Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XDGUkgh3QjDPjq_cXytIslDvMI0.cer
File: XDGUkgh3QjDPjq_cXytIslDvMI0.cer (raw, json)
Hash identifier: yA5mEy3ZagTdX0Is7FMSsehsM+ju+AhyAAYLe86q7+Y=
Subject key identifier: 5C:31:94:92:08:77:42:30:CF:8E:AF:DC:5F:2B:48:B2:50:EF:30:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9B11BD8A15
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/88e8c7-f02b-45c5-9d8e-bf3e80e7da57/1/XDGUkgh3QjDPjq_cXytIslDvMI0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/88e8c7-f02b-45c5-9d8e-bf3e80e7da57/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:01:30 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.141.196.0/22
IP: 2a06:7840::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 666017565205 (0x9b11bd8a15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:01:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c31949208774230cf8eafdc5f2b48b250ef308d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d5:01:4e:69:fe:6e:f7:80:b7:bb:47:f6:78:
9f:4f:1f:2f:3a:2a:9d:5a:32:06:95:78:5a:f4:c4:
c2:99:f4:30:55:2b:2b:21:da:5d:82:fb:02:3b:ee:
9b:53:22:b8:56:02:9e:3d:f6:0f:88:df:e0:2d:16:
c0:31:b9:d6:f6:71:4b:c7:bf:d4:ed:0f:fc:d2:10:
8e:a6:1e:15:de:87:a0:91:25:ec:f8:61:64:39:23:
51:0b:64:4e:f5:32:93:90:50:e2:00:1c:94:55:52:
c5:b1:32:ee:00:b1:7f:86:6d:e7:eb:9b:f3:93:87:
d5:00:e4:9a:17:38:15:d7:f7:64:e2:34:95:0a:93:
b8:92:f5:5d:06:31:8c:d5:d9:e5:e5:9f:46:02:1f:
e3:1a:23:af:08:0a:4d:8f:b9:58:df:de:bc:35:7c:
e6:ff:71:1d:7a:3b:fb:3c:b8:be:61:54:ac:72:ac:
7d:b3:dc:44:d8:b3:72:cf:9c:8b:06:02:87:f6:75:
32:f8:07:d2:b5:72:43:ef:81:ed:c5:41:87:c4:97:
8d:af:cf:de:70:d1:84:d3:66:23:2f:b4:c5:38:d0:
7a:ad:e5:81:5a:6e:33:e9:2b:a1:2d:b3:2c:98:64:
1b:3e:58:14:48:67:9a:24:2e:2f:ba:e0:df:bf:71:
34:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:31:94:92:08:77:42:30:CF:8E:AF:DC:5F:2B:48:B2:50:EF:30:8D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/88e8c7-f02b-45c5-9d8e-bf3e80e7da57/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/88e8c7-f02b-45c5-9d8e-bf3e80e7da57/1/XDGUkgh3QjDPjq_cXytIslDvMI0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.196.0/22
IPv6:
2a06:7840::/29
Signature Algorithm: sha256WithRSAEncryption
62:4d:09:de:d2:e0:13:4f:d2:91:4b:cb:dc:e3:47:6c:7b:ea:
32:43:6f:27:d5:75:36:5a:6b:51:b8:42:ad:b0:b7:58:ad:23:
60:d3:c4:1c:43:00:d4:aa:eb:17:af:96:4f:48:a0:f2:4a:ee:
e9:31:7d:74:26:c2:a9:95:39:1f:50:8c:5b:56:56:42:d1:3d:
d5:6a:80:63:ce:96:ba:b4:97:0b:f0:58:e2:3d:a8:4b:1c:a2:
10:e2:ce:57:37:d4:f9:b3:6a:70:75:92:d3:83:68:44:83:87:
f1:23:5c:62:ae:b6:7a:79:e8:06:a5:94:5c:d2:8a:3b:21:07:
a7:aa:d1:b4:74:cb:39:96:32:d1:10:c5:ac:a7:f1:9f:cb:ba:
16:e7:93:e6:53:51:62:8c:57:4a:bb:e7:5a:9c:b0:92:2f:ee:
a1:40:87:f4:e8:8a:5a:f6:5d:99:dc:3f:9b:1d:b4:95:0a:0e:
0b:0e:88:b8:42:05:61:0b:74:cc:cb:fc:08:f1:88:30:5b:f9:
93:8e:97:60:fd:fd:ce:02:72:0c:2c:3b:da:12:64:d5:57:59:
5c:2c:8d:7e:f5:0d:fc:ba:f3:05:99:fa:61:01:fc:52:6d:03:
c7:3f:fe:ca:34:8d:a9:06:ba:e5:87:4b:c0:77:5f:49:7a:20:
0a:66:da:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:52 2024 by rpki-client on console-fra.rpki-client.org