Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aAaZOOIldHGJ93s-s6ABAgfBy1g.cer
File: aAaZOOIldHGJ93s-s6ABAgfBy1g.cer (raw, json)
Hash identifier: 5WweXOdayZiwb/Ytyc80PetclFRc67RS5X2206JM+/k=
Subject key identifier: 68:06:99:38:E2:25:74:71:89:F7:7B:3E:B3:A0:01:02:07:C1:CB:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A4C1801513
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/28976a-4b2f-4c9e-9f08-63552f012265/1/aAaZOOIldHGJ93s-s6ABAgfBy1g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/28976a-4b2f-4c9e-9f08-63552f012265/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:55:24 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.221.38.0/23
IP: 91.230.38.0/23
IP: 2a0f:da80::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 707621033235 (0xa4c1801513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:55:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68069938e225747189f77b3eb3a0010207c1cb58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7e:96:f6:c8:25:9e:77:93:96:8d:ef:e4:34:
da:52:85:22:ad:82:9f:3b:88:93:41:8f:ae:54:94:
dc:f1:28:6d:ff:e0:7b:f4:ce:f6:a3:9f:6f:27:37:
3e:7d:e8:f3:d4:d4:ce:1d:87:1a:a8:84:93:48:fa:
6a:45:5b:b8:29:2e:34:6a:d3:9c:2f:87:83:32:8b:
8f:05:98:e6:bf:cd:c8:32:80:9e:09:06:45:cf:42:
12:30:f4:2b:73:ed:af:7e:e1:1f:28:ab:51:b1:13:
ee:1f:22:de:f8:7c:9c:db:00:1d:ea:7a:c3:6f:87:
7b:a3:f6:d3:8a:8e:af:e8:66:bb:a9:f1:60:3a:c9:
5e:1f:62:bc:6b:b8:d2:24:ea:98:fc:04:3c:63:5e:
c7:66:fe:86:eb:51:f1:ac:e8:3f:fd:1a:1e:56:12:
c1:6e:43:c3:35:5c:27:19:9d:a4:9d:68:40:15:18:
63:24:5b:2a:4f:ba:92:c7:92:be:d2:f8:c0:dc:29:
dc:7e:7a:58:8d:5d:ff:4a:68:3a:c0:f6:6a:be:91:
9b:14:b8:70:46:2b:e7:52:d1:7b:67:81:88:41:34:
97:d1:c4:1b:99:e3:d1:eb:a9:49:cf:09:ed:44:73:
11:10:fc:ba:28:c0:b5:7d:7c:a6:c5:d7:f3:b7:df:
44:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:06:99:38:E2:25:74:71:89:F7:7B:3E:B3:A0:01:02:07:C1:CB:58
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/28976a-4b2f-4c9e-9f08-63552f012265/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/28976a-4b2f-4c9e-9f08-63552f012265/1/aAaZOOIldHGJ93s-s6ABAgfBy1g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.38.0/23
91.230.38.0/23
IPv6:
2a0f:da80::/29
Signature Algorithm: sha256WithRSAEncryption
22:58:2f:e8:72:a4:7b:f3:6f:41:23:86:76:db:95:bf:3c:6b:
fa:e9:ff:a5:ec:f5:3c:b3:ab:93:5c:c4:bc:ca:9a:30:ef:40:
0d:24:5e:85:64:68:6b:a0:f0:51:38:3c:8b:e4:94:11:af:a8:
6c:83:fb:1d:21:2c:0e:32:09:10:89:10:a0:44:3f:8c:ab:6f:
88:d1:a5:79:c2:fa:87:8c:7b:0e:f0:80:a9:b2:04:bd:b5:3b:
ab:d8:82:05:25:59:52:27:b6:9d:90:7e:84:24:13:1a:99:3a:
53:c9:fc:17:5e:4d:36:04:62:9f:5e:cb:a2:bd:a4:01:b6:8b:
b0:26:a5:c6:2b:5d:e0:1f:80:c6:a7:f3:ca:d0:aa:6a:39:c3:
7a:4f:0d:20:be:8f:c5:21:7d:27:33:07:7d:f6:37:4d:24:2e:
a6:20:c0:1a:09:33:45:67:12:09:90:fb:6c:7e:50:e4:db:43:
93:cf:5e:93:02:a0:a9:71:c4:ac:85:65:2f:90:a4:18:9c:e6:
ed:b4:d8:8f:cc:d4:33:7d:52:bf:5c:5b:d0:2f:a3:0b:35:0f:
70:f6:e5:d5:b6:e0:10:22:01:48:c7:5e:3d:d9:a3:5e:54:8b:
45:cf:96:74:c1:c2:a0:f5:16:aa:2c:46:bb:42:22:3e:cb:b1:
c8:da:1e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:28 2024 by rpki-client on console-ams.rpki-client.org