Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1mEoOHT1Cf24D8nn2YGft6A62s.cer
File: d1mEoOHT1Cf24D8nn2YGft6A62s.cer (raw, json)
Hash identifier: d1bW5YFrXltT7fEBI+QaZuwXTjIeFH0p2Ggx60iTx3I=
Subject key identifier: 77:59:84:A0:E1:D3:D4:27:F6:E0:3F:27:9F:66:06:7E:DE:80:EB:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9A33BF4B92
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/c57b65-c9cf-47e7-8931-8d51a71e8637/1/d1mEoOHT1Cf24D8nn2YGft6A62s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/c57b65-c9cf-47e7-8931-8d51a71e8637/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:52:51 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 194.1.181.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662293138322 (0x9a33bf4b92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:52:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=775984a0e1d3d427f6e03f279f66067ede80eb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f6:d0:b9:b9:84:52:9f:5a:f3:6b:61:5d:a8:
04:17:a7:c7:d1:7a:1c:7a:59:81:6d:bf:35:ac:de:
a4:a2:46:ac:13:34:4e:73:ba:d7:a9:2a:01:a8:f1:
e6:03:4b:7b:14:ec:73:29:fb:3d:f2:a2:5a:02:6c:
58:6a:c7:ea:c8:29:e9:fe:61:af:71:fc:f7:68:2a:
65:ab:f1:7f:ca:07:56:4d:45:7e:6f:b4:b3:38:c7:
af:5a:83:d5:cf:65:70:39:3e:0c:ff:d0:4b:d5:c2:
78:ef:3a:3b:cd:e3:44:6a:3e:3d:a8:7d:83:8d:a8:
7f:06:c4:bd:cb:b6:13:c5:8e:e5:aa:e0:64:a3:72:
f6:cb:e9:41:94:8d:d2:c9:12:cd:b7:f8:48:97:fd:
86:ef:1f:43:dc:62:69:3f:bf:56:19:13:e3:2f:78:
49:3c:aa:4a:bc:40:54:8d:51:a3:62:25:eb:1f:65:
97:68:60:8e:3c:8c:be:16:e2:10:6a:21:5b:4d:ce:
6a:3e:a0:e5:c5:f4:9e:8a:63:3b:1b:d1:27:e2:36:
d4:71:89:ab:a6:df:0b:35:d2:15:94:75:c8:c2:3e:
a0:ab:b5:ca:d4:59:88:c1:4e:89:e1:2e:27:4f:a2:
45:22:e5:d0:90:29:58:ed:ea:19:c8:be:87:84:37:
d0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:59:84:A0:E1:D3:D4:27:F6:E0:3F:27:9F:66:06:7E:DE:80:EB:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c57b65-c9cf-47e7-8931-8d51a71e8637/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c57b65-c9cf-47e7-8931-8d51a71e8637/1/d1mEoOHT1Cf24D8nn2YGft6A62s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.181.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:65:5a:96:4a:42:68:68:01:3a:7f:4c:6f:36:3d:7b:31:8d:
bc:36:e4:27:55:e9:58:f0:1d:ea:4e:11:e9:af:c7:a0:b2:49:
c8:4f:c1:24:47:68:ec:09:52:07:28:ce:22:c0:8f:e7:7f:62:
57:bf:0f:53:f6:a3:d3:89:a6:37:48:82:4e:c9:8e:8b:60:01:
c9:e0:ba:c0:ef:04:f6:ad:19:c5:64:24:26:d6:b1:15:0b:db:
9d:dc:91:c3:c0:15:10:01:74:f0:0d:10:af:b1:7e:ec:29:7c:
90:39:20:3b:76:1e:17:cf:2b:7b:f2:4d:c5:54:27:f9:d2:34:
3a:64:c5:cb:e3:b6:96:d2:85:6c:97:a7:98:1e:db:fb:a7:b8:
55:b9:6a:74:88:d9:1c:a4:9f:de:cf:4a:de:3f:90:28:21:93:
dc:1e:4a:ba:7d:d0:1f:7f:96:33:ef:4f:ef:ed:c3:a7:a4:98:
18:bb:ac:09:ef:94:2f:72:f8:91:e5:ee:f0:d1:53:c8:96:ea:
84:b2:11:4a:79:73:78:67:11:f1:a4:d0:51:33:f2:c0:f5:19:
a4:4d:ca:96:d0:2e:0e:a0:c9:ec:20:8d:1e:f9:56:e3:57:58:
7a:b3:7b:99:c0:75:eb:cb:ff:ad:d7:2d:d4:c2:e2:a9:4e:a0:
f0:b6:54:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:58 2024 by rpki-client on console-fra.rpki-client.org