Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/if7oayf7Jnhk6w8SEIMem0TZi08.cer
File: if7oayf7Jnhk6w8SEIMem0TZi08.cer (raw, json)
Hash identifier: 5Od0zXUuxCVYfT1i0sZmsjT3ot4dySpqyPEUoWjAasQ=
Subject key identifier: 89:FE:E8:6B:27:FB:26:78:64:EB:0F:12:10:83:1E:9B:44:D9:8B:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AA23D1AB25
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/f82d76-c339-45cd-9bd2-94b1bbe2f2fc/1/if7oayf7Jnhk6w8SEIMem0TZi08.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/f82d76-c339-45cd-9bd2-94b1bbe2f2fc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:05:11 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.170.147.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 730745383717 (0xaa23d1ab25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:05:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89fee86b27fb267864eb0f1210831e9b44d98b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:11:34:5c:b8:22:e4:2d:0e:cb:bd:8a:3b:
27:08:ca:f8:77:0d:07:b8:8a:27:dd:ce:17:e3:f2:
bd:e2:7c:43:0f:34:69:d5:c0:68:40:c8:c2:6d:9c:
65:dd:cd:65:e8:44:b2:fd:a2:34:ca:82:73:f2:9a:
1d:ac:14:68:e0:11:a4:8b:4b:c5:01:b2:fd:9a:9b:
9e:0a:db:8a:0c:c6:ed:6a:ad:3b:f8:18:52:69:93:
48:36:1a:f0:84:d7:32:83:c7:7d:ac:57:d3:d9:73:
1a:cc:a0:20:82:33:97:b0:56:61:b6:fe:39:ef:06:
6f:0d:b7:fb:b1:87:f0:35:15:0b:c6:f8:c3:d5:6f:
29:31:0f:e1:d4:34:39:6b:01:20:52:f0:c4:1d:9e:
cd:3e:f2:53:4d:31:0a:08:45:60:f0:04:73:42:4b:
4e:ca:b7:3e:b9:39:5f:2b:79:fa:aa:3c:79:98:47:
c9:eb:cf:86:20:24:92:fe:ae:72:e3:5d:86:87:ca:
ce:88:71:44:c3:5a:83:17:2d:e4:31:ab:4b:a8:2c:
ac:61:56:35:26:c5:94:fe:fe:68:16:25:ad:c3:a3:
f7:2e:a8:45:37:2e:80:27:84:49:11:05:40:d3:4b:
7c:8c:e5:30:98:21:fc:4d:eb:69:09:a5:16:4f:ea:
33:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FE:E8:6B:27:FB:26:78:64:EB:0F:12:10:83:1E:9B:44:D9:8B:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f82d76-c339-45cd-9bd2-94b1bbe2f2fc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f82d76-c339-45cd-9bd2-94b1bbe2f2fc/1/if7oayf7Jnhk6w8SEIMem0TZi08.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.147.0/24
Signature Algorithm: sha256WithRSAEncryption
55:df:44:58:90:9d:91:50:0f:aa:73:ce:c6:5a:44:e0:2d:d0:
25:d7:1d:46:84:ac:9b:e9:5c:82:33:21:a8:40:dd:55:22:81:
2c:e7:f4:a5:93:ce:a7:36:c1:f8:81:29:db:a2:7e:34:70:e1:
14:f6:5d:90:a2:cb:4d:dd:8d:79:ab:5c:23:97:94:6e:1a:4e:
7e:0c:f3:e4:cd:31:28:b9:91:25:7b:a7:a0:1d:40:2a:52:e1:
b2:5c:63:69:c8:01:e8:cc:37:35:ce:61:e8:05:32:87:9a:3e:
3d:7b:ba:11:6d:38:72:00:7e:9c:25:4a:27:7b:73:06:f1:31:
8f:89:e9:54:bb:36:5d:90:6e:09:29:24:4a:9e:2f:ea:31:ed:
62:c8:ea:3f:1a:17:1c:9a:b9:ca:24:db:22:cb:88:49:19:74:
2f:7d:76:1a:28:29:e2:b5:30:66:be:39:fa:16:ab:ba:5a:67:
58:12:a7:d7:73:4a:37:e0:39:24:d2:00:92:f5:0c:ea:64:ad:
f3:88:f0:21:99:9e:70:9d:35:1d:77:a7:cd:c1:b3:60:85:fb:
d4:4a:76:b5:86:f7:16:e0:75:3e:23:34:29:93:a5:b4:89:0c:
e1:5e:34:a6:00:b1:40:a5:06:ad:4a:5c:6d:16:f8:70:9d:23:
d8:2e:52:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:42 2024 by rpki-client on console-fra.rpki-client.org