Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eAiu1s_M89qvRPxNypDqUTITkIw.cer
File: eAiu1s_M89qvRPxNypDqUTITkIw.cer (raw, json)
Hash identifier: yopkRiQGlscSu+mub93r8UEECY4xt9gJvE/gEOvkGU8=
Subject key identifier: 78:08:AE:D6:CF:CC:F3:DA:AF:44:FC:4D:CA:90:EA:51:32:13:90:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A7233D1706
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/eAiu1s_M89qvRPxNypDqUTITkIw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:56:28 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.105.165.0/24
IP: 193.105.177.0/24
IP: 193.105.184.0/24
IP: 193.105.207.0/24
IP: 2a0f:8ac0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 717850744582 (0xa7233d1706)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:56:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7808aed6cfccf3daaf44fc4dca90ea513213908c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a9:4d:0a:5d:fd:11:27:f0:18:6b:fa:04:5e:
49:71:0e:b6:c1:ea:ba:ce:a4:7b:81:4f:41:b5:9f:
60:00:7d:b1:c1:f2:5b:e5:bd:ef:78:2d:f6:95:64:
3d:3c:a6:7c:55:2b:45:99:4a:df:2e:06:93:b3:85:
b5:81:06:6a:66:df:c2:d9:31:4a:dd:44:c7:14:58:
b5:a1:36:cc:55:34:3f:79:5b:21:91:70:98:bc:ad:
ef:6a:f8:bf:be:a4:fd:6c:c2:f6:4f:32:3d:39:03:
92:53:7c:b6:01:59:fe:b9:4c:d4:f3:f8:35:d8:3e:
bc:89:af:5f:c8:26:04:bf:2a:33:2b:f0:3a:fc:a9:
ae:91:db:3b:ac:18:1e:9f:02:eb:dc:1b:ab:af:19:
31:8a:bc:d3:6a:8d:4d:b3:f9:b3:df:e8:83:fc:a0:
01:df:48:38:7e:8a:bc:48:88:cd:20:e4:42:cf:59:
33:16:e6:6b:7d:60:eb:2d:ad:67:1d:7b:a7:42:b4:
cc:d5:2a:8b:61:4c:f4:b5:59:e9:4e:72:a5:f0:42:
20:4b:54:1b:5d:52:3b:b0:9a:11:09:a5:5c:b1:f2:
76:62:c7:91:82:29:82:cb:d0:97:37:5c:ed:36:b7:
3e:bd:3d:2f:ba:98:7d:bf:98:6f:c5:b8:27:3a:59:
0d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:08:AE:D6:CF:CC:F3:DA:AF:44:FC:4D:CA:90:EA:51:32:13:90:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/eAiu1s_M89qvRPxNypDqUTITkIw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.165.0/24
193.105.177.0/24
193.105.184.0/24
193.105.207.0/24
IPv6:
2a0f:8ac0::/29
Signature Algorithm: sha256WithRSAEncryption
7b:6f:35:eb:56:cc:c3:fa:df:a7:14:f3:70:4e:25:0a:bc:cd:
c4:c8:84:03:2d:6a:ac:19:e3:a0:a6:52:dc:b6:60:0e:e3:bc:
de:3d:1b:fb:49:32:0b:20:10:f2:98:89:bd:85:2d:90:c0:3d:
6c:7d:52:4d:f9:a9:f0:b0:97:fd:1c:31:bf:2a:1d:b7:83:a9:
58:f9:21:e7:22:ae:20:60:7c:ed:2f:77:b6:85:91:b4:b8:0a:
4a:f3:8a:13:26:27:1f:44:00:f8:90:dc:41:ea:60:10:34:30:
c4:38:34:fa:cc:e2:9a:e1:08:8f:ef:d9:f3:fc:2e:10:78:92:
08:b2:db:d4:01:4b:fa:74:fe:34:2c:df:3c:8f:a2:11:04:74:
af:93:b5:46:b6:21:2f:27:4b:d1:c3:2d:29:5d:01:58:65:d3:
94:29:7a:e3:aa:e2:57:a0:72:b2:7e:17:44:7e:94:74:9a:fb:
50:46:98:39:66:23:af:3f:27:a4:f1:bc:3b:5f:f6:9f:93:e5:
5d:21:20:de:5d:d9:1d:98:5c:58:90:99:fe:14:29:47:32:36:
90:ef:0c:83:35:70:fb:df:bf:fe:5c:2a:6e:5e:d1:82:df:99:
25:6f:2b:c2:a3:bb:1e:27:19:de:2e:3f:1f:08:41:65:cf:40:
43:f7:c1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:41 2023 by rpki-client on console-ams.rpki-client.org