJ6NvZlZX9VDEJeOPk.cer (raw, json)
Hash identifier: 1pUcbm9f7vyB7g5x2BaIl5Kn/8pd9SbH+CCkpuRTRZk=
Subject key identifier: 51:DF:A9:88:87:F4:56:82:7A:36:F6:65:65:7F:55:0C:42:5E:38:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AAB5DF3BF9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/1f320d-1396-4854-900e-a6609984e1b2/1/Ud-piIf0VoJ6NvZlZX9VDEJeOPk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/1f320d-1396-4854-900e-a6609984e1b2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:58:51 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 194.93.60.0/22
IP: 2a09:3b80::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 733195746297 (0xaab5df3bf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:58:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51dfa98887f456827a36f665657f550c425e38f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:72:24:b9:a3:3d:22:d8:eb:52:c4:4d:b4:f7:
9f:da:f9:71:32:20:25:cb:08:25:eb:b1:e7:db:18:
6b:2c:36:5c:0d:7f:02:1b:d4:ba:13:1f:4b:5f:a9:
85:ed:bc:f2:b0:16:de:e7:17:c8:90:a5:03:53:3b:
88:0a:be:e0:4f:13:52:38:a8:5e:1a:ef:94:89:4f:
63:f2:8d:a2:4b:03:31:5f:0e:bc:4c:f2:f5:e0:16:
54:cf:ed:dd:68:97:75:92:9f:cf:ee:5c:b5:89:74:
2c:f1:25:25:b5:dc:f2:29:b1:c5:ce:5c:9e:be:bc:
49:e9:a5:9e:14:a3:38:e5:6a:c3:01:d6:e8:74:9b:
c8:13:30:c7:f2:23:ac:d2:4a:43:a4:06:28:3c:85:
69:91:75:69:69:f0:67:34:4c:5d:57:db:be:14:5a:
cb:5e:30:02:e2:1b:af:2d:6a:8c:68:b1:b6:38:e2:
94:54:b3:bf:35:df:90:c1:88:9b:e2:a0:ab:9c:74:
48:e3:ff:a3:fd:ac:80:79:ba:24:90:3e:f4:d7:15:
22:8d:42:0b:74:20:2f:5c:db:59:2f:74:4e:1a:ce:
8f:72:35:21:c6:a7:1d:10:12:0a:c7:0a:bb:97:4e:
5b:42:3a:d7:56:1e:0d:8d:16:ba:55:20:2a:02:16:
59:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DF:A9:88:87:F4:56:82:7A:36:F6:65:65:7F:55:0C:42:5E:38:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1f320d-1396-4854-900e-a6609984e1b2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1f320d-1396-4854-900e-a6609984e1b2/1/Ud-piIf0VoJ6NvZlZX9VDEJeOPk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.60.0/22
IPv6:
2a09:3b80::/29
Signature Algorithm: sha256WithRSAEncryption
b1:44:d4:24:a0:e1:75:29:43:92:91:02:68:02:cb:1d:56:7b:
b4:7e:e2:37:d4:6d:2d:70:82:26:f2:81:4c:6b:12:9e:c5:5f:
85:fd:f0:66:8d:48:9f:63:60:46:af:85:ff:a7:68:91:54:82:
e5:fd:0d:ae:49:d4:39:73:74:90:5c:2c:70:49:41:d1:cc:23:
b6:f3:bc:8f:c8:65:e3:4e:a9:5f:c1:a5:1d:22:65:54:1b:2e:
a9:13:f8:a4:76:de:07:ba:a3:e1:ed:73:e8:08:8c:20:fb:d2:
43:94:2e:e6:7f:d8:56:9a:61:33:6f:2c:2f:b1:45:c0:9f:41:
8f:da:63:8d:39:60:fb:4f:fe:04:2e:0b:47:6d:f7:ae:60:09:
38:f7:1d:c3:00:05:37:d4:e6:c3:3b:22:8e:47:29:d9:85:a8:
5b:94:7c:ba:9e:ed:98:50:68:a0:7e:67:d4:14:a4:e0:68:60:
c1:94:fa:7f:c6:6c:08:01:d0:7d:09:11:4e:86:0e:d3:48:9d:
89:85:72:b1:aa:20:bb:b6:ab:a3:e0:bd:2e:57:df:6b:7f:c5:
1d:ba:6c:5d:76:da:3d:83:17:88:4e:1d:ed:ff:b3:d1:ac:d7:
b7:cc:3d:ed:6d:87:9c:19:6b:31:5c:60:32:e4:ee:7a:ab:67:
df:8d:7e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:35 2024 by rpki-client on console-ams.rpki-client.org