Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XEIVYMeR3KKJIfI_yi5ijGsjfIE.cer
File: XEIVYMeR3KKJIfI_yi5ijGsjfIE.cer (raw, json)
Hash identifier: Qp8TiysaRgzB8MhcGxoXuttiIT7CTxJTIVgf+yrwQII=
Subject key identifier: 5C:42:15:60:C7:91:DC:A2:89:21:F2:3F:CA:2E:62:8C:6B:23:7C:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A5B097858C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/095be7-cf74-4744-a690-b9596f862e68/1/XEIVYMeR3KKJIfI_yi5ijGsjfIE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/095be7-cf74-4744-a690-b9596f862e68/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:05:01 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.229.208.0/22
IP: 2a0d:ce00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 711632323980 (0xa5b097858c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:05:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c421560c791dca28921f23fca2e628c6b237c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:10:80:8a:6c:54:ca:34:42:a1:18:58:59:
1b:2f:c2:d1:06:8b:de:df:2b:32:f7:ea:69:91:dc:
c4:61:02:c4:9f:c8:83:e3:78:a9:64:95:42:f0:1b:
1f:79:bc:d5:34:30:6b:79:db:fb:7b:be:d3:fa:ef:
97:c0:a4:58:9d:82:2f:45:f7:d8:aa:72:2e:0f:19:
e7:01:14:fb:50:7d:66:ea:cd:bc:89:c1:75:b9:1b:
8c:41:f9:9e:88:3e:38:bf:44:c5:87:da:42:d0:e5:
ac:24:62:7b:2b:f5:13:f1:58:83:c6:dc:a5:6c:6d:
0d:ca:6f:72:e8:4e:87:d5:b0:b6:45:97:0f:bf:6d:
85:a6:f7:6d:93:5f:e5:18:07:b4:48:36:b5:73:85:
56:5c:e0:ff:04:3d:1c:a1:85:30:09:54:4a:51:f0:
8e:92:05:9e:f2:aa:7e:b2:5c:f3:d9:8f:7e:ae:5d:
eb:57:31:a1:44:64:7c:1c:ec:55:0c:c7:53:e1:59:
41:13:f0:86:16:c4:17:65:15:88:a2:fd:83:1e:7c:
9d:85:5e:a0:85:19:f4:93:cc:5e:e9:1a:e5:9e:65:
6d:a0:63:71:7e:24:58:f4:4c:44:d4:bb:d2:66:58:
cd:53:78:d4:02:4f:48:70:d3:51:e0:8e:93:ba:48:
a0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:42:15:60:C7:91:DC:A2:89:21:F2:3F:CA:2E:62:8C:6B:23:7C:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095be7-cf74-4744-a690-b9596f862e68/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095be7-cf74-4744-a690-b9596f862e68/1/XEIVYMeR3KKJIfI_yi5ijGsjfIE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.208.0/22
IPv6:
2a0d:ce00::/29
Signature Algorithm: sha256WithRSAEncryption
a7:8e:44:55:30:49:99:85:33:60:e5:02:cb:8f:75:74:01:b2:
d6:dc:07:ea:b1:c9:5d:a9:9f:2a:7d:fc:bc:11:f6:81:e7:fd:
c7:f2:35:d2:8c:98:8c:4e:8b:c1:4a:c0:69:09:75:49:4e:70:
6a:bf:41:2c:d2:7b:63:69:ce:c1:d8:f7:07:22:32:10:f3:05:
c5:e1:50:2c:c2:30:51:bf:6c:94:e3:c1:69:80:a5:ec:4a:ce:
7a:1e:02:80:82:08:a3:c6:7d:f3:3c:82:44:3e:f4:42:6f:33:
67:d6:89:c7:9a:9a:22:6a:74:40:53:69:1d:94:0a:51:1e:11:
28:ac:4b:52:f6:de:bd:72:8b:26:9f:6a:df:c8:36:0f:a9:25:
8f:8e:f0:1e:dc:13:27:46:82:a0:72:53:69:0e:15:03:01:c3:
83:57:bd:26:6f:ef:fe:e4:51:60:58:8c:89:86:67:25:95:fa:
f4:ac:cb:53:63:47:27:ae:e8:b6:92:fa:03:d5:61:31:59:ab:
a1:43:5f:fe:ad:0f:aa:05:42:db:a1:fb:65:fb:eb:f6:40:92:
57:48:1a:91:f0:1d:a4:43:51:89:0e:fc:8e:42:35:bf:b8:8e:
ce:00:14:a8:f5:d6:9d:60:a5:cc:78:d4:96:95:21:2f:16:72:
5b:dd:f2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:34:27 2024 by rpki-client on console-ams.rpki-client.org