Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j_5UCAhx8hbytGk1vAz-rqooXN4.cer
File: j_5UCAhx8hbytGk1vAz-rqooXN4.cer (raw, json)
Hash identifier: Wpw0u0ZSVmXl4WPWu+WDQ3bGwa42UuojvnrLFc4Qg0w=
Subject key identifier: 8F:FE:54:08:08:71:F2:16:F2:B4:69:35:BC:0C:FE:AE:AA:28:5C:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B1FA68605D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/41105e-7903-4ce0-ac4f-13662aa2c1b6/1/j_5UCAhx8hbytGk1vAz-rqooXN4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/41105e-7903-4ce0-ac4f-13662aa2c1b6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 19 May 2022 11:12:06 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 94.154.184.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 764410355805 (0xb1fa68605d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 19 11:12:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ffe54080871f216f2b46935bc0cfeaeaa285cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d2:8d:47:ac:ef:ff:d2:51:23:40:20:71:10:
34:9f:ec:ad:7a:07:58:a4:ce:e2:6f:78:b3:c7:fd:
3d:3f:88:d7:17:fa:52:7a:bc:0a:26:46:1c:86:0d:
68:bf:ba:29:ff:88:ee:0a:5c:8c:26:89:94:a9:7f:
e7:d0:bd:0c:d3:b0:b6:bd:e3:03:8f:9d:48:fe:fe:
1a:f8:6a:bb:c5:b6:15:4a:99:42:3a:40:3f:6c:66:
32:c2:56:6f:5c:96:15:24:6c:09:52:fa:cf:2c:3d:
da:31:14:74:b7:76:46:1c:ad:65:82:75:e2:a4:cb:
62:30:99:8e:3c:3f:24:e6:55:e9:7d:a9:68:c7:19:
ec:e5:36:38:b4:9c:71:3a:14:35:58:ae:62:ab:f3:
ce:c3:84:95:f8:16:4f:b3:4b:09:6a:85:30:b1:fd:
f4:82:43:3f:b6:8d:e6:38:73:f3:c1:26:8f:25:08:
30:2a:f2:78:34:e9:07:59:1a:91:79:43:da:5c:6c:
21:b2:22:d3:31:72:f8:60:c4:25:65:80:cb:8e:bf:
3c:70:ec:77:a3:89:cf:d2:06:e2:2c:ad:28:2a:1e:
22:40:5c:9b:d3:d2:77:09:47:c4:82:a7:65:a4:8b:
ee:70:ac:af:bd:dd:8d:66:9d:10:a7:4e:1f:c1:63:
72:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FE:54:08:08:71:F2:16:F2:B4:69:35:BC:0C:FE:AE:AA:28:5C:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/41105e-7903-4ce0-ac4f-13662aa2c1b6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/41105e-7903-4ce0-ac4f-13662aa2c1b6/1/j_5UCAhx8hbytGk1vAz-rqooXN4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.184.0/22
Signature Algorithm: sha256WithRSAEncryption
26:23:ca:8f:99:0e:48:c9:ea:63:74:17:6e:a7:56:b7:fd:ff:
5a:63:dd:cb:16:8a:df:2c:9d:56:df:b2:9a:fa:ab:52:77:7b:
41:f3:0b:5e:5c:a4:27:24:22:8d:1f:a6:b3:50:3a:a6:94:bc:
a0:8b:96:33:8b:c7:b3:fb:7f:96:5b:f8:a4:cd:da:77:27:9f:
32:d3:aa:6f:b2:a5:7b:0f:16:7f:b1:f2:fb:7d:ed:c3:0e:3f:
5d:3e:54:1c:7a:cb:8a:cb:a0:2f:65:f6:de:12:94:1d:a1:47:
08:ec:f7:26:fa:e0:7f:e9:7a:64:08:eb:36:5f:a4:0d:8a:0f:
e5:5a:51:7d:cb:d4:ee:6a:5a:6d:83:39:b9:72:f5:df:bc:3e:
ea:c1:5b:b2:b6:2a:d7:5f:23:36:e1:8b:f2:04:2e:d8:a2:36:
9d:87:ee:a7:8b:ce:82:15:78:ce:76:c4:9b:b9:f4:77:83:df:
86:72:88:6b:42:6b:19:ef:b0:ed:99:56:aa:c2:57:9f:99:1f:
65:5d:e5:7a:8e:55:cf:b3:09:eb:5d:3a:61:04:8e:48:b8:e9:
d6:ae:20:4f:8d:9d:96:a2:3e:94:f3:8c:14:67:43:01:1f:6b:
4f:4c:02:c9:24:5b:07:d4:89:ec:d7:e3:27:0c:e8:fa:5f:ab:
bb:f6:5f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:40 2024 by rpki-client on console-ams.rpki-client.org