Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jIzHX3GIECduDdYrB-qOFHMWIdA.cer
File: jIzHX3GIECduDdYrB-qOFHMWIdA.cer (raw, json)
Hash identifier: ixxDUJ9pY7NNi0hUGDjVCnRwyjMOwul7WktZJGIjY+U=
Subject key identifier: 8C:8C:C7:5F:71:88:10:27:6E:0D:D6:2B:07:EA:8E:14:73:16:21:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9903CB743A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/040f2d-cdc1-4e69-ad85-140bec420a5c/1/jIzHX3GIECduDdYrB-qOFHMWIdA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/040f2d-cdc1-4e69-ad85-140bec420a5c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:52:41 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 139.28.76.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657193661498 (0x9903cb743a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:52:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c8cc75f718810276e0dd62b07ea8e14731621d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9d:c2:5f:19:b3:c5:0b:82:11:d5:ff:d1:24:
aa:62:53:64:6e:44:37:c9:11:25:84:1f:7d:87:25:
ae:f0:ab:78:c7:a6:00:c0:98:24:61:ae:c0:d0:18:
8c:95:cf:2f:bb:47:db:19:03:8c:39:78:6c:34:67:
2e:c7:c9:7f:c3:14:a6:f6:18:1c:3d:20:c6:8a:27:
02:05:b5:66:d2:b6:00:89:46:c1:c8:02:04:ac:98:
d1:11:99:63:52:c5:3f:47:fe:f8:63:d1:2c:35:df:
0d:69:55:f2:8a:b7:49:71:22:2d:39:a1:c7:b5:76:
18:c2:dd:73:6a:4b:19:80:13:89:8f:c3:b6:b6:70:
6f:64:20:20:79:63:45:0f:17:a6:6a:44:49:85:fe:
a8:82:8e:38:49:f3:50:5f:81:6d:ac:f2:fb:bd:00:
7c:26:e3:fb:12:39:89:4a:00:75:13:76:64:29:34:
c6:f7:46:96:16:3b:c5:17:28:92:a2:93:e8:0d:40:
10:b8:05:0f:e9:b6:7b:7b:c7:bd:64:a8:c4:6f:52:
dd:5a:42:0c:1e:fe:db:df:06:b7:56:de:cf:b6:06:
31:b9:5c:a3:2b:e7:19:6a:8e:aa:ae:3b:92:dc:7e:
e1:10:79:3d:91:ed:dd:c9:8f:72:82:5e:97:6b:39:
e1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8C:C7:5F:71:88:10:27:6E:0D:D6:2B:07:EA:8E:14:73:16:21:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/040f2d-cdc1-4e69-ad85-140bec420a5c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/040f2d-cdc1-4e69-ad85-140bec420a5c/1/jIzHX3GIECduDdYrB-qOFHMWIdA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.76.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:06:bc:e2:ef:42:ad:ef:e6:5a:87:49:58:8c:d1:42:5a:74:
74:71:06:65:29:0a:2f:4a:98:88:7d:a1:be:62:72:5d:e3:9f:
58:64:9a:9b:36:3e:08:e0:66:84:8f:da:7d:49:c4:60:20:2d:
c4:43:ee:90:82:a4:bc:ef:22:5a:cb:b0:59:b7:c4:76:18:71:
3c:b6:7d:37:9e:39:50:93:7f:f7:55:61:20:f0:59:59:9a:fa:
e3:b5:80:3b:8a:c1:62:70:c9:20:1c:f6:d3:67:66:2a:1b:8a:
c3:5f:dd:f8:97:86:c3:0e:65:0d:43:1f:3a:0a:42:f5:77:b6:
0a:0c:96:9f:db:72:c4:56:a7:4c:f7:86:6f:68:99:88:dc:8c:
c3:64:74:50:df:15:50:de:cc:36:34:f4:5c:d6:3a:b6:de:7c:
15:53:92:e0:04:ea:bc:b7:8c:39:92:63:28:54:3d:e5:82:92:
06:14:46:3c:41:f1:46:67:9f:1f:a8:ba:87:8e:70:fd:7e:82:
1a:54:53:1d:00:1f:50:10:57:07:9f:73:a2:3c:e3:9e:31:92:
a8:42:e1:0d:a9:92:ef:19:bf:bb:3a:d8:aa:ba:e4:18:b0:f4:
8b:4d:5c:bc:71:ad:f5:3c:b3:00:1a:fd:45:1c:6a:52:b9:78:
fb:24:09:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:48 2024 by rpki-client on console-fra.rpki-client.org