Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bYNHLpivNQ5-HYm3N_8blYbOCnI.cer
File: bYNHLpivNQ5-HYm3N_8blYbOCnI.cer (raw, json)
Hash identifier: xU32oC7iwqklEgClNCIx2xYIVJxdLg7Pn+8CBkt1Q/g=
Subject key identifier: 6D:83:47:2E:98:AF:35:0E:7E:1D:89:B7:37:FF:1B:95:86:CE:0A:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AFCBB3BAAE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/9a7c22-9140-4885-af8c-fa9c17dad443/1/bYNHLpivNQ5-HYm3N_8blYbOCnI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/9a7c22-9140-4885-af8c-fa9c17dad443/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 07 Apr 2022 13:27:46 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 192.109.206.0/24
IP: 193.102.74.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 755036830382 (0xafcbb3baae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 7 13:27:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d83472e98af350e7e1d89b737ff1b9586ce0a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:13:02:ee:03:67:e7:e1:8b:34:85:d6:54:c9:
9d:9f:4c:61:05:a1:97:f8:93:d4:89:d5:bd:82:7b:
01:66:57:0a:5e:90:46:03:ab:85:ee:0f:9f:2f:fb:
df:5f:34:e5:7d:d2:46:1b:d3:59:c8:6d:c9:ee:ff:
af:29:72:a6:d5:75:fd:66:68:ce:e4:f4:01:e6:f2:
5a:96:dd:50:6d:46:8d:d0:65:8e:3b:e8:bb:44:b3:
99:4c:6a:12:fc:d7:00:20:46:69:a2:d9:20:ac:81:
29:5b:d2:5a:30:7b:15:aa:e3:04:88:fa:a8:33:59:
2c:fe:ad:1d:82:44:88:69:d7:c3:ef:13:79:ef:ec:
6d:17:8a:c5:1a:1a:7e:51:82:0f:68:27:f9:5c:8e:
56:c9:52:14:17:3e:a9:a4:f8:69:76:dd:72:2c:84:
b7:93:86:b9:51:d2:06:9f:dc:8b:fb:fd:26:f0:07:
f3:0b:19:6e:ad:67:f0:b0:7d:b4:13:0d:f3:82:68:
0f:27:d7:10:e8:3e:5f:f3:f4:ee:1c:74:8c:66:24:
39:96:66:d3:ef:b5:28:90:a4:93:37:80:af:ce:8d:
95:13:34:fa:ab:ff:99:43:96:a6:01:f2:4b:09:8b:
a9:f2:07:24:72:03:3b:f4:78:ed:f3:06:58:82:eb:
40:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:83:47:2E:98:AF:35:0E:7E:1D:89:B7:37:FF:1B:95:86:CE:0A:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9a7c22-9140-4885-af8c-fa9c17dad443/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9a7c22-9140-4885-af8c-fa9c17dad443/1/bYNHLpivNQ5-HYm3N_8blYbOCnI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.206.0/24
193.102.74.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:d3:be:6f:c3:6e:66:92:da:b0:d8:e0:e0:5d:69:da:9e:b1:
b8:af:73:04:c8:39:96:58:c2:5c:2f:e7:12:3c:13:99:7b:a9:
5a:f0:75:cb:b8:c2:8f:53:dd:29:a1:f0:23:5c:b6:d3:09:bc:
8b:b0:ed:0f:d1:53:15:cd:9c:f6:94:c0:45:b0:67:18:fc:35:
24:24:9d:5a:e6:7b:ed:83:dc:6c:9a:24:ef:49:62:be:ea:1a:
db:7d:ff:73:a1:d0:4b:c2:d4:fe:b3:0c:cf:e4:4b:da:26:0c:
d9:cb:a2:8b:b2:4f:5b:97:89:07:56:a7:0e:e3:6f:a0:c6:4d:
d3:37:5b:5a:4a:64:44:35:61:08:7d:90:bb:9b:89:86:80:b6:
0e:c9:44:27:f8:c0:d2:52:b8:71:59:ec:6d:53:4f:40:bf:2f:
35:b8:1e:90:9e:ed:de:dd:fc:da:5a:73:c5:50:3c:57:44:7d:
09:f6:51:e0:3b:96:75:6c:1b:bb:6c:cc:4b:07:c2:68:16:68:
21:8c:0a:58:dd:a8:8f:4f:04:c4:7a:f3:4c:a7:43:bb:61:88:
44:ab:6e:56:95:93:14:10:50:70:f0:32:c9:8a:43:70:e4:97:
b9:4c:4f:74:3c:cd:6e:39:9a:c7:f9:e9:d5:8d:1a:a1:8d:d2:
56:53:f6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:42 2024 by rpki-client on console-ams.rpki-client.org