Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZLAkTS7ir9pp1HSQg5_M2alw5Aw.cer
File: ZLAkTS7ir9pp1HSQg5_M2alw5Aw.cer (raw, json)
Hash identifier: Gs5jJ5++pVEwuaP9lRjX1de8ozdJRnIQOayU7V/cOrY=
Subject key identifier: 64:B0:24:4D:2E:E2:AF:DA:69:D4:74:90:83:9F:CC:D9:A9:70:E4:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A4E9FD7BFD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/873372-8c89-42bd-872a-1f1b5196cb17/1/ZLAkTS7ir9pp1HSQg5_M2alw5Aw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/873372-8c89-42bd-872a-1f1b5196cb17/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:56:42 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 213.232.203.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 708300340221 (0xa4e9fd7bfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:56:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64b0244d2ee2afda69d47490839fccd9a970e40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:69:c1:b8:7c:d1:6f:36:bb:33:97:6a:16:84:
42:34:cd:74:d7:51:64:ff:cf:e2:f6:43:85:d6:bc:
d1:0b:e5:4b:b2:6b:82:45:2e:8e:5c:fa:4b:9f:86:
66:33:6b:ed:62:ea:7e:54:06:6d:b2:70:66:68:ee:
a3:69:1e:37:29:df:d4:f7:66:09:a8:2e:40:c6:fc:
73:42:4c:f1:d8:96:9b:42:2d:c1:e8:a8:28:c2:d5:
7b:1e:56:ef:65:56:14:02:63:59:8e:b2:4f:fe:2e:
1b:2b:2c:2f:4e:b1:0c:a9:45:c5:28:a8:6b:fa:cb:
11:d2:11:90:77:e4:af:76:58:68:c2:15:c5:29:69:
84:cb:ff:16:8d:62:7a:46:3b:33:df:b2:ae:48:14:
e0:d9:80:c8:6e:d0:ff:5d:2d:9b:f8:4c:98:f4:25:
37:4f:40:d6:bf:81:7c:2b:ec:36:18:14:ae:76:a4:
7a:42:0a:90:35:d5:3c:f6:e0:3b:3a:b1:ac:4c:22:
8f:c4:18:65:99:e8:2b:b8:31:92:42:f5:a9:33:d0:
f3:95:6b:fc:27:af:f3:75:33:96:cc:6d:09:f9:dd:
f4:17:d3:58:10:32:ff:6f:4f:5c:99:09:72:af:5b:
07:44:82:42:05:97:8a:95:45:9d:a1:71:69:9f:45:
7c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B0:24:4D:2E:E2:AF:DA:69:D4:74:90:83:9F:CC:D9:A9:70:E4:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/873372-8c89-42bd-872a-1f1b5196cb17/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/873372-8c89-42bd-872a-1f1b5196cb17/1/ZLAkTS7ir9pp1HSQg5_M2alw5Aw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.203.0/24
Signature Algorithm: sha256WithRSAEncryption
35:c1:fa:fa:3e:67:66:5f:10:1b:28:4f:85:62:33:fe:aa:2b:
51:f3:39:8f:ca:d6:24:5e:b3:c5:82:ab:f5:8c:12:c2:80:e3:
dc:b1:74:cd:c8:94:34:ca:63:a7:d6:0c:82:f1:9c:e7:70:02:
9b:db:89:eb:eb:5b:a0:62:a9:f0:b3:b6:fa:1c:f7:d7:b6:0d:
42:ba:1b:68:46:fe:82:3d:70:bb:83:d5:32:95:32:16:1f:9d:
be:c3:26:db:2f:78:d6:0a:0e:de:b0:bb:7d:26:87:bc:35:55:
94:d5:47:09:58:6d:86:7c:81:84:55:15:2d:d7:f4:e7:a3:f3:
71:82:be:2f:24:f6:55:47:68:9c:a8:a4:03:91:52:5d:9c:c5:
9c:76:98:9e:e1:f1:b3:33:e2:0d:28:f3:1e:09:93:01:bf:03:
96:6b:7d:d4:89:82:be:2e:38:41:10:0c:c4:ad:65:37:b9:63:
32:ee:9e:0d:72:4f:99:2c:67:97:39:1d:c7:94:1c:37:dc:99:
59:de:af:54:41:ce:36:54:ea:75:c6:3e:ad:41:09:48:56:38:
61:8f:c2:62:81:d9:25:8d:25:60:e9:3c:1e:5a:f7:13:00:40:
ba:59:56:cf:cc:29:dc:b4:9d:cb:fa:21:5e:fa:42:c6:6c:d0:
cd:72:43:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:23 2024 by rpki-client on console-fra.rpki-client.org