Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hWSXJ2MEZPsIcJrJNkM5ePShDqo.cer
File: hWSXJ2MEZPsIcJrJNkM5ePShDqo.cer (raw, json)
Hash identifier: ZPRZDrQk1HkDu/qcYPRUjnOlw3KnlI8YMjpjJVHUiFE=
Subject key identifier: 85:64:97:27:63:04:64:FB:08:70:9A:C9:36:43:39:78:F4:A1:0E:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A91AC271CE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/4a95c1-1a50-4aff-bdab-0f6c9dd4f8fc/1/hWSXJ2MEZPsIcJrJNkM5ePShDqo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/4a95c1-1a50-4aff-bdab-0f6c9dd4f8fc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:07:56 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.144.0.0/22
IP: 2a0e:e9c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 726298423758 (0xa91ac271ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:07:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85649727630464fb08709ac936433978f4a10eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:fa:77:1d:19:fe:eb:a1:da:32:dd:57:ad:
e2:bb:8f:1b:4f:23:4e:b9:c1:e5:a6:64:31:5e:10:
65:f1:80:95:e3:79:77:e4:02:35:41:74:cc:ea:59:
50:14:d4:99:e2:4e:10:e1:43:0f:ba:07:1d:d1:5b:
41:38:45:93:d9:0b:79:b0:1d:05:50:bd:7b:01:41:
1b:e2:7e:2d:4f:f5:eb:9e:f9:dd:f7:20:d7:16:2c:
12:83:31:ba:df:fb:7d:6e:50:f7:f8:c6:e1:50:3a:
5c:e8:9c:38:a0:01:2a:2e:c5:09:28:65:7e:dc:9d:
c3:f1:a1:9e:b7:21:ca:24:41:d6:c5:d7:ce:d3:3e:
81:4b:3b:05:80:fd:75:e9:2d:f4:96:76:31:95:34:
41:75:2e:db:64:36:41:35:cf:8f:44:45:7a:05:26:
33:73:a8:b2:b9:7b:75:d9:a2:88:3a:87:2c:f5:61:
05:3f:27:30:0d:a7:e1:71:31:b9:bf:2e:52:c4:63:
d3:e3:fa:20:0c:93:ae:e6:02:42:ae:42:c7:d0:e5:
76:b4:36:08:43:ee:0c:95:e2:5e:a8:61:8b:95:03:
29:59:ea:18:91:05:2f:b5:11:d3:f1:e0:a2:8d:23:
6f:0c:09:95:a5:97:b3:a2:0c:bc:fe:3f:93:91:f5:
55:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:64:97:27:63:04:64:FB:08:70:9A:C9:36:43:39:78:F4:A1:0E:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/4a95c1-1a50-4aff-bdab-0f6c9dd4f8fc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/4a95c1-1a50-4aff-bdab-0f6c9dd4f8fc/1/hWSXJ2MEZPsIcJrJNkM5ePShDqo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.0.0/22
IPv6:
2a0e:e9c0::/29
Signature Algorithm: sha256WithRSAEncryption
6a:fb:c4:70:1f:05:c1:36:87:39:4a:50:e5:31:bb:21:bf:1d:
20:ec:20:c2:e4:9d:92:b9:38:8f:84:b1:6f:85:72:95:4b:70:
29:7f:98:c7:cb:2c:71:33:be:ee:e1:6c:7f:fd:1c:ca:16:82:
89:ec:a8:e3:b7:4b:69:cd:60:7f:02:0e:76:19:e6:9a:4e:48:
9f:6e:a5:51:93:27:34:fc:94:66:53:11:96:06:c1:87:af:94:
38:92:1b:8f:24:4a:63:e8:05:65:c1:52:3f:3c:ca:3f:e3:41:
8d:76:cc:99:ac:af:aa:aa:1a:6f:8d:8a:3c:45:a1:83:4a:7b:
3c:c6:a5:dd:37:58:83:08:b3:9e:11:3d:7d:91:6a:c7:14:7c:
2e:c2:96:7a:e2:b6:ea:85:e5:34:91:c0:a4:98:d0:42:95:d4:
cd:d9:03:c1:c2:40:af:82:62:84:05:f6:75:86:15:cc:93:2b:
dd:6e:e9:71:f4:42:f5:22:c7:4b:47:c6:23:ec:9a:1d:c7:7b:
e3:06:74:36:1b:1b:db:09:a4:c2:97:7b:44:ad:08:6b:d5:93:
8e:db:d7:06:d2:73:9c:11:e6:eb:ee:13:27:6d:61:d3:d3:48:
2f:25:93:c4:89:e0:67:b3:b6:38:96:6c:ae:c6:1b:72:52:b2:
12:02:90:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:17 2024 by rpki-client on console-ams.rpki-client.org