Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cfbPBG3ABgzFPzmpT2JVfvAKiZM.cer
File: cfbPBG3ABgzFPzmpT2JVfvAKiZM.cer (raw, json)
Hash identifier: xmlolshJVySl2b+4KgNT+6BW3p1tYRFiF7pemzJ9seY=
Subject key identifier: 71:F6:CF:04:6D:C0:06:0C:C5:3F:39:A9:4F:62:55:7E:F0:0A:89:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9A511C8F3A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/cfbPBG3ABgzFPzmpT2JVfvAKiZM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:53:47 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 147.78.100.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662785789754 (0x9a511c8f3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:53:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71f6cf046dc0060cc53f39a94f62557ef00a8993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:77:6b:9d:65:4b:1c:59:0b:28:7e:d9:79:fa:
e5:3d:ae:45:cd:b9:8e:a3:56:df:bf:5f:4a:14:d6:
03:3e:7f:72:f1:64:27:d7:cf:cf:43:7e:f7:51:c0:
f0:6a:cd:67:ed:b3:68:38:33:e7:2f:77:d7:42:23:
10:bd:d3:0f:dd:ed:4e:6a:b0:31:cb:16:46:a8:24:
db:11:7e:1f:37:b8:77:aa:52:af:eb:30:49:18:3d:
68:05:5a:11:25:f5:33:f6:4d:b2:c2:7d:02:94:b8:
d1:a4:84:03:22:10:49:40:a1:2d:89:5a:30:d7:72:
57:a4:27:0c:8d:21:c2:3e:1a:2e:8d:a1:66:48:8b:
96:a6:70:39:8b:4c:8e:21:34:85:e7:8b:7c:45:e0:
a3:42:6b:36:a5:cf:84:ff:71:74:9f:d5:22:2c:f5:
ca:8d:f5:28:c2:86:81:9a:b5:c6:1e:ad:1b:49:67:
42:a4:c0:8f:84:7b:2e:13:99:07:96:c9:f8:59:d8:
98:ad:d4:b2:a2:8c:73:30:49:75:ae:6f:d3:8c:56:
ff:e5:ef:2d:8d:b0:8e:24:a8:86:a1:98:76:ec:b7:
0c:52:5e:9d:ed:67:e9:da:aa:77:2f:35:7b:d2:de:
73:ea:16:48:8f:9d:6d:bf:4c:ad:56:3f:3f:cf:02:
6a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F6:CF:04:6D:C0:06:0C:C5:3F:39:A9:4F:62:55:7E:F0:0A:89:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/cfbPBG3ABgzFPzmpT2JVfvAKiZM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.100.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:0b:9e:e6:77:cd:0e:85:aa:c7:c4:f3:1a:2b:3e:94:07:cb:
8f:b8:8b:9e:8e:e8:c4:0d:9b:ee:90:c7:fc:d9:27:5c:34:4e:
51:ba:43:48:fb:8c:37:23:fb:44:83:02:32:6e:b6:4c:f6:25:
91:fa:5b:4b:12:61:e2:47:b2:e1:97:3a:b3:57:af:aa:50:ba:
fd:40:59:c5:20:89:6b:79:67:38:31:53:50:5c:34:10:08:db:
90:83:d0:99:43:3a:5e:71:cd:7b:96:42:79:8e:de:75:68:2d:
da:fd:a8:ed:a7:d6:2f:97:0a:bf:b4:04:a6:98:e5:32:4a:91:
11:e6:b6:cd:70:77:22:42:db:01:4d:9a:51:04:a5:2a:09:37:
98:dd:e8:73:68:28:f7:1a:5c:f2:96:03:8a:e4:61:19:ac:23:
63:b6:2d:1a:82:9e:5f:6e:91:aa:6a:f6:46:79:dc:9c:3d:59:
83:6c:89:29:4f:4a:75:64:b2:43:78:41:fc:00:69:b1:7b:cc:
f5:bf:c9:a5:b0:3c:26:b2:c5:25:db:00:3f:1e:68:8c:73:5f:
32:3f:89:67:99:b8:1c:df:d2:58:cd:f7:8e:9c:df:b4:61:76:
1e:5a:ad:df:0a:b1:d1:75:00:a1:0c:8d:68:36:57:ce:99:71:
87:f9:e8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:13 2024 by rpki-client on console-ams.rpki-client.org