Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fF0UX7s8iLQ9SfSQtrs5-GEFUX4.cer
File: fF0UX7s8iLQ9SfSQtrs5-GEFUX4.cer (raw, json)
Hash identifier: 3brstZfGPh7rRC7WgcO1HpMvvucp+iK+UkLAeiiSE1Q=
Subject key identifier: 7C:5D:14:5F:BB:3C:88:B4:3D:49:F4:90:B6:BB:39:F8:61:05:51:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AED35125D2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/e3504c-4639-4c1d-aeb2-4902ff47faee/1/fF0UX7s8iLQ9SfSQtrs5-GEFUX4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/e3504c-4639-4c1d-aeb2-4902ff47faee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 18 Mar 2022 15:32:32 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 195.28.22.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 750869620178 (0xaed35125d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 18 15:32:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c5d145fbb3c88b43d49f490b6bb39f86105517e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f9:2c:a2:2d:c9:25:49:7b:2f:f4:39:d6:d3:
0c:91:29:cd:18:ab:51:66:31:fb:08:0f:4a:88:c9:
47:6a:e8:ee:25:86:d2:b6:19:ca:f5:de:69:b5:32:
48:03:1c:87:0f:a1:10:0b:34:9d:fb:e9:39:b0:2a:
38:46:ca:56:f5:ca:fa:98:72:19:85:f7:00:9c:bb:
bb:44:f4:77:3b:4f:dd:3f:01:bf:2c:75:fc:94:64:
93:dc:71:88:bb:eb:87:b2:f8:f4:97:32:40:8a:24:
ff:48:8f:ce:ee:0a:1b:76:0b:c0:f8:c9:1a:f0:c1:
90:e1:f2:42:c0:bb:9c:b2:70:10:38:4c:0f:ce:64:
34:e1:a2:1e:16:ff:02:74:66:c9:6b:29:99:c1:9a:
c0:8d:4d:94:5d:a5:57:7e:7a:14:0d:fb:d9:de:57:
37:4e:07:bf:60:19:63:ad:a5:33:63:55:16:a4:d9:
b9:f4:59:47:6d:dd:4b:8c:72:e2:91:d3:96:ac:b3:
04:2c:8e:35:d9:6c:78:3d:0e:9d:47:d4:fe:fa:c4:
e8:6b:3b:59:a9:53:de:66:ab:49:ef:f3:23:32:4f:
a9:80:62:18:0e:1e:c0:b9:0d:65:52:cc:75:59:85:
30:32:cd:26:82:ae:6d:7a:b4:a1:25:e3:cf:c2:4d:
9c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5D:14:5F:BB:3C:88:B4:3D:49:F4:90:B6:BB:39:F8:61:05:51:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3504c-4639-4c1d-aeb2-4902ff47faee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3504c-4639-4c1d-aeb2-4902ff47faee/1/fF0UX7s8iLQ9SfSQtrs5-GEFUX4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.28.22.0/23
Signature Algorithm: sha256WithRSAEncryption
27:31:59:fe:52:d9:f8:4e:d0:a7:74:b3:d1:7f:f7:fa:87:28:
2a:b7:8e:be:e2:5e:4f:35:5b:de:d6:a3:a9:6e:34:bf:a2:75:
85:06:62:55:51:23:6c:b8:57:d3:e7:a4:44:e2:7f:1d:b4:0f:
f9:04:c4:fa:b9:31:33:1c:af:56:d1:58:e0:df:f0:ee:b7:53:
d6:c9:7c:4e:3e:4f:70:d7:45:5b:30:94:41:a9:4d:18:ba:a9:
8e:d0:a8:9d:1f:0d:8c:0c:8f:88:6f:a2:a3:41:fa:f6:dd:48:
4a:8d:53:b2:0f:9a:fb:b1:ed:75:a8:9f:b1:4e:e5:3f:af:31:
fe:2c:03:4b:ea:df:78:fd:d2:2c:0e:a4:84:a4:d6:d5:2f:6a:
ab:97:15:1e:17:3f:ed:4f:ae:1c:bf:58:24:e7:89:0d:b1:39:
40:3e:a4:2c:03:2e:75:aa:5c:40:e1:9d:70:dc:d9:ba:25:02:
7e:00:ad:bc:3f:1a:b0:3a:d2:57:2a:f3:39:18:05:93:2c:35:
8c:f5:b4:1c:58:c9:f4:29:c5:78:ee:d0:76:f2:a8:c9:28:86:
ac:c3:bc:e7:5e:7f:39:9c:09:b3:d5:d4:f1:44:36:a1:e4:e5:
76:e1:84:e0:8c:c5:5d:37:d6:b1:08:65:30:9f:de:78:66:00:
3f:44:ab:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:25 2024 by rpki-client on console-fra.rpki-client.org