Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yred09xkY98APtjxHnzWvbFArvU.cer
File: Yred09xkY98APtjxHnzWvbFArvU.cer (raw, json)
Hash identifier: diofmOMClcYQkIIyFuZt+hSUMkk/89Qp83ORae28VTA=
Subject key identifier: 62:B7:9D:D3:DC:64:63:DF:00:3E:D8:F1:1E:7C:D6:BD:B1:40:AE:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9C237F86CB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/b65a14-9cd7-4667-abee-67ef20768490/1/Yred09xkY98APtjxHnzWvbFArvU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/b65a14-9cd7-4667-abee-67ef20768490/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:59:55 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.228.251.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670610458315 (0x9c237f86cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:59:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62b79dd3dc6463df003ed8f11e7cd6bdb140aef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:d7:d9:dc:7b:a6:d3:53:a1:54:3d:87:19:
98:20:b7:76:fe:75:95:a3:7d:b0:c8:c1:69:84:65:
a4:9d:73:37:82:67:8a:3d:ce:35:23:fd:9e:e0:33:
2d:20:da:71:92:27:92:fd:78:85:a8:fa:90:3b:3a:
55:17:a8:ff:a9:05:3f:be:cc:2b:b4:92:f4:6d:95:
bd:e4:ca:b9:9b:46:75:d0:77:81:5d:58:ce:56:11:
56:6a:7a:33:c2:74:37:84:9c:a2:b2:b2:86:f2:bc:
bd:7a:71:11:a9:5e:9c:69:7e:67:e0:6e:58:81:6f:
13:0a:39:e3:f6:f7:ca:e8:0c:13:e2:a9:d7:96:34:
c8:23:10:82:3f:a7:c6:9a:6f:51:2b:5b:27:c8:2d:
fb:9c:84:99:13:f2:d7:e6:e2:eb:1d:78:fc:d5:ee:
de:a1:29:b1:ed:d9:47:13:3a:26:e7:27:d6:07:8a:
b1:14:d5:5c:0e:a2:e2:82:b9:ad:21:f9:ed:8f:92:
af:00:78:a9:aa:cf:b6:b0:29:1d:66:57:77:df:60:
48:1e:aa:2a:82:75:e7:30:15:3c:40:ac:ca:c8:9c:
4c:d8:18:79:1c:b6:79:af:81:d9:45:9d:92:2c:4d:
b6:1d:de:77:b7:e9:5d:7e:20:44:a1:c6:98:d0:5a:
30:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B7:9D:D3:DC:64:63:DF:00:3E:D8:F1:1E:7C:D6:BD:B1:40:AE:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b65a14-9cd7-4667-abee-67ef20768490/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b65a14-9cd7-4667-abee-67ef20768490/1/Yred09xkY98APtjxHnzWvbFArvU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.251.0/24
Signature Algorithm: sha256WithRSAEncryption
36:d7:65:dd:62:60:6d:35:f1:01:f7:bc:37:98:c6:11:56:5d:
c1:56:75:b6:5b:b0:3c:aa:b6:c4:63:9c:1f:36:3a:53:09:c2:
24:23:80:f0:af:a8:ea:70:14:49:6e:bb:d1:21:94:5b:74:c9:
b3:4e:66:11:b4:69:91:ed:7c:9f:0d:1d:81:4f:16:f8:48:01:
9d:97:2e:5c:4d:9d:a8:ab:3a:8e:a4:8c:32:f7:7f:1b:0a:c1:
4b:d9:52:0d:ec:77:e8:55:93:f6:e0:41:f8:db:35:1f:c3:66:
26:50:77:a4:7e:a1:4e:18:08:05:32:78:fb:9c:e9:3f:21:e9:
cc:ab:1d:5d:0e:e2:69:cc:9e:47:34:fd:ec:62:e3:ee:de:61:
70:b3:81:69:2f:99:01:7e:ad:eb:11:d2:2c:63:9c:1f:e6:a5:
7f:16:47:fd:90:7f:d0:ee:06:11:c1:17:f3:ba:f7:00:e9:06:
c2:56:39:0b:8e:89:cf:89:ca:1e:1d:34:44:39:78:e6:fe:37:
88:d7:d5:4a:09:1c:c9:a4:a5:2c:4d:0d:f3:12:4f:da:7c:69:
61:89:48:49:7e:84:87:97:f0:de:18:97:9c:ac:12:2a:c0:36:
01:73:75:e9:3a:a4:8d:61:6a:c9:77:4f:ee:5a:22:47:b6:2b:
f0:dd:a7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:16 2024 by rpki-client on console-fra.rpki-client.org