Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dkyHgULC8W9BKSpijiS-TZVRdAk.cer
File: dkyHgULC8W9BKSpijiS-TZVRdAk.cer (raw, json)
Hash identifier: +NP4HWjRjAPIi3PUaBByCWTV4+IgwzeM58jhXPziwN8=
Subject key identifier: 76:4C:87:81:42:C2:F1:6F:41:29:2A:62:8E:24:BE:4D:95:51:74:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A20D994930
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/df6e61-0812-4e85-b25e-f52d3caed011/1/dkyHgULC8W9BKSpijiS-TZVRdAk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/df6e61-0812-4e85-b25e-f52d3caed011/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:04:01 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 194.120.109.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696012851504 (0xa20d994930)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:04:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=764c878142c2f16f41292a628e24be4d95517409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e4:4b:95:ea:1c:18:29:f0:8e:15:7e:f2:be:
d8:5a:ba:78:13:2f:28:0a:85:1f:73:26:df:69:36:
fe:d0:4c:30:b5:42:fb:e7:ca:81:5d:c7:01:7e:83:
81:d1:8c:4b:22:08:d6:a0:90:c8:04:fe:43:4f:27:
d0:01:39:b2:96:e2:21:1e:17:3c:13:23:60:97:05:
3c:7f:0f:3b:b0:cb:57:43:3c:b3:62:17:f3:81:f8:
2b:d9:d1:13:ff:46:e4:de:f8:7f:3d:32:21:03:4f:
29:46:5d:09:53:3f:bf:0e:2f:5c:68:a8:59:a3:54:
30:76:83:71:8f:19:5a:f3:44:17:86:8b:3c:21:71:
01:8b:14:bd:af:2f:e8:96:01:65:3c:2b:93:96:2a:
d0:5a:ea:d8:d4:04:89:c4:9e:ec:8d:f7:4a:0e:11:
05:a2:de:7b:b0:6f:e2:df:62:55:75:44:b0:59:5f:
7a:2f:71:e4:7f:1a:f6:70:a9:25:47:8d:2e:3d:dc:
2e:26:73:65:de:c8:0f:68:47:6f:e2:6a:e0:3e:4a:
80:f0:b9:f0:16:56:9e:03:fd:7e:b7:28:db:df:81:
49:cd:b5:73:5b:5d:23:23:0b:45:7e:4c:3f:b2:5b:
98:c8:be:b9:63:5c:97:58:a2:bf:80:65:c6:39:a2:
bc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4C:87:81:42:C2:F1:6F:41:29:2A:62:8E:24:BE:4D:95:51:74:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/df6e61-0812-4e85-b25e-f52d3caed011/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/df6e61-0812-4e85-b25e-f52d3caed011/1/dkyHgULC8W9BKSpijiS-TZVRdAk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.120.109.0/24
Signature Algorithm: sha256WithRSAEncryption
39:85:ec:24:5b:be:ae:0a:d2:08:d5:60:6f:1b:26:54:6b:4f:
0d:be:ac:45:f9:82:94:11:c1:fe:d3:77:30:e0:45:43:1c:96:
6d:0a:33:61:28:1f:b0:17:8a:df:00:5f:4e:52:0b:a7:e0:eb:
eb:6d:37:c6:cb:6e:c9:39:f5:7f:3c:ef:59:78:fb:31:3d:f9:
6f:be:04:6e:ce:22:b6:3c:14:b2:41:f4:50:9e:1a:2b:e5:5d:
23:a0:c3:ec:ec:b8:fd:d1:5f:5f:a9:26:25:65:95:7d:2e:5d:
43:57:05:9d:63:e5:e6:e3:1c:a5:de:ce:3b:66:46:0b:ac:0c:
37:7c:33:e2:5e:5c:87:08:51:55:50:8c:6e:d7:3d:6e:6b:dc:
63:46:b5:3a:26:03:c1:50:40:96:34:89:87:6f:67:ba:b0:4c:
f0:76:7f:ac:b7:7a:66:26:7a:6f:94:f4:90:45:e2:c1:07:c7:
ea:2e:b2:65:d7:e8:88:28:ad:ba:ce:7f:59:42:16:a2:77:f8:
93:21:43:ea:32:21:31:42:9a:21:ce:b5:88:e0:ba:06:af:a2:
9f:b1:47:4e:67:3b:19:91:d3:7d:98:94:73:7c:04:d4:08:8a:
ef:ec:b0:8c:e1:cd:8a:54:6b:fa:0e:f4:95:c7:67:35:21:6a:
ac:41:db:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:31 2024 by rpki-client on console-ams.rpki-client.org