Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k9qSB9dBUBq8UtVX04hwYcy8gK8.cer
File: k9qSB9dBUBq8UtVX04hwYcy8gK8.cer (raw, json)
Hash identifier: dB4jN/CXEJflw4esUsAV7yk9ilomm4+YFS1LIWkIeOQ=
Subject key identifier: 93:DA:92:07:D7:41:50:1A:BC:52:D5:57:D3:88:70:61:CC:BC:80:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A4579EC495
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/359a09-ce30-4684-8ef2-a7fc36a8bf21/1/k9qSB9dBUBq8UtVX04hwYcy8gK8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/359a09-ce30-4684-8ef2-a7fc36a8bf21/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:04:02 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 195.60.212.0/22
IP: 2001:67c:78::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 705844659349 (0xa4579ec495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:04:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93da9207d741501abc52d557d3887061ccbc80af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:f1:38:b4:be:40:11:31:88:5c:e9:cc:e4:
68:32:3c:f6:78:e8:a8:6e:fc:a3:53:f7:d8:62:4a:
3a:ee:3c:3b:24:69:fd:82:78:90:c1:6c:93:18:08:
a6:64:5e:fe:e4:34:6d:ae:99:96:a2:14:bb:67:fd:
7b:e6:c7:d0:43:73:56:ff:a4:3d:a2:01:0f:b2:e8:
d1:d7:d9:ad:9c:f2:91:52:9b:a7:e9:48:54:4c:41:
b8:26:24:51:01:29:fe:46:f7:fd:92:fe:f4:1b:00:
6a:0b:36:23:38:b8:5c:bc:bc:00:70:70:57:11:4a:
b5:ff:6c:f3:a5:3d:43:18:2d:f9:6e:2c:74:d8:cc:
0c:cc:16:40:7a:08:66:eb:0b:25:82:92:4f:ca:bb:
fc:35:b6:44:af:0f:ac:c8:8a:9f:a4:b9:d2:87:04:
7a:0c:10:4e:70:d7:53:2f:09:51:83:63:7e:b9:95:
35:19:ea:8f:20:f7:4c:43:64:92:3b:ca:98:5b:64:
97:40:63:44:4a:34:77:88:39:0c:e7:f6:af:df:0e:
2b:19:59:5b:4d:bd:d0:86:a9:1b:ae:84:a4:59:c5:
0f:6a:ad:23:5e:39:d0:87:9e:32:ba:bc:cc:2e:0e:
82:1d:92:0a:05:28:bf:ff:16:91:b1:6c:26:02:5c:
72:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DA:92:07:D7:41:50:1A:BC:52:D5:57:D3:88:70:61:CC:BC:80:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/359a09-ce30-4684-8ef2-a7fc36a8bf21/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/359a09-ce30-4684-8ef2-a7fc36a8bf21/1/k9qSB9dBUBq8UtVX04hwYcy8gK8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.212.0/22
IPv6:
2001:67c:78::/48
Signature Algorithm: sha256WithRSAEncryption
51:3b:c7:2a:65:27:d6:33:e0:b7:25:6a:b9:fd:80:a3:1b:0f:
89:9b:1e:f7:33:74:1e:78:85:c9:92:d2:b2:c2:b7:cc:17:55:
fb:ba:4f:4e:ec:18:25:b0:80:7c:de:dc:a2:64:bd:13:ba:26:
0f:a3:5e:03:c2:6e:61:85:30:98:f1:6a:f0:b8:bb:f8:47:49:
ec:ca:55:c5:36:50:2e:64:f8:45:41:f0:9d:3c:30:55:12:74:
59:6e:7f:b1:e1:d0:61:cd:82:a3:81:31:ce:20:97:34:0a:3a:
53:81:d9:e9:8e:d2:17:45:e5:b1:e6:5b:0f:69:0a:b9:41:ce:
bc:aa:7d:c9:94:0b:2e:d5:e2:4f:e1:70:78:31:81:14:43:0f:
30:24:f3:a7:42:86:ac:fd:4d:be:26:61:c7:f7:09:82:22:40:
d7:c5:b0:ff:ad:7d:4f:0c:08:3e:b9:6a:28:51:75:bd:9c:9c:
82:79:0c:51:93:4c:31:46:89:07:f3:e2:8a:3c:1b:e8:64:48:
44:94:9e:33:4e:27:e8:76:d0:eb:f2:50:e2:10:fe:35:dd:d6:
df:9d:1a:78:a0:e2:24:db:f5:46:2f:51:b8:b8:af:e7:03:fd:
5a:7f:ba:a3:40:b7:7b:f4:09:b3:19:b3:ee:2f:14:53:58:ca:
74:6b:b3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:55 2024 by rpki-client on console-fra.rpki-client.org