Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XamZ82ng8owLwr6Ofy-I_iH3itk.cer
File: XamZ82ng8owLwr6Ofy-I_iH3itk.cer (raw, json)
Hash identifier: Mt6lBeY7qbfqPRLC5HtB7LR2S4Ut1tEcD2dLnFgvLAg=
Subject key identifier: 5D:A9:99:F3:69:E0:F2:8C:0B:C2:BE:8E:7F:2F:88:FE:21:F7:8A:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A15A0C620C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/3109af-d37f-4331-9a5d-3a518bddf011/1/XamZ82ng8owLwr6Ofy-I_iH3itk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/3109af-d37f-4331-9a5d-3a518bddf011/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:55:03 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 194.147.242.0/23
IP: 194.147.250.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 693000495628 (0xa15a0c620c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:55:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5da999f369e0f28c0bc2be8e7f2f88fe21f78ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:d0:53:2d:4c:04:56:f0:5e:9f:6d:01:2d:
cd:bf:72:d4:a1:3c:38:25:5b:b8:c9:a7:47:14:13:
53:d6:e7:45:1d:12:25:0e:ca:8f:74:55:6c:2a:05:
31:66:9b:d2:ff:ce:fd:e4:e5:2d:8f:fd:09:34:45:
a1:92:6d:83:47:32:17:16:0a:ab:12:eb:a0:a0:d4:
3c:35:e9:3c:c9:3a:8b:d4:71:d3:3e:58:5d:8a:57:
fc:94:1a:56:30:bf:77:b5:65:db:6a:a2:51:35:a3:
aa:29:ab:2d:ec:78:dc:fe:54:40:d6:d2:ee:7e:99:
77:c7:42:14:ef:90:3a:9c:af:ac:0f:06:0d:ee:ee:
15:52:82:47:1b:56:5b:3d:65:e5:a7:a1:fe:43:38:
9c:80:5a:6a:0a:b9:96:c1:8e:6c:c5:ff:18:3d:ec:
26:e3:e3:96:27:7a:7b:a1:87:b1:60:62:81:d6:50:
63:32:33:43:17:b0:f5:99:b3:1b:4a:cb:da:9c:32:
8a:1b:be:23:5b:20:b4:10:3a:40:57:ff:18:cb:7e:
09:f1:39:37:0d:7c:ed:34:83:28:10:ec:96:87:88:
50:af:9b:ab:b2:91:ca:6c:79:9b:96:8a:18:f9:1d:
44:26:83:f6:c5:4f:42:39:4c:92:56:15:15:fd:f4:
c8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A9:99:F3:69:E0:F2:8C:0B:C2:BE:8E:7F:2F:88:FE:21:F7:8A:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3109af-d37f-4331-9a5d-3a518bddf011/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3109af-d37f-4331-9a5d-3a518bddf011/1/XamZ82ng8owLwr6Ofy-I_iH3itk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.242.0/23
194.147.250.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:21:19:b9:af:dd:f8:a6:bc:a4:c1:36:29:40:14:e5:74:73:
d4:28:32:87:7d:1f:8a:49:6c:7c:a6:e9:12:b0:d0:c8:9f:80:
ed:61:16:cd:18:3b:8d:4c:80:05:d2:c8:57:c5:93:13:a1:2e:
7d:e7:35:37:ee:95:1f:d5:55:f3:48:8d:25:f0:67:d3:57:04:
4f:17:27:6a:bb:31:3a:83:1f:ea:44:3b:a5:12:88:28:bd:74:
c9:46:19:c2:9c:6b:3c:fb:f1:1a:06:7a:a0:dd:3a:e5:1b:96:
73:a9:a4:82:2c:59:22:2d:8c:aa:f5:47:28:b1:69:0c:ca:31:
63:b0:40:64:24:e3:c1:86:79:5a:d2:be:ff:01:28:67:aa:b4:
19:d3:b8:57:2b:45:ea:ec:8b:df:16:db:3c:4d:62:8e:9c:23:
55:84:3f:87:db:47:66:97:8b:ca:5b:67:21:52:af:b1:fb:6e:
39:ab:0b:f4:00:a6:bb:9c:f1:dc:a2:b9:11:46:f9:15:93:0e:
aa:96:0b:3d:18:a8:5e:ea:8b:72:71:13:5c:b2:46:23:90:cf:
7f:38:9a:48:d6:c3:08:42:41:be:ef:00:cd:e5:b2:80:1f:64:
ec:81:86:03:99:2f:8d:61:1e:9a:ee:d0:1a:42:12:53:bd:29:
70:17:56:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:58 2024 by rpki-client on console-fra.rpki-client.org