Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YHO0QmGYEfkGnP_Q5Cd5pTRmMMY.cer
File: YHO0QmGYEfkGnP_Q5Cd5pTRmMMY.cer (raw, json)
Hash identifier: td8SB9hQQU/0BdB6zkBZOfTKVYz6New/6fa7FFFy5tw=
Subject key identifier: 60:73:B4:42:61:98:11:F9:06:9C:FF:D0:E4:27:79:A5:34:66:30:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AFFA303EFD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/3ae3ab-1c27-440b-82bb-20c444f2c4f6/1/YHO0QmGYEfkGnP_Q5Cd5pTRmMMY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/3ae3ab-1c27-440b-82bb-20c444f2c4f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 12 Apr 2022 07:43:22 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 195.95.150.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 755816742653 (0xaffa303efd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 12 07:43:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6073b442619811f9069cffd0e42779a5346630c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c4:b8:47:f2:cd:97:50:84:7e:cf:a1:58:eb:
dc:c2:95:6e:e1:6a:2e:20:8e:4e:74:c9:eb:f8:a2:
e8:41:c7:bb:39:e4:a2:75:ab:c0:15:78:49:c3:65:
f8:18:30:08:14:f0:84:54:8e:3d:6a:df:f1:d1:16:
a6:55:97:01:3e:b6:2c:21:e0:b1:fa:26:9f:e4:a2:
39:dc:38:2f:b2:ff:6c:9f:39:a7:cc:0d:01:9b:76:
74:95:50:70:c5:9b:d9:e8:7b:de:65:01:00:74:96:
07:25:3b:14:21:41:88:28:5c:c4:9e:d3:bb:44:45:
45:56:2f:59:61:08:e8:94:a4:64:12:da:35:cb:3c:
9e:61:be:0b:a6:2d:e2:92:6f:9d:ac:bc:9b:70:48:
2a:8c:23:54:ae:88:d0:e9:99:ff:92:65:a5:86:48:
d0:6c:1b:a4:fd:ff:4a:f2:86:b8:eb:ed:3c:26:58:
d5:79:90:ab:46:d3:fd:30:50:69:75:4b:00:4f:b5:
52:4d:4a:ed:1a:da:9e:e3:13:2d:25:c3:26:db:dd:
b2:f7:65:f3:cb:73:77:b6:35:9d:2c:a4:a7:8f:d0:
06:bd:da:6b:60:f4:40:3f:e3:c1:62:35:b6:6a:46:
52:c7:d4:d5:d3:3b:8c:48:35:8a:76:9e:30:92:9b:
2b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:73:B4:42:61:98:11:F9:06:9C:FF:D0:E4:27:79:A5:34:66:30:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ae3ab-1c27-440b-82bb-20c444f2c4f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ae3ab-1c27-440b-82bb-20c444f2c4f6/1/YHO0QmGYEfkGnP_Q5Cd5pTRmMMY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.150.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:c7:34:2b:cc:75:a5:af:ed:bf:6d:c2:c1:54:a6:a4:05:eb:
ac:0b:f3:54:b2:7b:6d:d0:64:06:14:0e:e5:3b:80:5d:65:10:
b7:0a:c4:92:ef:57:ee:58:a2:e6:e4:42:19:cf:6f:bc:54:e9:
b4:56:f9:db:1e:d5:3f:bf:db:a5:de:b5:bb:98:27:77:f7:66:
ea:e8:41:72:2f:9b:38:1a:6c:45:8d:31:93:55:2f:a3:4d:f7:
22:d6:92:a3:af:47:4d:c5:70:96:07:7a:d4:e4:44:37:8c:6a:
f8:0f:12:c3:77:ce:dd:d8:98:37:69:b8:e7:e4:1a:2e:a9:95:
89:90:3a:c9:47:e7:6e:08:6f:24:4a:18:1a:ac:13:9d:4f:91:
3e:20:da:db:46:4c:31:a8:d2:f1:29:07:08:a3:35:d5:d7:8c:
ae:14:03:a2:a9:77:e2:8d:aa:7d:e9:73:c7:00:57:2c:0d:2c:
30:2b:b9:59:b3:fd:4a:d6:cd:82:08:04:82:dd:b3:8e:c4:f0:
b7:4e:5b:a9:c2:1a:48:cf:02:08:a9:e9:69:62:67:0d:b6:08:
5f:43:84:fa:fb:85:7a:2d:75:52:d8:0e:f8:02:06:1f:88:2f:
1d:4b:67:ab:03:18:e9:ad:54:35:ad:0b:3f:22:cd:4e:93:7c:
2e:bf:9d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:07 2024 by rpki-client on console-fra.rpki-client.org