Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XVHt5Hn-R-POgjVkNTVTppw__kw.cer
File: XVHt5Hn-R-POgjVkNTVTppw__kw.cer (raw, json)
Hash identifier: HxcZTuasD+1IVTi1unAO/ZKGIVeOsAh/SrdPSbWoKTM=
Subject key identifier: 5D:51:ED:E4:79:FE:47:E3:CE:82:35:64:35:35:53:A6:9C:3F:FE:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A41AEA43F9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/4f50cc-448f-454d-b9f5-630051c59582/1/XVHt5Hn-R-POgjVkNTVTppw__kw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/4f50cc-448f-454d-b9f5-630051c59582/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:01:19 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 213.139.208.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 704826196985 (0xa41aea43f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:01:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d51ede479fe47e3ce823564353553a69c3ffe4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2f:be:0d:16:7f:72:b0:a9:b4:1f:71:e8:0b:
a7:70:41:53:11:56:6c:de:29:b0:f2:b6:4e:bc:f2:
0c:8c:cf:7f:2d:bc:fc:93:cb:61:d2:50:b2:99:f0:
b8:75:46:b0:ad:cc:f7:06:b1:88:4c:9f:aa:d8:76:
da:12:91:2f:cb:14:6b:85:01:eb:ee:ce:41:08:99:
61:8f:94:d1:06:e6:f4:a6:09:da:8b:6c:e8:ee:67:
24:51:6d:b1:9c:54:95:9a:cc:75:43:d7:36:98:13:
7d:42:59:ec:03:6d:35:ca:e8:62:4e:3e:a4:81:6d:
8d:83:e4:84:6b:9f:75:d4:8f:2c:f7:fe:10:c2:30:
5c:94:0d:b7:94:c1:a3:75:da:5d:9f:2a:c2:89:38:
83:cc:58:19:36:20:61:3d:4a:3d:a2:32:ef:68:3b:
10:ba:da:97:f5:36:08:e0:6b:cb:cb:7e:d5:5d:42:
db:7b:6d:92:31:5f:30:73:6e:26:91:1e:c4:33:32:
35:03:12:85:05:55:1f:82:00:5f:c4:b9:de:c5:c7:
5b:28:90:54:f5:c0:be:d8:77:04:13:42:c6:02:ab:
1c:f9:b8:69:96:05:9c:04:42:39:86:de:10:a5:77:
33:0c:fb:92:b3:7b:1e:ed:24:7a:dc:9a:4c:6f:12:
4e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:51:ED:E4:79:FE:47:E3:CE:82:35:64:35:35:53:A6:9C:3F:FE:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4f50cc-448f-454d-b9f5-630051c59582/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4f50cc-448f-454d-b9f5-630051c59582/1/XVHt5Hn-R-POgjVkNTVTppw__kw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.208.0/22
Signature Algorithm: sha256WithRSAEncryption
80:6f:44:9a:f9:14:91:a7:42:77:e2:2c:21:25:44:84:3d:2f:
d3:73:c4:8e:6a:85:01:d6:55:55:83:7f:c9:3d:d7:a8:ca:ea:
b5:84:e0:3d:fc:e1:94:e1:0e:ee:fe:0d:b4:44:5b:4d:ff:94:
0a:17:3d:17:8c:7e:97:7c:8c:c5:70:8d:24:f1:5b:0d:aa:51:
86:c4:fd:3e:fe:08:f6:4c:24:72:98:5e:16:21:43:36:d6:f1:
1d:9e:a4:77:10:ad:bb:41:65:40:88:91:c8:e9:aa:35:df:94:
8d:95:76:23:50:66:b3:97:9d:b2:14:91:41:81:fd:87:31:4c:
35:80:91:50:85:92:17:a0:7f:3a:69:ca:ca:9a:b7:98:ec:e5:
2b:25:d8:53:e1:78:dc:3e:ab:da:f3:c3:5f:b9:38:43:06:9b:
57:cb:6f:67:11:2b:60:32:c6:64:2c:d3:8e:b6:3b:70:d3:bb:
91:b5:62:d9:fc:51:07:98:c8:fb:f3:13:49:a5:c6:ba:76:a2:
00:d0:c8:60:cb:b2:eb:20:e6:5d:4e:19:5c:16:e7:bd:1f:5f:
93:0a:57:15:17:6e:1d:0a:f4:49:f1:b9:4a:0a:8a:85:c4:98:
e8:eb:2c:53:5d:c9:3f:71:e4:3a:3c:6f:51:da:51:ee:44:ed:
14:10:98:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:56 2024 by rpki-client on console-fra.rpki-client.org