Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fkwORTB9-MjsTI1P8KMkoyWEnIw.cer
File: fkwORTB9-MjsTI1P8KMkoyWEnIw.cer (raw, json)
Hash identifier: QOxe9bwohga7VTHFAKmbpc2eRGS8nqRMUakMQkN00fg=
Subject key identifier: 7E:4C:0E:45:30:7D:F8:C8:EC:4C:8D:4F:F0:A3:24:A3:25:84:9C:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A14686A063
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/a45867-3f5e-454e-aa1c-9e1161b44622/1/fkwORTB9-MjsTI1P8KMkoyWEnIw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/a45867-3f5e-454e-aa1c-9e1161b44622/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:54:24 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 213.232.238.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 692672962659 (0xa14686a063)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:54:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e4c0e45307df8c8ec4c8d4ff0a324a325849c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:c7:bc:13:41:63:13:41:6f:c0:91:cf:48:
b5:56:6c:c9:eb:12:8d:93:d3:f5:50:12:ee:cf:ec:
4a:37:df:f1:7b:ba:a6:37:ea:c4:60:01:41:de:6a:
a5:db:c4:b3:a9:37:58:45:a8:91:09:01:1c:29:68:
04:c3:eb:a9:43:9b:f2:98:ff:49:e7:c9:c9:66:19:
fe:d2:41:08:33:e1:8a:34:f5:b2:37:fa:30:d0:29:
8a:96:e6:66:9a:ab:81:80:93:f9:33:74:a4:d6:86:
29:56:0e:08:fd:91:99:ab:fd:78:5c:41:af:fa:d2:
d7:49:f3:a1:b1:f1:5e:8e:83:72:d3:42:be:0c:55:
a2:ee:a2:72:6f:f0:62:49:19:f4:db:5d:fb:a4:3d:
3e:40:32:46:b3:c1:6a:9a:ef:12:84:5f:61:c2:2d:
5d:1d:f9:b2:42:e2:32:ea:4b:47:50:77:97:45:e6:
f2:aa:eb:af:40:37:fd:1c:45:e1:3e:cc:59:49:41:
0d:78:5d:40:6c:57:b6:03:2f:46:ed:a9:12:83:9f:
e5:de:e8:37:fc:c8:b6:41:42:92:f1:af:e7:eb:c4:
01:79:1c:cf:fc:57:6a:e3:82:d0:2d:9b:b2:4b:b5:
86:fc:ba:41:b9:93:3b:c4:8c:4d:7a:39:14:d4:ff:
e1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4C:0E:45:30:7D:F8:C8:EC:4C:8D:4F:F0:A3:24:A3:25:84:9C:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a45867-3f5e-454e-aa1c-9e1161b44622/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a45867-3f5e-454e-aa1c-9e1161b44622/1/fkwORTB9-MjsTI1P8KMkoyWEnIw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.238.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:a0:3d:0c:17:d0:79:8e:ed:9d:ca:5a:a4:d4:4c:f6:7c:78:
9f:76:15:d7:c9:ff:96:cf:da:54:fc:ab:6c:c9:66:61:b4:3e:
d3:31:af:cf:cb:52:90:91:2b:1a:af:2a:80:90:f4:c3:be:d5:
ba:cb:01:f2:c1:73:7b:6d:74:20:d6:e1:bd:ec:42:a9:fe:52:
6d:45:d1:52:69:c6:e7:45:c9:2f:7b:90:b1:b8:08:ea:66:83:
eb:e3:6b:bf:73:63:a8:69:62:f6:a5:87:7b:48:39:03:8f:db:
31:f6:3b:bf:94:0c:68:f7:e6:b8:77:43:11:7d:6d:8a:90:16:
32:7f:a9:bf:b7:a0:b4:06:ed:bc:50:af:fb:e5:7e:02:9f:47:
a3:7a:cb:f2:df:b4:6b:47:fc:4b:82:07:e0:9b:72:57:86:eb:
8a:bd:e1:20:00:dc:a4:91:1c:f2:da:9a:f6:bc:d3:32:94:5e:
b7:ce:5b:8b:f3:9d:04:e7:c3:f6:b6:88:5b:ac:8a:da:72:ca:
4f:da:92:b4:57:17:9d:f5:04:e0:c5:8b:20:4a:3c:2d:c1:8a:
89:c9:80:16:6f:0f:70:f3:69:21:19:17:3b:fe:b4:53:f3:53:
42:f3:6b:30:e3:f1:fa:e9:3b:65:37:2b:f7:a9:0d:b3:e8:ba:
86:8d:bf:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:55 2024 by rpki-client on console-ams.rpki-client.org