Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cfEQ4OWYOEO0rv5Y3U-AOoiK3qY.cer
File: cfEQ4OWYOEO0rv5Y3U-AOoiK3qY.cer (raw, json)
Hash identifier: LApCRBwP9zk9e9hkwxIrZcN19RdbbKdMspEc+Mfjvog=
Subject key identifier: 71:F1:10:E0:E5:98:38:43:B4:AE:FE:58:DD:4F:80:3A:88:8A:DE:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A61C9DC425
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a5f61-e093-4aef-a637-0f070786d2e6/1/cfEQ4OWYOEO0rv5Y3U-AOoiK3qY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a5f61-e093-4aef-a637-0f070786d2e6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:57:53 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.148.148.0/22
IP: 2a0f:f400::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 713444672549 (0xa61c9dc425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:57:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71f110e0e5983843b4aefe58dd4f803a888adea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b0:e3:53:5a:03:09:10:3e:f0:36:62:aa:3d:
08:86:7a:3f:b8:e6:9f:4a:bd:19:5d:9c:6a:3f:e4:
57:2c:3c:4a:17:91:b4:3e:8f:f5:f0:01:52:79:e1:
ab:3c:41:fa:ca:b6:c5:12:7b:8c:24:ec:08:f8:b4:
f2:10:61:69:96:6b:38:00:18:e8:92:b7:43:10:c2:
9c:42:49:d3:70:73:8a:8c:a0:84:0f:83:21:83:24:
27:d8:71:2b:8e:83:ea:43:93:79:80:ed:5c:5c:4e:
a7:cf:9d:29:60:c9:62:7f:f9:cf:b5:6b:c9:2c:2c:
ae:7d:f2:13:3a:cd:41:29:39:86:d4:78:cd:26:f7:
e4:ec:82:8d:84:d1:c7:5d:d2:00:3a:a3:dd:68:71:
86:51:e0:0e:af:cf:bb:ec:67:4a:8e:1f:c5:c6:f6:
68:49:0d:a3:75:aa:bb:77:07:4c:72:93:d2:c9:44:
6e:b1:e2:7d:66:32:4f:3b:f3:89:f3:bb:5d:f3:df:
ea:56:1a:aa:a2:1f:9d:fd:d5:5f:9c:9b:89:99:6d:
26:ba:d7:88:b4:73:b9:b9:f9:0c:bd:3c:51:dd:74:
1e:81:c4:27:ed:c9:01:1b:3b:e9:ab:68:90:34:ad:
94:a3:14:3a:66:9e:0f:f0:b7:04:5c:49:fd:bc:eb:
88:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F1:10:E0:E5:98:38:43:B4:AE:FE:58:DD:4F:80:3A:88:8A:DE:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a5f61-e093-4aef-a637-0f070786d2e6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a5f61-e093-4aef-a637-0f070786d2e6/1/cfEQ4OWYOEO0rv5Y3U-AOoiK3qY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.148.0/22
IPv6:
2a0f:f400::/29
Signature Algorithm: sha256WithRSAEncryption
0b:45:f6:1e:23:2d:d5:ce:bb:ea:60:01:01:ce:ac:4a:4a:c5:
94:7d:5b:6e:da:a2:a1:51:18:bf:3c:e5:ce:d3:07:40:a2:c6:
08:ab:c3:3d:d6:7f:33:8b:16:52:d1:ce:b7:b6:56:b3:30:b3:
29:bd:ec:86:94:40:c8:18:2d:07:51:c9:18:d5:63:ad:bb:ea:
d0:fb:c4:a2:b8:cc:3d:30:64:dd:e4:05:2e:b2:4b:41:39:73:
fb:09:98:10:a9:b0:16:2e:a9:0b:cd:2e:15:3f:83:3b:23:7f:
e3:91:48:1f:00:1e:3f:8a:50:9e:c8:20:08:16:b5:a6:63:47:
7f:00:23:29:29:42:ca:52:af:f5:ba:a8:0f:c3:d1:64:25:07:
da:30:78:1b:de:cf:71:87:a9:57:23:c6:e2:e9:b8:b0:79:7b:
0f:f5:e3:5f:c2:f0:b8:10:7d:a0:66:d4:7b:4d:c2:8c:1a:0a:
44:63:66:51:66:f6:b0:58:d5:59:a7:1e:63:77:58:33:4d:6f:
15:07:8b:5b:5f:98:18:8f:7a:61:8b:20:2b:69:ba:a6:1a:3f:
5b:ed:26:bc:c2:f6:c9:38:f2:c3:b9:52:ff:40:3b:40:5c:c3:
f8:ed:76:9c:e3:9c:45:94:1d:80:f1:15:ac:cd:f7:3b:1f:32:
0e:04:6a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:13 2024 by rpki-client on console-ams.rpki-client.org