Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bYJMAvz-j8GGm6y5OO_bqQzxU38.cer
File: bYJMAvz-j8GGm6y5OO_bqQzxU38.cer (raw, json)
Hash identifier: JaC9qCGy7qQB6kl21ewjqwBYMgHb/ROC/eS1Xelkw0M=
Subject key identifier: 6D:82:4C:02:FC:FE:8F:C1:86:9B:AC:B9:38:EF:DB:A9:0C:F1:53:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 99159ED44E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/4beac8-a694-40d4-882d-4ed94003bffe/1/bYJMAvz-j8GGm6y5OO_bqQzxU38.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/4beac8-a694-40d4-882d-4ed94003bffe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:53:16 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 194.32.222.0/23
IP: 194.33.8.0/23
IP: 2a0a:f580::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657492726862 (0x99159ed44e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:53:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d824c02fcfe8fc1869bacb938efdba90cf1537f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c9:54:97:61:53:a4:a3:33:2f:bf:5f:9a:a8:
59:7f:89:47:15:92:8a:42:70:c5:f0:e3:a0:8c:68:
20:9e:a7:73:ab:46:62:87:31:16:dd:b2:cc:49:b7:
66:ef:6a:5b:02:ff:54:63:2b:81:1f:ca:9e:11:e6:
8a:35:e0:82:9e:c9:55:f7:78:68:1c:c4:7c:aa:53:
98:f7:dc:12:6f:0b:d6:24:55:36:dd:6f:cd:1d:3c:
f6:59:b0:b5:f9:38:66:32:ae:3f:06:2c:e3:29:4d:
81:ca:06:10:b3:f6:67:31:5f:f9:3e:1c:1d:f3:6a:
1b:b4:cd:aa:37:6a:0e:c2:6f:9d:f8:66:75:cf:bc:
ef:af:a6:91:ab:ff:a2:e4:40:dd:a0:20:5c:d8:e3:
32:40:1f:c7:e4:e3:a2:97:5a:37:05:f4:8f:57:7f:
83:49:f9:39:e2:31:24:89:c2:3c:7a:18:60:df:7c:
62:ee:5a:93:64:fa:1d:6f:80:fc:5d:44:19:fe:18:
3b:cc:45:28:a7:10:9a:a2:de:ba:ca:dd:e2:5e:5d:
2a:39:29:06:a4:58:19:6b:5f:a5:bf:57:e7:2b:2e:
ab:f2:1e:37:76:b0:76:e2:1a:ae:5b:b2:86:6e:ed:
ae:d3:c6:33:f3:d6:0d:fe:a6:5a:ce:df:41:99:52:
6c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:82:4C:02:FC:FE:8F:C1:86:9B:AC:B9:38:EF:DB:A9:0C:F1:53:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4beac8-a694-40d4-882d-4ed94003bffe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4beac8-a694-40d4-882d-4ed94003bffe/1/bYJMAvz-j8GGm6y5OO_bqQzxU38.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.222.0/23
194.33.8.0/23
IPv6:
2a0a:f580::/29
Signature Algorithm: sha256WithRSAEncryption
72:6b:84:84:a2:4c:38:c0:bb:ee:b4:10:4f:67:bd:5e:7a:3c:
ae:07:7a:60:ad:6b:b1:ff:0e:a2:d5:1f:b7:ea:4e:c9:4f:11:
40:6e:1b:88:88:12:fa:4e:aa:32:57:0e:38:d0:15:cd:94:bf:
16:d3:26:0a:a1:ec:b4:b2:94:cd:b7:81:0a:93:06:6d:7f:84:
5e:30:ae:dc:01:9f:42:6b:01:bc:e3:ef:dd:b1:ef:c3:89:81:
7a:57:7f:b8:85:a2:82:34:b8:a9:cd:b4:f3:ce:9c:84:f1:fa:
35:ae:2f:3b:18:fd:8f:ed:82:37:83:dc:67:a0:31:0b:88:b0:
bf:d6:dc:76:da:fd:a1:d8:fb:79:97:06:ee:a0:0e:05:90:53:
46:76:4a:bd:a4:b9:44:7f:e4:3a:0c:9b:79:0c:7e:0d:85:18:
41:d7:8f:15:2d:00:fa:c2:86:9b:c2:0a:53:44:ee:f0:90:82:
a5:bc:ad:aa:00:7e:94:0c:0b:e6:e4:a6:cc:4e:a9:d3:72:57:
8d:9a:68:56:9e:39:f2:88:19:5b:d5:91:3f:86:c4:7a:5b:cf:
ab:cc:65:91:a5:5c:d5:c5:52:70:06:56:1e:4f:9e:ea:4a:4c:
b0:e2:06:db:9e:dd:3d:dd:94:82:a6:f6:01:f7:4d:30:54:d1:
8a:38:4b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:42 2024 by rpki-client on console-ams.rpki-client.org