Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gwYrBMi-b5MZVu2neuwz0iZ2h4U.cer
File: gwYrBMi-b5MZVu2neuwz0iZ2h4U.cer (raw, json)
Hash identifier: g+Ouyiudn8nQVROs9dUFcTjrZq6ALj9m6SnhTeYyGLU=
Subject key identifier: 83:06:2B:04:C8:BE:6F:93:19:56:ED:A7:7A:EC:33:D2:26:76:87:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0184BDE32002F066A7E33B60CFA1708D92F9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/de8603-ed85-4992-91ed-6b8835e62145/1/gwYrBMi-b5MZVu2neuwz0iZ2h4U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/de8603-ed85-4992-91ed-6b8835e62145/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 28 Nov 2022 10:58:09 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 2001:678:fec::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bd:e3:20:02:f0:66:a7:e3:3b:60:cf:a1:70:8d:92:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 28 10:58:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83062b04c8be6f931956eda77aec33d226768785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a7:22:8b:59:df:68:4a:91:2f:79:66:d3:b8:
ff:c6:cf:b1:f3:37:bb:a6:20:9e:83:8f:ad:42:9b:
b1:89:92:67:2f:05:c9:c7:f2:23:35:f2:94:ef:d2:
34:5e:18:71:7d:ae:78:ac:14:4b:74:a7:b5:b7:89:
18:23:d6:ad:58:60:06:71:de:71:87:0a:70:36:3f:
1f:6e:e6:0f:c2:6e:b9:a0:9a:62:94:3b:ed:90:05:
38:45:7a:2e:78:50:b2:3a:68:34:f8:a2:3e:a6:5b:
7d:06:f5:aa:a0:b6:bb:64:40:16:6f:88:9f:f5:6b:
fa:97:5b:c8:32:8e:93:9e:d5:2b:d0:ea:cf:c5:91:
03:92:aa:91:24:b4:42:ef:94:3d:59:4c:8e:19:48:
19:59:68:b6:43:10:a6:88:14:95:97:81:3e:a5:69:
12:6e:02:17:aa:ab:f8:55:41:e9:49:83:ca:28:b0:
ef:04:e2:82:96:ca:77:66:f8:3c:1d:7b:f2:9e:01:
ef:47:69:19:8c:8a:be:10:53:ae:bf:1d:eb:ef:a0:
fb:32:1b:ad:cc:bb:6c:1e:ea:d2:f7:21:92:66:90:
36:7c:ca:3f:8f:21:47:79:ba:ed:a0:3f:50:be:5f:
27:2b:fb:3e:19:c9:35:61:03:c6:6e:e2:b7:8a:52:
eb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:06:2B:04:C8:BE:6F:93:19:56:ED:A7:7A:EC:33:D2:26:76:87:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/de8603-ed85-4992-91ed-6b8835e62145/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/de8603-ed85-4992-91ed-6b8835e62145/1/gwYrBMi-b5MZVu2neuwz0iZ2h4U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:fec::/48
Signature Algorithm: sha256WithRSAEncryption
20:43:10:e4:9b:34:38:a3:e1:0f:8c:cd:7b:ce:c8:18:09:ba:
ff:a9:04:1b:6e:00:c9:e5:34:ee:be:d3:79:04:63:94:af:48:
31:9f:b1:b3:65:d4:94:e0:01:3d:28:ee:b0:67:85:b6:cc:fe:
0a:8a:4f:73:85:c3:af:39:52:88:c9:c1:25:3a:44:5e:d7:be:
3b:66:6c:dc:2a:4f:76:85:80:28:21:76:0b:95:3b:f3:d4:73:
9f:78:82:35:2e:ac:a8:f2:3d:28:3b:55:4d:56:5a:1f:11:2a:
2d:c8:e5:ed:7c:fd:a7:61:41:22:ba:73:3c:2f:3b:ac:0a:a2:
b3:2f:6f:56:5c:17:26:c9:7e:e9:bc:c4:8f:b9:69:cd:12:69:
aa:c6:bc:1a:79:70:1a:54:93:26:bb:7c:af:df:89:59:35:59:
00:74:92:bd:0a:be:eb:63:b5:1e:27:95:eb:de:e6:37:af:fa:
54:99:01:37:78:7c:c9:77:ea:e8:94:a3:46:b1:a5:08:8e:c6:
3b:c1:c6:19:dd:0e:67:9a:47:97:f3:cf:73:68:8a:1b:0b:b6:
20:5d:e5:be:4c:9d:f8:ae:c3:52:87:67:a2:67:43:e2:21:de:
85:1c:14:36:11:c7:94:a7:35:94:72:64:54:0c:ec:d2:6e:0b:
0a:72:27:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:30 2024 by rpki-client on console-fra.rpki-client.org