Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fZbe9St3dzv3IZB5slC5BmFxkfE.cer
File: fZbe9St3dzv3IZB5slC5BmFxkfE.cer (raw, json)
Hash identifier: MaPPSloANAhHbaAF4GObeS0o6XgHJMTQNOmP2Rw12d4=
Subject key identifier: 7D:96:DE:F5:2B:77:77:3B:F7:21:90:79:B2:50:B9:06:61:71:91:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A542158B49
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/e38fb5-cdb8-495e-9f00-c9e1631ecfc7/1/fZbe9St3dzv3IZB5slC5BmFxkfE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/e38fb5-cdb8-495e-9f00-c9e1631ecfc7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:59:45 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.163.4.0/22
IP: 2a0a:5800::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 709778312009 (0xa542158b49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:59:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d96def52b77773bf7219079b250b906617191f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:86:e1:52:84:54:e2:4e:5b:7e:57:da:2b:cc:
42:52:17:ee:b4:89:af:2b:e6:7f:1c:c1:5c:6a:c1:
e4:b5:96:a1:ec:ed:73:c4:58:11:99:af:00:b2:02:
75:f6:e4:57:56:d8:8d:31:57:58:a3:c6:4c:bc:7c:
72:4e:01:f0:24:41:3a:53:d9:13:85:8c:20:68:f6:
91:84:b0:a5:57:33:fc:db:92:46:20:19:35:29:ab:
69:5e:e7:63:2e:28:09:70:e6:f4:f4:fa:a1:2e:36:
1b:79:b5:d8:ae:49:e3:8f:73:16:0c:bc:9f:dc:0c:
67:4b:4c:9d:fb:7b:e0:5f:6f:01:a3:59:52:46:f8:
2e:5e:fb:08:cb:0d:8d:69:4a:98:ca:37:d6:f2:cb:
bf:25:11:34:b1:52:a9:ff:26:9d:bd:90:a6:c1:29:
4b:18:c1:9a:3c:ef:fb:1f:e0:e0:3e:44:74:75:c2:
77:cc:a5:70:b7:63:75:99:6f:53:21:49:cb:43:64:
9a:b0:3d:f3:52:62:f6:10:26:25:3e:a7:f2:b0:69:
f7:00:a3:f9:0d:3b:d5:da:c0:eb:11:98:f9:43:5c:
3c:0a:94:aa:83:23:17:f4:13:d5:80:5d:df:c6:f5:
91:b2:de:84:43:28:85:e8:b7:a2:1e:60:a5:5e:4e:
a2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:96:DE:F5:2B:77:77:3B:F7:21:90:79:B2:50:B9:06:61:71:91:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e38fb5-cdb8-495e-9f00-c9e1631ecfc7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e38fb5-cdb8-495e-9f00-c9e1631ecfc7/1/fZbe9St3dzv3IZB5slC5BmFxkfE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.4.0/22
IPv6:
2a0a:5800::/29
Signature Algorithm: sha256WithRSAEncryption
59:fb:d0:3a:ac:da:c1:b2:36:91:2a:ec:e4:35:08:49:15:a9:
af:ca:bb:64:23:dc:51:3b:03:a9:2e:af:1e:55:db:d8:4e:de:
7b:23:c8:59:08:89:d5:a8:a8:00:52:9a:f7:c8:b8:10:f2:55:
2c:fa:e8:83:2b:fc:10:d7:41:a4:06:41:ea:ac:b4:d2:09:4f:
b2:c8:0c:0e:ca:38:8e:bd:91:39:52:97:9e:00:12:c2:de:fc:
f3:b4:b0:6e:81:3c:17:e8:e7:20:ca:61:a2:4c:1a:4f:fc:4b:
1e:d8:ee:b6:11:5c:b3:bc:92:0b:bc:d9:8e:4c:95:e2:b1:6c:
34:d3:50:ed:95:87:d4:e4:c3:5f:1e:2a:ff:a9:8f:0b:a7:31:
0f:b0:23:36:6c:4b:c7:4a:5a:e3:47:b0:9c:60:20:c7:ec:3b:
d0:dd:b9:c0:43:2a:9e:87:11:7b:9c:97:bd:ac:98:cf:4b:1d:
0d:82:b7:b9:e1:5a:6b:ea:46:60:bf:6f:49:11:46:2b:69:ea:
6f:b4:e4:0a:23:3e:1c:a7:d0:9f:0c:26:65:52:62:22:3b:e4:
5a:17:ab:1d:e5:81:09:47:51:6c:9b:d1:62:0d:b0:85:b2:71:
46:c0:48:e1:b7:e8:39:7e:c4:55:5f:8d:b4:f8:5b:3f:57:f5:
dd:6c:5d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:46 2024 by rpki-client on console-ams.rpki-client.org