Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZHgXQ_CyoSSAC4vvyQtJ8PDgRh4.cer
File: ZHgXQ_CyoSSAC4vvyQtJ8PDgRh4.cer (raw, json)
Hash identifier: 4BtJbXYkOcn7VbwEjfegTGfSvEaGhGMD7SkayfxV9zg=
Subject key identifier: 64:78:17:43:F0:B2:A1:24:80:0B:8B:EF:C9:0B:49:F0:F0:E0:46:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A1F8AF446C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/bf333c-5602-47c3-94ad-83f48e1dbfe6/1/ZHgXQ_CyoSSAC4vvyQtJ8PDgRh4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/bf333c-5602-47c3-94ad-83f48e1dbfe6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:02:59 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.146.64.0/24
IP: 2a10:e680::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 695661970540 (0xa1f8af446c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:02:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64781743f0b2a124800b8befc90b49f0f0e0461e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:de:d2:5c:71:7e:3a:bf:33:3f:13:6c:11:72:
f4:63:28:e4:b9:30:a5:62:05:8d:27:ac:5d:59:c6:
fe:6c:0f:39:7b:0b:96:eb:b4:f6:57:2e:30:3e:75:
58:d5:e3:f5:8b:2a:9a:74:92:12:48:dc:a4:6b:9d:
8e:32:cf:88:44:7a:58:4f:fc:c5:5e:ad:68:7b:f6:
f0:9b:79:5a:12:2e:07:0c:ed:71:e3:d4:2c:96:9c:
c1:8d:aa:12:9e:ff:eb:fa:64:80:8f:9e:b7:61:ab:
91:71:49:4a:6c:64:d5:2d:3f:91:97:7e:53:a3:97:
5a:66:39:4d:38:1f:b9:70:5e:5b:3b:3a:e1:71:5c:
5b:de:c7:1f:f6:8c:61:85:5b:e3:5a:81:6c:af:8e:
4a:ca:81:33:06:a5:d9:6b:a4:92:57:bf:a5:26:27:
23:a7:e5:61:69:4a:d8:35:d8:33:07:74:fc:66:11:
ab:31:36:70:6d:ba:44:11:95:7b:2a:0f:4a:ae:6f:
01:2c:e9:aa:f8:8d:6f:7e:a1:af:98:9d:c0:b2:5b:
e4:21:1e:ce:cb:9c:b3:f4:ee:17:ed:e6:0d:fd:df:
11:55:46:f5:0b:63:3c:87:e3:43:2d:b3:0b:f9:f6:
30:37:7e:b2:7e:57:fd:96:4e:b1:b1:3a:89:8f:e5:
b1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:78:17:43:F0:B2:A1:24:80:0B:8B:EF:C9:0B:49:F0:F0:E0:46:1E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bf333c-5602-47c3-94ad-83f48e1dbfe6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bf333c-5602-47c3-94ad-83f48e1dbfe6/1/ZHgXQ_CyoSSAC4vvyQtJ8PDgRh4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.64.0/24
IPv6:
2a10:e680::/29
Signature Algorithm: sha256WithRSAEncryption
25:51:21:f3:1b:18:10:21:dd:fb:9b:c2:ee:22:a2:72:80:8f:
d9:4c:7e:8d:f2:38:dd:7e:79:74:99:31:6d:02:2b:d0:9f:d6:
16:25:db:c3:7f:bc:de:8a:04:b9:2b:81:e7:32:7c:94:0f:5f:
00:07:53:f9:fc:a2:af:52:42:24:9e:78:7e:56:37:48:50:58:
8e:2c:8c:bd:da:48:d6:e1:03:89:e6:5f:49:a5:f1:80:46:22:
28:f9:d8:61:72:c0:be:b1:9e:b0:e4:f1:ba:14:d5:f8:ac:3f:
7a:8c:0d:19:25:20:9f:99:08:91:dd:ab:22:f0:39:86:82:8d:
fa:ea:6a:90:c8:23:ea:9f:e4:e1:b0:47:1f:a9:75:6c:4c:86:
86:6b:b8:86:d6:8a:33:a5:f0:f6:39:b3:69:47:94:5d:16:39:
ea:ea:c1:5f:94:cb:9a:16:ef:a4:13:9c:26:20:c6:57:b9:a4:
57:60:f5:e6:00:70:a5:ba:78:8b:07:be:a5:b6:37:6e:2a:c4:
52:cc:42:cf:98:89:2d:15:99:4b:37:43:55:8f:13:bd:2a:7a:
18:58:e8:c6:2f:8d:ac:30:b7:6a:17:6e:d2:a6:14:41:5b:b3:
a1:ac:49:47:b9:bc:df:46:db:b5:7b:78:19:ce:5e:65:c7:76:
17:33:df:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:11 2024 by rpki-client on console-ams.rpki-client.org