Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/arr8uyOrAeWt7M0WmjHvt8XDxSI.cer
File: arr8uyOrAeWt7M0WmjHvt8XDxSI.cer (raw, json)
Hash identifier: PC7xyinfJkk/DVDFUqjqoTXqS3tXNoIYztbW8qbNQ4I=
Subject key identifier: 6A:BA:FC:BB:23:AB:01:E5:AD:EC:CD:16:9A:31:EF:B7:C5:C3:C5:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A6E44BA8AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/arr8uyOrAeWt7M0WmjHvt8XDxSI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:54:01 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.126.232.0/22
IP: 185.151.176.0/22
IP: 2a07:a7c0::/29
IP: 2a0d:a880::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 716794734763 (0xa6e44ba8ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:54:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6abafcbb23ab01e5adeccd169a31efb7c5c3c522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:5f:d6:64:c4:b0:1e:8c:45:2c:bf:d2:2c:
78:23:43:6e:14:20:60:61:11:0f:02:73:e6:86:eb:
60:db:42:95:9d:7e:c9:ca:fc:20:58:4b:ed:9c:60:
c8:d0:04:b4:bc:f8:85:12:5c:56:54:aa:d0:1d:2f:
c8:07:0c:e5:96:28:69:da:2b:19:dc:f1:16:88:41:
56:31:d3:26:bd:a9:ab:ab:7d:7b:a0:20:e6:be:36:
e9:5c:67:5e:7d:86:62:34:de:8f:3b:ea:42:58:d6:
8d:0c:3d:27:88:6a:74:b0:67:3d:57:22:31:6d:00:
b7:c0:34:23:1c:95:f1:42:e2:20:80:e5:a1:c6:ac:
dc:fc:1e:11:4f:e2:c1:44:10:88:e8:24:75:10:85:
a9:ce:81:28:f7:54:48:2c:25:1f:e5:b0:ea:77:6f:
c6:69:53:00:f2:24:75:6a:1b:0a:c9:c7:8f:db:a9:
5d:d0:87:60:28:3f:02:0e:72:bb:3c:f2:83:ca:a8:
3e:4a:0f:c8:ab:a2:c1:35:52:f4:5b:33:5a:e9:0a:
46:1c:ff:5d:5f:3c:7e:82:d7:c2:f0:56:2a:a5:38:
d8:75:2b:5d:00:88:6b:3c:51:76:97:e8:0b:52:31:
9a:ba:6b:3f:85:f8:dd:ea:47:5d:31:f4:13:73:f5:
c0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BA:FC:BB:23:AB:01:E5:AD:EC:CD:16:9A:31:EF:B7:C5:C3:C5:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/arr8uyOrAeWt7M0WmjHvt8XDxSI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.232.0/22
185.151.176.0/22
IPv6:
2a07:a7c0::/29
2a0d:a880::/29
Signature Algorithm: sha256WithRSAEncryption
57:b1:df:89:55:d4:92:c4:8a:6a:01:18:e7:35:ca:28:b6:a6:
ec:1e:0c:81:04:36:65:eb:65:1f:35:e1:ce:6d:1d:6e:ee:44:
ac:0d:98:e6:cc:74:fa:f2:a7:15:1e:75:a3:7d:e6:a7:42:8b:
44:c5:43:09:da:9d:44:54:22:c2:cf:99:7b:e7:ca:91:72:0c:
82:38:10:52:b2:ab:23:f0:17:45:64:f0:2d:8d:ba:fe:1f:a2:
ff:4d:64:59:6d:c3:23:a0:ff:6a:d3:54:01:a2:e3:57:83:40:
ff:5d:42:84:a4:ba:82:77:c4:a4:e3:1e:91:66:ae:91:55:60:
9f:0c:00:b9:61:50:af:07:a7:cb:9f:56:cf:7a:ce:49:c9:7a:
d5:6a:53:37:36:79:bc:9b:4f:0f:8e:cb:cb:48:3d:b4:a1:75:
f2:af:19:74:7c:30:24:08:9f:4a:c0:0e:a7:81:cf:71:17:07:
bc:5d:50:ae:e1:63:9c:f5:b6:24:db:d5:13:77:66:9e:c6:46:
2e:e2:e0:c0:09:ce:08:6c:6f:a3:ef:69:0a:2c:fb:32:2a:a5:
9e:6e:a5:52:fc:2e:1f:ce:c5:01:3f:fc:61:c4:c0:8e:9e:af:
48:b9:fb:5f:b0:a2:f2:38:2b:cd:26:d5:8f:d3:5d:c9:2a:fe:
1b:a9:fd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:59 2024 by rpki-client on console-fra.rpki-client.org