Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ihGzR-LbYICxJoRxbO43vsKrpO0.cer
File: ihGzR-LbYICxJoRxbO43vsKrpO0.cer (raw, json)
Hash identifier: cIhVcZmoZM95+QfrMCPsJL4+wTd6IbvKrzt800CctyQ=
Subject key identifier: 8A:11:B3:47:E2:DB:60:80:B1:26:84:71:6C:EE:37:BE:C2:AB:A4:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9C2B957B7E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/64d090-dbb1-4d07-bd29-ec6837bc869d/1/ihGzR-LbYICxJoRxbO43vsKrpO0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/64d090-dbb1-4d07-bd29-ec6837bc869d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:00:13 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.32.184.0/22
IP: 2a09:2580::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670746114942 (0x9c2b957b7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:00:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a11b347e2db6080b12684716cee37bec2aba4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f5:3e:55:a8:66:16:9b:db:a3:e2:aa:65:69:
5d:a0:f4:39:f7:88:d0:f1:f5:09:eb:25:26:5d:e9:
ca:d6:18:ad:d7:e5:78:f2:eb:99:74:da:1a:9b:51:
17:5f:f1:97:0c:a9:90:68:f7:e6:cf:9d:05:3c:48:
82:d5:61:8b:8e:7e:7f:e5:7c:41:fb:83:bb:a0:44:
87:44:b5:c4:42:e7:08:ad:db:ef:9e:d9:59:22:e5:
78:d1:61:a9:8d:1f:15:e3:83:77:16:9d:1b:7b:bd:
43:b0:c6:ec:ff:b3:76:41:87:3c:72:4c:b9:46:6c:
6a:55:82:43:31:13:ea:b9:75:7b:a3:8a:6f:1c:9d:
f8:49:8b:f7:03:c9:27:6f:8f:5c:e3:76:6b:70:8d:
69:94:c8:de:31:2a:51:5d:c5:b3:24:ef:7c:b4:20:
e3:4a:41:ec:40:7f:21:d7:6c:c5:91:a7:9f:14:a8:
6e:2b:4c:b1:f6:50:59:46:5e:d8:aa:29:53:be:e5:
46:70:21:08:b3:35:58:36:b1:52:b9:fc:4e:aa:9d:
81:ce:97:96:06:3e:ce:d3:d9:a9:5a:46:42:15:4a:
f4:e7:17:84:9f:99:88:40:d9:dc:04:ab:f5:39:b5:
fc:3e:1a:74:d3:25:f2:70:05:b5:71:ba:b1:69:a1:
8c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:11:B3:47:E2:DB:60:80:B1:26:84:71:6C:EE:37:BE:C2:AB:A4:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64d090-dbb1-4d07-bd29-ec6837bc869d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64d090-dbb1-4d07-bd29-ec6837bc869d/1/ihGzR-LbYICxJoRxbO43vsKrpO0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.184.0/22
IPv6:
2a09:2580::/29
Signature Algorithm: sha256WithRSAEncryption
4f:c9:e0:b8:24:0e:c5:39:c5:4f:7d:ab:dd:42:dd:35:c5:58:
29:ab:82:48:5a:64:bf:c3:fd:ed:14:f5:4d:64:7d:2e:bf:8f:
2c:df:21:3f:f5:bd:07:28:dc:46:90:5d:27:b1:99:5b:26:86:
8d:4a:94:cf:f9:80:cc:2b:52:d6:4e:56:23:aa:14:b7:4c:ec:
4f:d7:de:78:d2:f6:cd:c5:41:e1:d4:1c:16:90:2c:9f:3e:39:
93:bc:e1:33:28:4e:46:7c:5d:f0:e8:28:55:94:4d:cd:25:f9:
93:fd:34:a5:8e:d5:97:9f:a5:e9:dc:f0:08:fd:41:9d:1a:1c:
1f:61:ce:e8:84:a7:45:9c:b5:54:54:ad:2d:0b:44:8a:a9:c5:
77:02:d4:ed:75:14:64:05:11:99:56:25:69:21:2a:ed:77:1c:
6b:d0:a4:e2:aa:f5:91:c7:70:d7:5b:85:6f:49:e6:ab:41:ed:
b5:dd:56:25:fa:a2:77:05:d7:a0:a2:54:7b:80:6b:56:7e:cb:
f3:d8:d1:e6:b8:c0:97:ee:db:5d:4a:72:c2:53:9a:de:21:c4:
7f:26:d0:0b:14:48:2f:f1:d2:84:17:9d:98:6e:97:17:ff:0a:
ce:5a:85:f6:89:12:e0:df:cf:42:0f:27:e2:26:2d:4a:3a:05:
97:49:2a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:43 2024 by rpki-client on console-fra.rpki-client.org