Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YEDQtuhAI7hvi5PzEFC_UeFsgb8.cer
File: YEDQtuhAI7hvi5PzEFC_UeFsgb8.cer (raw, json)
Hash identifier: dpaqHLbbw5zNcfYBSq6RDiSMQxVtu28Bd2ZboGb81sk=
Subject key identifier: 60:40:D0:B6:E8:40:23:B8:6F:8B:93:F3:10:50:BF:51:E1:6C:81:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A3906DC478
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/f542c0-89a4-4d31-b0b5-e592a9ebe604/1/YEDQtuhAI7hvi5PzEFC_UeFsgb8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/f542c0-89a4-4d31-b0b5-e592a9ebe604/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:55:00 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.196.52.0/22
IP: 2a0a:66c0::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 702502782072 (0xa3906dc478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:55:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6040d0b6e84023b86f8b93f31050bf51e16c81bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f1:3c:e0:ba:37:72:8a:37:57:c1:7d:10:99:
e2:5c:b9:d9:17:f1:e8:ee:95:37:4b:41:25:59:9e:
d8:4e:be:a7:6f:5e:37:5e:da:5b:89:55:a9:11:48:
5a:bb:f8:d6:0f:a8:05:92:2a:cb:ce:f6:4d:f9:e4:
e5:f1:0c:87:92:0f:b3:0f:b8:1f:06:bd:b8:a4:18:
28:9b:56:90:29:06:d4:8b:70:19:82:da:87:11:36:
18:08:03:14:6d:47:f1:36:1c:6c:3c:e8:72:71:d4:
42:d7:f0:91:e9:07:3f:a8:5d:17:ce:f7:c5:4e:f8:
b2:d3:da:b9:c5:e5:36:97:8a:1a:d8:8a:9e:da:3a:
e0:3f:c2:8c:ca:d9:80:c6:3e:26:91:01:37:61:09:
c1:c4:d1:5e:36:cf:18:33:92:21:9f:4c:2f:21:cc:
a7:dd:7f:70:3b:ad:d1:98:c0:05:4a:d6:7e:cf:33:
2f:64:72:99:8b:d4:9f:d8:a5:ac:ce:c5:e8:55:c7:
5e:7c:62:61:bd:6b:21:aa:25:15:a7:6a:a2:ab:34:
35:37:9e:6c:ee:a7:f7:2b:28:4d:2a:ca:29:12:76:
c5:7e:cd:ff:d9:50:7a:8e:ef:45:2a:c4:85:b9:91:
c4:88:c7:75:88:69:87:0a:7b:1d:50:57:0a:fb:26:
44:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:40:D0:B6:E8:40:23:B8:6F:8B:93:F3:10:50:BF:51:E1:6C:81:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f542c0-89a4-4d31-b0b5-e592a9ebe604/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f542c0-89a4-4d31-b0b5-e592a9ebe604/1/YEDQtuhAI7hvi5PzEFC_UeFsgb8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.52.0/22
IPv6:
2a0a:66c0::/32
Signature Algorithm: sha256WithRSAEncryption
ad:d1:a3:7e:a2:87:08:e1:64:28:90:a5:73:2e:ae:a9:8f:46:
9f:f7:7d:6e:b0:86:41:d1:af:ba:37:0e:f0:e4:45:10:fd:c9:
66:44:5f:17:6e:9e:53:d3:79:45:f0:84:ac:f2:5a:06:cb:79:
8e:95:c4:7c:4b:45:c7:55:d0:bc:e7:51:72:fd:26:e4:46:fe:
65:48:c5:08:79:2f:1f:14:6a:68:09:fc:43:3e:29:64:9f:a9:
04:38:fa:58:da:96:ed:23:98:29:18:38:47:04:79:fe:ad:35:
7a:14:c5:b6:49:9d:7c:9a:fa:6b:65:fd:b9:f1:e7:00:1d:65:
5c:f0:00:43:5f:cd:d3:8c:2e:44:c5:3c:31:18:c5:42:97:98:
fc:e5:6b:30:ed:67:0e:4b:da:88:5c:41:34:02:d0:b2:c7:9f:
d8:dd:90:f6:d3:d9:43:2b:a0:a8:bf:b0:5b:17:a0:3e:55:2c:
08:00:95:e8:3c:33:dc:44:90:1b:ac:14:25:55:d3:20:75:81:
ad:fa:94:ac:6b:4f:65:87:72:56:c2:8c:15:76:ab:b0:9f:37:
43:2e:a9:78:98:c4:37:a7:f5:a7:32:94:05:10:f5:cc:d2:5d:
6e:63:6e:04:93:8e:3a:bd:7d:7e:e7:da:24:47:27:49:61:4e:
9a:80:62:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:07 2024 by rpki-client on console-fra.rpki-client.org