Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ej6kn4rmNs-qzH8XdLwJsyE0spw.cer
File: ej6kn4rmNs-qzH8XdLwJsyE0spw.cer (raw, json)
Hash identifier: LkYaCBQRkCtPmRVhk0ibvO3zV96gGJqN9cIyuZ+keK0=
Subject key identifier: 7A:3E:A4:9F:8A:E6:36:CF:AA:CC:7F:17:74:BC:09:B3:21:34:B2:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9A01DB2CA2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/9cfecb-056b-4656-817c-c86fc6bf0dfc/1/ej6kn4rmNs-qzH8XdLwJsyE0spw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/9cfecb-056b-4656-817c-c86fc6bf0dfc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:51:03 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.206.48.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661456104610 (0x9a01db2ca2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:51:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a3ea49f8ae636cfaacc7f1774bc09b32134b29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:68:84:77:d2:50:18:3b:92:44:33:1f:ce:0a:
61:fb:fa:82:50:05:a4:b1:0e:e0:67:81:d2:98:fa:
cc:92:6b:d5:75:d5:4f:2e:c8:32:f6:46:24:15:f0:
51:c5:91:1e:89:08:ec:f9:52:54:4e:a8:d6:35:84:
68:f5:47:ca:71:6c:37:2e:ac:c5:c2:a5:ef:e9:fd:
56:62:ca:01:5a:37:41:0b:4a:5f:b4:8e:2b:9c:76:
ec:6e:c8:e4:74:0f:12:c5:50:c4:ac:8d:f9:3f:ef:
cd:ae:2e:da:7b:8d:3d:19:3f:ea:36:78:74:c7:a6:
a1:dc:c1:72:3a:08:bc:ad:00:dc:0e:d5:21:3a:07:
e1:d3:28:90:f9:4f:4c:b0:19:b8:89:3e:2b:94:b1:
ce:d6:dd:a0:a5:2f:e2:88:4a:b9:50:bf:8a:39:ec:
8a:51:08:58:f8:20:aa:30:63:9f:ce:1a:6f:4b:8f:
51:8e:d5:16:c9:ab:bb:ec:2a:be:db:86:07:12:69:
ff:e4:46:3d:97:09:67:62:41:0c:40:01:d6:4c:f8:
48:05:0d:cf:1f:dd:28:f0:7f:3d:49:50:be:66:cc:
7f:85:28:67:9f:9d:a4:ee:a2:0f:df:e0:17:62:36:
50:81:64:61:ca:46:cc:af:dd:95:e4:ad:b9:64:82:
84:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3E:A4:9F:8A:E6:36:CF:AA:CC:7F:17:74:BC:09:B3:21:34:B2:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9cfecb-056b-4656-817c-c86fc6bf0dfc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9cfecb-056b-4656-817c-c86fc6bf0dfc/1/ej6kn4rmNs-qzH8XdLwJsyE0spw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.48.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:3d:fe:cb:49:f1:d9:ea:00:be:d1:29:0a:3d:0c:8e:17:68:
11:15:85:62:55:ad:6f:e5:cf:a1:54:55:c2:01:6d:01:86:c5:
fc:4e:a8:f7:c5:3d:2b:9e:88:33:ed:d4:7c:0d:bb:db:cf:a7:
6d:cf:0f:64:c0:28:f1:e4:f2:16:58:a1:41:a7:c3:2d:ac:de:
24:f1:fa:e5:91:1d:3a:1b:4e:6f:82:25:bd:d2:b6:28:68:20:
35:82:a9:d9:92:0c:33:21:29:78:6c:93:97:8b:63:2f:79:91:
a4:81:d6:5b:05:ae:4f:51:5f:82:d5:55:76:f5:3a:96:5f:60:
8a:e3:1a:0d:17:5b:97:5f:36:3d:73:eb:01:11:07:a8:b5:de:
37:6e:10:2c:4d:84:ae:fd:1a:c7:43:a7:1f:b6:b1:c5:11:b2:
5b:ce:91:4f:12:c5:bc:70:84:c3:fc:12:ab:c2:33:aa:a5:5c:
4d:29:cf:7c:da:e9:4d:a5:f0:8e:83:95:60:71:8e:ac:71:aa:
c1:dc:c9:78:28:68:0a:49:35:b1:76:cf:47:38:ba:e8:08:65:
cd:c5:c3:09:24:3d:bd:90:d2:ee:3b:7b:1d:80:87:23:27:56:
1e:5c:b1:47:8d:82:30:1c:81:fd:b8:2f:ad:63:46:4c:dd:3e:
ce:ee:15:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:46 2024 by rpki-client on console-ams.rpki-client.org