Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jNT1JfLgmeIHpHAardCWzTZ-wu8.cer
File: jNT1JfLgmeIHpHAardCWzTZ-wu8.cer (raw, json)
Hash identifier: U2+VCdiDzRXTfCDLM07NaWtQm8cYDcafFcuQHdnUCCw=
Subject key identifier: 8C:D4:F5:25:F2:E0:99:E2:07:A4:70:1A:AD:D0:96:CD:36:7E:C2:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9E37B359C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/e34891-207c-4eb8-ab1b-3e64b42f7a61/1/jNT1JfLgmeIHpHAardCWzTZ-wu8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/e34891-207c-4eb8-ab1b-3e64b42f7a61/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:00:28 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.194.12.0/24
IP: 2a10:7140::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 679539333571 (0x9e37b359c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:00:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8cd4f525f2e099e207a4701aadd096cd367ec2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:94:2a:e9:5f:93:01:45:16:91:2a:f4:46:d8:
c3:bb:b1:c1:1c:71:38:2e:22:19:e3:38:d7:2f:7d:
df:c1:04:0d:ef:76:44:fd:d3:68:ef:5f:90:aa:91:
13:f7:6e:65:73:23:b3:1d:7d:11:cd:5e:b8:68:9d:
ac:85:68:2d:ed:1c:e9:0a:59:93:83:95:2c:03:35:
ce:84:a1:27:8b:3c:cc:9c:cb:fd:ba:5c:71:14:8c:
86:e1:a9:06:43:f2:17:27:60:d0:1f:28:d5:ca:47:
c5:04:c6:fc:3a:da:ac:c3:35:b3:ce:17:f4:73:36:
90:bf:e0:48:86:ac:97:d0:ee:b3:a9:42:14:6b:b4:
48:7f:bf:cc:1d:39:d7:a7:a2:06:18:b5:5c:97:f9:
bb:75:62:41:23:cb:bb:99:47:27:1b:d2:cd:5d:44:
13:9e:be:2c:f9:f7:e5:57:55:bc:65:aa:e9:4b:5b:
4d:59:ba:74:af:03:99:d6:59:ba:86:fa:4c:58:2b:
48:13:f6:e7:76:74:3e:e0:43:44:7a:bf:c6:15:de:
5c:f3:de:6c:b7:ab:b1:cf:9e:76:48:a5:e2:77:39:
a9:a8:e5:82:3b:ed:0f:50:eb:bc:c4:75:e3:36:99:
87:02:6f:0d:ab:98:d1:3f:16:bc:e2:0a:27:43:49:
c3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D4:F5:25:F2:E0:99:E2:07:A4:70:1A:AD:D0:96:CD:36:7E:C2:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e34891-207c-4eb8-ab1b-3e64b42f7a61/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e34891-207c-4eb8-ab1b-3e64b42f7a61/1/jNT1JfLgmeIHpHAardCWzTZ-wu8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.12.0/24
IPv6:
2a10:7140::/29
Signature Algorithm: sha256WithRSAEncryption
35:6b:95:30:3c:59:31:9c:fb:1d:a8:1b:d6:00:9b:86:a2:d4:
21:9b:d2:82:1d:b3:d4:33:c0:27:83:c2:78:4b:e4:43:7f:69:
2a:0a:a8:d4:5c:d1:64:00:9a:76:f9:a0:28:7f:b7:33:e0:41:
af:d2:93:14:db:5b:70:0e:1b:d1:3b:79:ce:1f:72:7c:8e:0e:
77:fd:66:e0:d8:12:0f:20:f7:dd:d4:d2:ef:03:b5:77:ae:45:
f7:6f:30:83:ee:e1:d0:2c:d3:23:b3:fe:b3:24:f7:91:81:7b:
20:c7:b9:f5:b3:30:4c:80:1d:9e:91:70:0c:f3:81:f3:69:e9:
b3:a3:bf:65:5e:22:b9:c5:90:ea:13:f7:55:fe:f8:3f:f1:92:
f6:87:6d:38:84:46:1d:fa:14:97:96:f9:a5:80:52:c8:69:b4:
dd:c7:f1:33:02:71:a6:0b:09:1f:ac:fb:83:d3:5d:9f:3f:ca:
31:fd:a4:0e:fd:ba:db:88:35:a1:29:4f:9d:58:96:37:c6:e0:
6a:c4:80:3f:bd:fc:a8:3b:a3:ec:c8:52:fa:ad:e2:39:e3:60:
20:04:06:74:d4:f0:27:c7:a0:a4:33:20:48:99:3d:91:e1:96:
46:e6:68:5b:21:6f:4d:53:05:aa:59:5d:63:18:ac:54:f9:7a:
9c:c9:37:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:49 2024 by rpki-client on console-fra.rpki-client.org