Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ha4B2bi2Goj_e3qQws41XUlBMTY.cer
File: ha4B2bi2Goj_e3qQws41XUlBMTY.cer (raw, json)
Hash identifier: RTCzX8VLUONrUuLNnzF7TvXw6Q6Ho4ruo5uK2NZ2Lfc=
Subject key identifier: 85:AE:01:D9:B8:B6:1A:88:FF:7B:7A:90:C2:CE:35:5D:49:41:31:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A64CA2439D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/1ca806-c4ab-4677-8c7e-af59c0515c7a/1/ha4B2bi2Goj_e3qQws41XUlBMTY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/1ca806-c4ab-4677-8c7e-af59c0515c7a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:00:32 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 85.8.160.0/22
IP: 2a09:7500::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 714250273693 (0xa64ca2439d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:00:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85ae01d9b8b61a88ff7b7a90c2ce355d49413136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:33:f0:c0:f2:08:c4:be:a1:aa:d2:82:af:
46:32:61:2a:50:e0:95:5a:b3:1e:85:52:de:07:42:
db:85:fc:db:31:f6:36:c1:1b:91:4a:6f:6c:fa:a9:
a4:dc:c0:5e:6b:c8:2c:67:11:3e:6a:0b:2a:60:04:
88:0b:da:a4:a6:d4:23:b2:6d:d2:de:80:f9:9c:80:
c6:5d:4c:60:94:de:c2:89:9d:72:c7:9e:36:83:1f:
97:e0:bb:4c:09:96:3a:5d:1c:62:1c:db:c5:86:9f:
dc:ef:de:00:04:c6:bf:2f:24:7e:50:4e:67:b9:52:
42:c8:cc:aa:3a:67:0f:af:15:18:04:15:72:3d:62:
5f:38:bb:97:44:e7:3f:49:6f:55:fa:4f:d4:33:70:
6d:46:25:ef:ae:67:6f:24:61:e8:d0:f4:9e:3a:a6:
dc:4c:7c:3b:c8:a3:38:7d:f1:15:fd:6a:7e:80:55:
69:82:9a:4f:92:4d:7a:e5:f1:d7:66:da:f9:6f:7c:
ca:42:74:b2:f5:dc:87:7f:e6:d1:ff:1f:c6:6a:a3:
2b:43:40:24:8c:96:25:c9:20:00:c5:12:8b:ff:28:
a1:82:59:f7:e5:43:6a:ca:58:2f:60:74:e0:e2:2d:
4b:cc:b1:56:16:a5:47:74:e2:93:77:e8:f7:98:e7:
d2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AE:01:D9:B8:B6:1A:88:FF:7B:7A:90:C2:CE:35:5D:49:41:31:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ca806-c4ab-4677-8c7e-af59c0515c7a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ca806-c4ab-4677-8c7e-af59c0515c7a/1/ha4B2bi2Goj_e3qQws41XUlBMTY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.160.0/22
IPv6:
2a09:7500::/29
Signature Algorithm: sha256WithRSAEncryption
4a:00:ba:48:0c:fe:20:a6:21:97:7c:17:3c:9c:ae:c9:13:64:
2c:ac:c9:bd:18:32:8a:cd:80:32:c7:b9:c0:01:ec:f9:3e:88:
3e:43:62:1a:38:3f:9f:15:eb:61:e5:92:76:f9:92:a4:6c:c1:
60:15:2b:15:51:fa:21:a1:b2:71:66:a3:38:fd:6a:a6:72:18:
91:f2:0f:52:74:52:17:f2:bb:b0:db:df:6d:74:fb:cf:ff:7f:
58:2a:c0:a5:8c:c3:11:2b:a1:7b:24:09:5e:51:2e:d0:b5:41:
b8:e8:70:ed:ad:bf:34:d8:13:57:a3:0c:08:9e:ab:ce:6a:00:
b2:9c:40:d1:8b:00:b5:04:54:3b:a9:78:d6:91:d4:ca:e5:1e:
f0:b9:99:25:d7:7e:63:6b:ee:31:1a:0a:2c:b2:f5:8e:16:8f:
42:ff:d6:fb:84:e1:60:89:89:d8:88:21:b6:62:9f:a0:10:19:
4c:b4:b1:41:a9:7d:33:bd:21:3a:15:20:c4:b9:34:5b:ff:54:
bd:f2:83:c8:2a:2e:cb:55:26:b2:ab:05:54:e8:c1:bc:3d:bd:
fd:45:76:1b:83:ca:06:16:25:59:7a:3c:1d:47:ce:2e:fb:5f:
42:96:b9:d3:6d:61:5c:67:02:73:00:06:c5:7d:ed:5d:6d:79:
ea:45:d2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:17 2024 by rpki-client on console-ams.rpki-client.org