Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZKXb7eWkK4HwgMej02dOVQrTtqk.cer
File: ZKXb7eWkK4HwgMej02dOVQrTtqk.cer (raw, json)
Hash identifier: arHO05uqF6rj7Ohwk4go3yepzvFQYw227XbDByMU7MM=
Subject key identifier: 64:A5:DB:ED:E5:A4:2B:81:F0:80:C7:A3:D3:67:4E:55:0A:D3:B6:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A01BAEDA97
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/1f7540-84c7-49e0-bcaa-51e176c7f650/1/ZKXb7eWkK4HwgMej02dOVQrTtqk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/1f7540-84c7-49e0-bcaa-51e176c7f650/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 06:54:38 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.156.24.0/22
IP: 2a06:b300::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 687659211415 (0xa01baeda97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:54:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64a5dbede5a42b81f080c7a3d3674e550ad3b6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:f4:8b:8f:97:53:cd:22:88:98:cb:26:86:
15:74:20:06:62:8a:88:51:1a:f6:4d:75:35:bd:0b:
27:c6:24:d2:8c:01:43:0b:83:ca:5e:a6:9d:b6:a0:
fc:d0:00:69:6e:0e:1d:ca:b0:87:c3:5e:83:2f:62:
b6:ca:83:6a:7b:a7:fa:19:73:b9:17:27:df:32:5f:
0a:7c:5b:12:e9:94:ec:a1:c4:22:c5:ea:0d:12:9d:
0d:c8:78:d0:27:91:b2:ac:17:3a:1f:cc:35:35:e6:
f0:53:7d:b5:45:ed:b5:c7:f2:fe:09:a9:97:88:26:
0c:b3:ff:8b:34:9d:3b:cd:fc:dd:67:5c:9d:b4:ef:
09:6d:1a:64:93:37:0d:e5:75:93:1a:dc:fd:3f:f8:
c1:6c:6d:fb:95:9e:0b:6c:3b:64:3d:b2:e2:98:04:
eb:6f:64:ac:19:8e:cc:7a:c8:5d:3b:07:3f:6b:08:
5a:24:dc:e9:5c:ac:4e:7a:fc:19:bd:29:b1:dd:ae:
95:a7:61:6e:9d:b4:ef:66:40:f7:48:ec:1c:d3:19:
a9:8c:3d:c7:83:3c:6a:4c:c9:c1:0f:2b:d0:91:14:
84:19:31:c0:98:79:07:90:60:3d:8c:60:20:6f:ed:
96:6f:80:05:99:dd:0f:8b:0e:0a:dd:fc:42:a2:a5:
51:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A5:DB:ED:E5:A4:2B:81:F0:80:C7:A3:D3:67:4E:55:0A:D3:B6:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1f7540-84c7-49e0-bcaa-51e176c7f650/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1f7540-84c7-49e0-bcaa-51e176c7f650/1/ZKXb7eWkK4HwgMej02dOVQrTtqk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.24.0/22
IPv6:
2a06:b300::/29
Signature Algorithm: sha256WithRSAEncryption
04:fb:75:65:34:af:ef:1a:e1:e0:bf:56:71:3c:de:65:8f:60:
5d:12:f0:d4:02:6c:d2:c7:fc:b6:25:73:a9:f0:9e:59:19:b3:
fe:1a:12:6f:28:a6:2d:1e:55:5c:ff:37:b9:3f:83:87:29:d2:
7e:cb:ad:cf:cb:fc:d0:e4:fd:90:77:63:ae:05:ff:48:ca:95:
06:10:87:22:66:a6:f7:3e:68:0e:16:4f:a0:e2:30:77:21:93:
a5:70:4a:93:1b:15:5f:ea:c3:da:28:7f:c3:5a:b1:ee:1c:d9:
4d:fb:47:cb:96:99:0a:b7:ce:f0:93:49:90:dc:3e:b4:97:ab:
1d:7e:cc:c9:44:e6:fa:28:85:06:65:c7:7a:5f:7f:78:2a:d9:
32:59:f6:86:b9:a5:95:e8:2a:19:ae:cc:79:5b:e9:d4:92:8d:
27:6d:1d:09:8c:ed:d1:b0:79:14:45:17:71:78:21:09:d5:ac:
0f:73:cd:21:5c:0d:60:d2:ba:68:32:0e:5c:6d:eb:15:7d:99:
37:ae:4c:4a:19:34:7c:1f:8b:bd:4f:ee:e6:0a:4f:99:02:56:
9d:7e:55:31:fc:c3:41:f0:62:3d:81:df:94:e2:bd:d0:20:cc:
a0:62:3a:3a:b7:4b:f9:cf:b4:a7:05:9a:c6:9a:da:7a:83:ad:
90:ac:a4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:12 2024 by rpki-client on console-ams.rpki-client.org