Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y27OEbRbxn_5kqvb2yDL9B7f5Mc.cer
File: Y27OEbRbxn_5kqvb2yDL9B7f5Mc.cer (raw, json)
Hash identifier: lFd8xdEUed68mhJ8dRj0Ckvk13Je5WamYEs+CpftF/0=
Subject key identifier: 63:6E:CE:11:B4:5B:C6:7F:F9:92:AB:DB:DB:20:CB:F4:1E:DF:E4:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9BB45993F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/22b5b2-68e2-4de3-8cc3-685511f3b7fe/1/Y27OEbRbxn_5kqvb2yDL9B7f5Mc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/22b5b2-68e2-4de3-8cc3-685511f3b7fe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:56:13 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 194.11.255.0/24
IP: 194.13.1.0/24
IP: 194.13.64.0/24
IP: 194.13.67.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 668745700341 (0x9bb45993f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:56:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=636ece11b45bc67ff992abdbdb20cbf41edfe4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d7:3e:35:c4:5b:e8:f5:53:bd:86:a1:84:f3:
f6:59:8c:cd:e9:8c:4d:d9:ee:37:3a:6c:bd:80:9d:
79:ba:13:47:f2:83:40:26:38:de:c9:cb:35:fd:19:
45:23:7c:a5:62:4f:85:7b:69:fa:3e:01:3b:e7:1f:
ca:f0:66:6e:5d:20:22:2a:fb:e9:11:a7:8b:49:c8:
3e:84:4b:a1:9d:81:3a:eb:0c:7c:50:18:3c:56:01:
b3:4e:4d:cc:47:99:80:3b:48:42:4e:49:5e:87:9a:
be:7a:4d:01:56:86:c8:5e:44:38:cf:85:d2:a7:59:
f0:91:8c:06:19:06:16:8e:f7:74:01:62:87:9f:fa:
24:72:9e:2a:11:82:ed:7f:1b:67:d2:8b:36:51:34:
fb:3e:d6:54:47:6f:c8:da:3a:c0:a5:f5:32:e9:9c:
af:20:e7:f4:ba:fe:43:17:54:13:fe:5d:29:4e:cd:
d7:69:87:ff:10:47:43:a9:e5:77:a0:a7:47:e5:df:
ee:4c:45:be:25:30:cf:b0:f9:0e:38:4f:b3:f9:39:
7c:ec:4b:a2:c9:ea:05:05:6a:57:2c:3a:7b:27:10:
77:db:cb:09:e4:34:a3:21:93:33:46:87:9b:b4:99:
c1:36:b3:9c:b4:a3:90:fc:0e:32:e0:c1:ca:f3:2b:
81:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6E:CE:11:B4:5B:C6:7F:F9:92:AB:DB:DB:20:CB:F4:1E:DF:E4:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22b5b2-68e2-4de3-8cc3-685511f3b7fe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22b5b2-68e2-4de3-8cc3-685511f3b7fe/1/Y27OEbRbxn_5kqvb2yDL9B7f5Mc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.255.0/24
194.13.1.0/24
194.13.64.0/24
194.13.67.0/24
Signature Algorithm: sha256WithRSAEncryption
72:4f:9c:fe:bd:2e:fd:a6:7a:80:67:4a:9b:bf:34:51:f0:f1:
12:96:3c:e5:a9:22:69:e6:05:99:c7:a2:8c:69:bb:3b:9c:46:
39:66:b7:1d:79:84:28:37:2f:dd:9a:54:2c:bf:ec:8b:4b:9f:
4f:08:30:5c:ee:17:91:8d:7b:43:a0:18:d0:21:ce:30:24:d6:
0c:f6:cf:f6:1d:6b:1d:e3:c5:ed:4b:dd:a2:0b:11:26:f7:09:
b6:b3:e1:0a:00:4b:d7:3c:a0:8e:fc:63:7b:9d:70:df:53:9b:
e6:8d:80:69:9e:32:95:6f:46:cf:d7:a4:04:5c:b3:5d:b4:15:
ad:ea:7e:c3:28:5a:a5:38:f7:f6:58:32:89:6e:89:62:60:54:
f9:24:bb:86:2b:cd:dc:97:fc:77:b5:a0:9f:81:90:69:89:6a:
9f:0a:92:ee:19:b8:ac:7f:b5:ec:0c:fa:a2:fb:a5:ca:76:8f:
01:72:0d:c3:dc:4f:f2:1f:68:a1:93:2c:95:78:a7:cc:14:f4:
8e:95:2e:a2:a4:26:52:01:ed:d1:51:62:d7:98:54:fb:3f:52:
81:1b:0d:07:4c:32:8c:fd:25:10:e4:56:12:76:7f:6a:b2:aa:
07:d2:83:a4:ea:a9:4c:60:0b:86:d7:51:36:c5:29:1c:13:07:
3b:17:3d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:04 2024 by rpki-client on console-fra.rpki-client.org