Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i0tbNyzeOI9umyEl9t5wNfgS-5Q.cer
File: i0tbNyzeOI9umyEl9t5wNfgS-5Q.cer (raw, json)
Hash identifier: vNFOg0DJsbrEirgqZSINN2HOBBu811Yh8ezsARcb5fU=
Subject key identifier: 8B:4B:5B:37:2C:DE:38:8F:6E:9B:21:25:F6:DE:70:35:F8:12:FB:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AA407B0F00
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/5e34c2-63e3-44e7-a69e-a3b941a52fb5/1/i0tbNyzeOI9umyEl9t5wNfgS-5Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/5e34c2-63e3-44e7-a69e-a3b941a52fb5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:06:36 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 194.36.170.0/23
IP: 194.36.208.0/23
IP: 2a0c:2380::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 731226246912 (0xaa407b0f00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:06:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b4b5b372cde388f6e9b2125f6de7035f812fb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:17:5a:36:aa:a4:2e:59:02:b2:00:ee:4d:
be:a4:16:f3:36:7c:2d:93:72:8c:e5:22:27:37:f5:
14:8b:a2:12:9c:27:d2:b9:9a:59:98:0a:e0:e0:15:
ad:f8:a7:c4:af:2c:c3:6b:f7:b9:96:c4:2c:78:38:
a9:91:e4:e9:22:e8:0d:fb:79:28:89:ca:d8:a8:90:
8e:42:9a:83:fc:44:f2:64:a4:7e:cb:74:b6:97:97:
93:e6:c1:18:7c:c9:c7:d2:77:2e:f1:ab:c4:22:e8:
32:f3:52:c0:ce:96:f8:42:d5:fa:ec:15:37:0c:6a:
58:b6:9f:b1:42:9c:99:11:7b:d3:23:9d:a2:81:d3:
db:36:f1:21:a3:1d:a9:8a:a9:69:07:77:fe:82:7f:
3b:0b:b1:dc:98:a9:6d:c4:b8:32:16:1a:ea:74:dc:
eb:8b:85:cd:82:4f:87:4a:ed:f4:04:2f:a4:80:c7:
bc:0f:a0:27:65:d3:09:88:3e:2a:39:34:6a:3e:ea:
cf:76:07:a7:4a:ca:34:bb:0e:72:75:21:80:4f:c1:
bb:c7:6e:25:79:4e:c2:8e:3f:02:54:24:f9:f8:47:
d7:60:34:fe:37:c8:b7:53:ab:8a:89:d0:f3:41:af:
f0:57:a7:e6:ad:d5:97:51:1e:b8:60:c1:48:2c:46:
cf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4B:5B:37:2C:DE:38:8F:6E:9B:21:25:F6:DE:70:35:F8:12:FB:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e34c2-63e3-44e7-a69e-a3b941a52fb5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e34c2-63e3-44e7-a69e-a3b941a52fb5/1/i0tbNyzeOI9umyEl9t5wNfgS-5Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.170.0/23
194.36.208.0/23
IPv6:
2a0c:2380::/29
Signature Algorithm: sha256WithRSAEncryption
2d:55:cc:07:51:05:e3:a9:2a:a5:ca:76:88:e9:66:71:c0:98:
18:11:b1:77:8c:ac:22:22:59:12:4f:db:b0:56:e1:38:99:bd:
db:a5:18:a2:e9:b8:6c:9c:3e:3f:4e:18:6a:21:6b:15:c5:d8:
18:20:ca:82:cc:81:06:7e:07:f2:39:c6:f6:42:85:6e:15:d3:
90:27:4f:1b:89:c1:d2:6c:19:93:34:d6:d4:6f:35:c5:05:68:
0e:fd:e7:a3:09:f2:3b:21:80:4c:2c:46:af:98:f7:e5:9b:1b:
3b:00:a0:c0:f6:28:61:ff:16:06:40:59:d7:e6:cc:1c:b8:60:
3e:b5:d5:37:29:e8:ca:8a:17:c0:b9:2e:fa:0f:17:d0:fa:7d:
89:85:a9:af:73:e4:75:60:8d:09:31:50:c5:07:11:be:f9:d6:
5f:40:a1:b7:d4:29:d6:a2:df:f7:78:73:43:59:37:66:58:54:
22:35:65:3d:9e:da:4e:29:9e:53:5b:04:84:12:fc:3e:d1:d1:
68:40:e1:91:c3:a6:63:c9:82:01:25:b3:a3:d8:c8:f9:fc:c6:
d9:5d:77:21:0f:ad:77:7a:76:ee:f2:f5:76:3c:b0:e1:0a:7b:
cf:00:67:44:fa:0c:72:d4:e7:27:84:d2:2b:9c:33:2a:0f:b2:
f6:d2:79:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:38 2024 by rpki-client on console-fra.rpki-client.org