Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ihPdxnTD7fx3QImZFb2Re0GoUCg.cer
File: ihPdxnTD7fx3QImZFb2Re0GoUCg.cer (raw, json)
Hash identifier: wxFZFC8LTadVEaZ5rmd3UA9gCwaGvSaoC2XqQeb2QMA=
Subject key identifier: 8A:13:DD:C6:74:C3:ED:FC:77:40:89:99:15:BD:91:7B:41:A8:50:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AAA3E82141
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/1880c6-9066-46ce-a99e-b79ef056476a/1/ihPdxnTD7fx3QImZFb2Re0GoUCg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/1880c6-9066-46ce-a99e-b79ef056476a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:58:02 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 94.154.14.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 732894339393 (0xaaa3e82141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:58:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a13ddc674c3edfc7740899915bd917b41a85028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b0:f7:45:0d:2e:2c:be:11:80:f0:b5:4d:4f:
e9:e3:df:64:bc:c4:01:8f:74:66:17:44:83:52:ab:
ea:30:fc:f7:a2:78:7a:32:e0:b4:72:42:68:48:15:
72:2e:79:6e:8a:07:c7:96:c2:93:aa:3b:60:53:fc:
ba:05:ae:ac:af:c1:46:8a:d4:55:da:79:83:02:96:
29:d9:f2:01:2f:61:90:60:e0:f1:e0:21:30:81:97:
95:6f:46:7a:50:c0:a2:c3:fd:65:0e:44:a5:12:b0:
77:b1:17:3d:07:b1:37:38:eb:0a:52:84:16:e0:b1:
bb:21:2e:9c:76:6b:a0:1b:9f:53:33:79:99:74:3a:
05:ef:ff:2c:0b:c0:9b:52:7d:40:5a:d8:8a:51:e0:
af:9c:98:95:68:34:d4:a0:1d:1a:5f:0c:cd:52:9c:
f4:87:ef:e0:e6:fe:4b:04:e6:12:69:81:59:31:03:
f6:21:dd:a5:23:c8:12:32:38:fb:64:06:da:3e:3d:
e3:f1:61:4e:c5:a7:ee:3d:bb:f4:c0:a9:75:f3:6f:
63:ea:a3:b9:1c:0b:54:a0:10:18:ce:3f:c7:24:54:
c4:21:52:88:28:42:79:34:51:70:56:3b:f5:66:8a:
7d:9f:c2:52:8d:fe:db:94:fa:08:4e:1f:9d:3a:46:
7a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:13:DD:C6:74:C3:ED:FC:77:40:89:99:15:BD:91:7B:41:A8:50:28
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1880c6-9066-46ce-a99e-b79ef056476a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1880c6-9066-46ce-a99e-b79ef056476a/1/ihPdxnTD7fx3QImZFb2Re0GoUCg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.14.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:83:43:6b:e9:e3:1a:f1:d2:3c:4d:3c:93:12:85:94:42:81:
48:6c:d0:68:ee:a7:1d:e6:b4:74:87:23:ae:ca:ff:34:ef:f5:
d2:a6:36:d4:bc:2f:bb:3e:f8:f7:57:3d:9c:7c:a3:41:ef:d2:
4b:44:bc:b6:9b:e0:8d:a3:df:35:ab:42:33:45:78:83:59:e1:
64:32:5c:1d:59:63:4b:66:de:11:18:eb:a9:3c:26:b2:02:d3:
c2:79:b3:ed:8b:7e:ac:df:33:fa:fd:17:4a:eb:4e:12:bc:fe:
e9:1f:34:c4:b6:32:14:f9:99:87:27:34:13:a7:a6:3d:da:eb:
c7:27:90:f3:a4:19:25:ef:8a:4f:09:54:11:9c:b4:c7:b8:6b:
fc:96:fe:b0:09:01:fb:1a:3d:54:f8:92:ec:15:a2:23:7b:86:
c7:84:7a:04:29:46:11:e0:28:cb:ee:17:c6:9a:7f:53:f2:c8:
11:4e:8a:df:29:68:ea:df:d1:35:50:34:f8:5a:79:9c:cd:1b:
00:7f:4e:04:68:2f:19:8e:c2:90:72:b8:08:41:6e:24:20:95:
29:c7:3c:61:76:4e:37:7f:c9:d8:8d:05:72:d1:7f:8f:38:d6:
df:f9:5a:54:0d:6a:d7:3b:4e:56:d3:b1:38:a9:b6:6a:10:d8:
47:e2:22:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:43 2024 by rpki-client on console-fra.rpki-client.org