Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_tyHxMIuSmxDEkbUrNZMUcMvrlw.cer
File: _tyHxMIuSmxDEkbUrNZMUcMvrlw.cer (raw, json)
Hash identifier: y5bAxqyoy0i/va6wN4GvL4ufamrPU2Vx8I6qki2Gzas=
Subject key identifier: FE:DC:87:C4:C2:2E:4A:6C:43:12:46:D4:AC:D6:4C:51:C3:2F:AE:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A9C0C1A93C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/98dc9a-d766-44f9-94e1-944535275e5f/1/_tyHxMIuSmxDEkbUrNZMUcMvrlw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/98dc9a-d766-44f9-94e1-944535275e5f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:01:10 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.233.36.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 729083390268 (0xa9c0c1a93c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:01:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fedc87c4c22e4a6c431246d4acd64c51c32fae5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0c:22:fc:e5:01:5a:d9:62:36:af:4e:eb:14:
18:78:bc:25:62:9d:b8:e4:c2:29:75:c8:2e:03:42:
04:d9:b8:32:c8:73:21:16:ef:2a:89:d4:b0:49:9d:
93:99:46:0b:21:0c:e5:2d:0d:2c:82:1e:de:99:c7:
2b:47:07:0f:49:f1:2c:1c:f1:13:7e:f1:cf:54:c4:
d9:ec:1e:66:d5:b3:b0:36:c9:75:64:1b:c4:10:6b:
b8:e9:02:84:f9:22:5d:b8:1b:24:7f:12:1f:f2:b8:
d9:e5:eb:a9:25:d4:77:aa:8d:38:c0:3c:f1:27:07:
7e:8f:f4:15:c5:ab:01:82:3d:dc:8b:19:4c:02:89:
d5:bf:2e:6c:fe:c5:95:fd:01:e3:5d:e0:c4:9b:4a:
7c:a3:b3:c7:36:7d:c9:a0:11:3b:fa:ff:f8:15:a7:
19:9f:89:c1:cd:25:8b:98:57:ef:f2:e1:aa:4d:07:
c7:13:83:33:33:0a:4a:6a:c1:9b:c4:c1:e1:5e:68:
9b:10:ff:18:44:0b:0e:ff:3e:84:16:99:04:88:b1:
71:da:1f:37:f7:21:fa:85:c0:d3:20:87:f6:4b:2a:
e8:d0:50:b2:1e:d5:0d:ca:92:19:06:ce:68:3f:f4:
e4:b3:75:c9:51:57:95:8a:ef:3e:74:ff:5c:a6:4c:
55:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DC:87:C4:C2:2E:4A:6C:43:12:46:D4:AC:D6:4C:51:C3:2F:AE:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98dc9a-d766-44f9-94e1-944535275e5f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98dc9a-d766-44f9-94e1-944535275e5f/1/_tyHxMIuSmxDEkbUrNZMUcMvrlw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.36.0/23
Signature Algorithm: sha256WithRSAEncryption
28:fa:86:e7:90:a4:a7:70:d5:f2:62:1c:d4:ca:dc:e9:c2:3c:
2c:eb:1c:24:6c:2b:d8:fd:e5:02:9f:2c:51:bf:9b:de:9a:3a:
a7:0f:c2:c9:ea:c1:0c:1a:42:56:ab:f2:1a:16:f3:d2:09:27:
ab:50:51:f3:0a:3d:9f:c7:a8:8c:6e:e4:be:4a:9d:ee:bd:a0:
0d:c2:dc:f0:a9:cf:ca:89:b9:49:e2:ca:c3:6e:82:80:91:e7:
70:41:3d:0c:d2:dd:2f:ee:ed:2f:f7:bb:77:33:96:62:b7:ba:
6f:4a:49:53:1f:75:62:92:1c:e1:45:75:5d:05:17:9f:da:45:
50:ab:ee:57:d2:fc:0a:34:f8:f6:56:e7:1e:a9:ef:14:4f:47:
02:c1:7c:02:a3:e6:66:b8:f2:8b:a4:e3:32:17:d1:f8:fe:e3:
36:3c:c9:8a:ad:a1:f2:da:bf:92:84:d5:f9:50:38:f2:72:e8:
2f:ae:ab:67:20:15:81:da:0a:2c:dc:0f:74:aa:ce:90:70:6c:
c3:65:db:ba:57:31:71:fd:01:4b:3a:0a:a5:f4:07:90:d0:59:
60:1f:a1:0e:ca:a9:67:65:57:74:db:15:26:ed:f3:e8:01:c0:
7a:fe:40:4d:df:0e:d5:60:d8:9d:03:86:cd:2b:36:12:d1:be:
61:18:91:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:44 2024 by rpki-client on console-fra.rpki-client.org