Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jF8pgJ2Ae7BmDhM2vFzb0ok1taI.cer
File: jF8pgJ2Ae7BmDhM2vFzb0ok1taI.cer (raw, json)
Hash identifier: TzqdJHctm2y4Pvl82zbMdMa6kM9lYXbKwTMYOUmisC0=
Subject key identifier: 8C:5F:29:80:9D:80:7B:B0:66:0E:13:36:BC:5C:DB:D2:89:35:B5:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9FD4CE0570
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/41657f-16ec-4f93-95e6-9c3e513e4a03/1/jF8pgJ2Ae7BmDhM2vFzb0ok1taI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/41657f-16ec-4f93-95e6-9c3e513e4a03/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 06:06:03 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 194.242.54.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 686470071664 (0x9fd4ce0570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:06:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c5f29809d807bb0660e1336bc5cdbd28935b5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:0e:89:be:db:a9:c3:aa:9f:a8:ea:b6:ce:
05:7a:a6:b2:f6:c4:bb:29:c2:9f:ef:08:96:99:da:
2b:e1:4b:bd:39:34:b0:c3:04:44:94:f4:84:bf:ff:
8c:ff:93:c0:f0:10:6c:51:22:22:41:c2:b1:35:47:
f2:4c:fa:2f:da:4b:8d:df:92:f1:84:9f:3f:7c:c2:
ba:d6:ae:36:ab:7c:53:c5:7f:8b:2d:dc:ad:6a:18:
3b:f5:e4:78:7c:62:65:03:11:32:13:ce:5e:d6:75:
ec:d9:cd:ea:6d:ac:30:7f:70:88:c5:8a:25:65:2e:
88:61:ca:35:d8:c7:26:bb:66:dc:ac:72:a6:e8:30:
0e:16:01:40:a5:72:af:4f:8d:7f:e7:28:9d:74:8b:
6f:dc:d7:d4:67:2d:38:c7:e2:94:93:ec:74:53:ad:
83:cc:ce:c3:47:3c:d2:fc:bb:a1:00:d4:75:4a:6c:
05:9f:f1:79:15:c8:c2:9f:33:30:5a:54:41:27:49:
bf:9d:29:60:64:94:ed:a3:9e:21:48:13:60:d9:f8:
89:1f:cd:54:45:ac:ac:1a:37:59:7f:25:ba:9b:5a:
d9:c3:27:38:1d:7e:86:a8:39:b4:3b:92:ce:54:eb:
b8:2a:7e:2c:14:d8:9e:65:52:53:f5:26:62:a6:d1:
3c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5F:29:80:9D:80:7B:B0:66:0E:13:36:BC:5C:DB:D2:89:35:B5:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/41657f-16ec-4f93-95e6-9c3e513e4a03/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/41657f-16ec-4f93-95e6-9c3e513e4a03/1/jF8pgJ2Ae7BmDhM2vFzb0ok1taI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.54.0/24
Signature Algorithm: sha256WithRSAEncryption
64:92:89:e1:36:5a:97:c6:f1:d3:53:c4:83:6f:4f:00:d0:e8:
a7:9f:44:f9:45:e0:36:ac:95:4c:9f:62:13:26:89:11:98:b6:
6f:01:f0:70:84:8d:1a:26:e4:a9:b0:49:e2:7c:8c:db:df:4b:
28:aa:ea:8a:b1:df:89:10:85:3f:7a:46:ec:23:04:d4:a1:a3:
f3:36:b3:c9:d6:42:8f:56:a9:1e:cd:20:e7:a9:bd:7d:d4:e7:
9e:bd:a0:4d:58:92:88:ca:76:6b:22:15:f4:43:2b:ef:f4:9d:
60:5d:ac:fe:d1:58:23:b6:7e:b7:5b:6b:a3:9a:7e:87:e2:23:
04:92:d1:9c:65:fe:3e:ea:05:12:bd:bf:63:47:20:46:dd:da:
f7:4e:9a:ae:47:e8:13:86:cd:e0:1a:2a:0f:79:8e:5c:dd:98:
44:e2:e5:a7:05:de:cc:f1:cd:b1:c0:25:fe:83:04:23:01:d8:
c3:fc:ad:8b:96:e9:d5:b2:a1:88:d9:ed:aa:90:a6:67:94:9b:
9e:c4:0d:94:0a:99:79:e2:11:f1:73:03:6c:30:ae:02:9d:8e:
d7:18:55:37:eb:40:c0:d4:97:9d:f8:15:e8:1e:d2:82:a1:16:
81:38:cd:fd:89:1a:bf:9f:24:7c:e4:0a:5b:7a:12:04:b9:13:
97:34:06:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:47 2024 by rpki-client on console-fra.rpki-client.org