Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gHOB5FsUUn3re1vspd9mXXTL1Oo.cer
File: gHOB5FsUUn3re1vspd9mXXTL1Oo.cer (raw, json)
Hash identifier: euPum5oRzw+xCzh9BLW8gqRukueEL41tzGNtZc3WWoM=
Subject key identifier: 80:73:81:E4:5B:14:52:7D:EB:7B:5B:EC:A5:DF:66:5D:74:CB:D4:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AB392B9C7B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/ed5a68-3595-40d7-a380-d783a6eca0ca/1/gHOB5FsUUn3re1vspd9mXXTL1Oo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/ed5a68-3595-40d7-a380-d783a6eca0ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 16:06:30 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 2001:67c:19e4::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 735398567035 (0xab392b9c7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:06:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=807381e45b14527deb7b5beca5df665d74cbd4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:04:d0:a5:fe:67:f7:5d:45:72:2d:a7:bc:
c2:27:04:59:fe:42:b7:20:2f:47:fb:4e:3b:41:cc:
ae:c3:18:cd:88:99:bd:8b:84:a2:a3:64:c1:99:48:
68:2c:bc:7b:64:78:af:07:90:ae:75:15:8b:85:1d:
73:2e:1f:bb:82:24:2e:86:d3:ee:5e:2d:34:8b:d0:
13:e1:57:1c:e6:21:1e:ec:4f:96:d0:d1:95:32:8a:
5a:e9:65:fb:88:85:57:47:c1:f0:17:2e:9a:2b:42:
98:0c:1d:12:2c:0c:5f:6d:f7:63:42:e8:f3:7d:ca:
08:b2:c4:9b:60:17:68:32:08:91:5c:c8:b8:6b:97:
72:92:f9:a3:d0:da:4b:b6:28:9a:2b:a2:96:33:04:
b9:a2:30:64:96:1c:9c:6a:8f:5c:2d:8c:6d:12:ad:
1f:7f:db:af:a6:9d:25:7f:7a:66:c6:6f:ab:69:10:
62:24:eb:a7:de:52:f0:55:4b:73:30:ba:40:71:41:
f2:98:bf:e9:8b:27:cf:21:b5:e9:dc:61:31:3f:bf:
16:d3:45:66:95:48:29:c2:09:ba:21:91:56:ff:e9:
f6:4d:2d:b5:d5:72:0a:04:ed:41:48:b3:0b:39:6b:
6b:9f:f2:90:dd:c3:d1:3b:f3:e0:6f:b0:48:27:ab:
a7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:73:81:E4:5B:14:52:7D:EB:7B:5B:EC:A5:DF:66:5D:74:CB:D4:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ed5a68-3595-40d7-a380-d783a6eca0ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ed5a68-3595-40d7-a380-d783a6eca0ca/1/gHOB5FsUUn3re1vspd9mXXTL1Oo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:19e4::/48
Signature Algorithm: sha256WithRSAEncryption
9a:5a:0e:4f:78:a6:dd:3e:a3:86:70:ed:d3:a1:81:18:4e:ad:
8a:99:3b:3f:29:47:00:ff:5d:83:51:dd:ce:d4:1e:ca:ce:b4:
d3:38:e1:d3:2c:bd:9e:02:01:68:a9:00:28:cd:98:83:14:8b:
71:01:85:fe:56:44:e0:41:81:03:5a:35:f6:10:e8:3e:99:68:
13:c4:76:6e:3f:12:1b:a6:89:7e:43:8b:57:da:73:9a:4f:79:
47:4e:75:16:fa:f4:bf:66:05:e8:9e:45:37:29:02:89:5c:78:
17:8d:00:ff:0f:e5:0f:7e:47:a0:69:64:26:ba:f0:43:e0:ef:
8a:32:c7:9b:de:83:85:0e:82:e7:a8:21:d6:8c:bd:ac:f1:e3:
5b:17:06:a5:92:b8:47:52:8e:5a:99:09:3b:8a:63:a3:0a:8a:
b6:62:e6:24:cd:cb:0d:eb:0f:bf:be:dc:eb:d9:45:dc:b1:7d:
58:2b:de:7b:cd:b9:3e:88:fa:a1:cd:11:9b:42:41:b3:5b:c9:
38:89:aa:a2:6b:06:b6:62:f1:9b:60:2f:31:a9:69:81:11:8d:
a2:e3:1c:e4:8d:ec:cd:96:35:7c:88:11:a0:44:5f:44:64:51:
21:9e:fd:6c:23:01:d5:9a:c4:8d:f5:15:e4:7b:15:e8:14:62:
e3:47:65:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:24 2024 by rpki-client on console-fra.rpki-client.org