Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kLn6PSU9OanALFNFlGncuHZeFds.cer
File: kLn6PSU9OanALFNFlGncuHZeFds.cer (raw, json)
Hash identifier: UMVwk/GWqHrCauEWy9XVSBpWUK6i3ctbUK+BcUv1aGk=
Subject key identifier: 90:B9:FA:3D:25:3D:39:A9:C0:2C:53:45:94:69:DC:B8:76:5E:15:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9C4F50EF66
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/a09319-c7b9-4b1a-a385-17a5078f4aa5/1/kLn6PSU9OanALFNFlGncuHZeFds.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/a09319-c7b9-4b1a-a385-17a5078f4aa5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:02:24 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.43.208.0/24
IP: 2a04:f440::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671345602406 (0x9c4f50ef66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:02:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90b9fa3d253d39a9c02c53459469dcb8765e15db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:b3:90:de:e3:5f:c6:30:7a:4c:b8:f1:6c:
8d:ee:59:4f:16:a7:59:de:2a:2a:c7:9d:bf:55:26:
22:2b:dd:95:02:1c:71:f5:83:17:5a:ed:40:ec:7f:
89:72:27:61:d2:c4:18:ff:42:33:de:32:c8:27:89:
8b:db:35:51:06:44:7c:62:4d:5a:6b:28:aa:e3:b8:
58:72:b7:2e:7c:0d:0b:f4:5b:a1:cd:19:15:3c:ff:
65:d9:d3:28:87:8d:7a:a4:38:d0:98:31:de:a6:c2:
1b:0f:95:ac:18:b0:32:14:8f:e2:96:fd:5f:49:c0:
b1:3c:8b:77:8c:e6:a9:84:e9:fe:4a:c6:0f:cb:7c:
85:fe:9f:4e:d9:00:d2:bb:56:bc:74:97:df:b4:7e:
b0:a4:34:85:94:cf:55:ef:de:de:80:48:3d:37:5b:
a0:22:5b:31:70:5f:07:d0:53:db:f5:d7:2e:fa:77:
d9:2c:29:b0:97:81:08:83:0d:6e:1a:5d:7a:68:39:
32:e9:9c:bb:3a:fd:92:a2:75:d0:11:14:8f:db:aa:
c1:cf:78:19:00:d5:09:4f:20:96:99:83:f7:30:4e:
6f:4b:a0:ee:30:72:e6:e8:fa:6b:83:db:01:d4:8d:
20:5d:91:28:4f:8e:b4:6e:18:ee:34:27:e9:10:8c:
10:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B9:FA:3D:25:3D:39:A9:C0:2C:53:45:94:69:DC:B8:76:5E:15:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a09319-c7b9-4b1a-a385-17a5078f4aa5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a09319-c7b9-4b1a-a385-17a5078f4aa5/1/kLn6PSU9OanALFNFlGncuHZeFds.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.208.0/24
IPv6:
2a04:f440::/29
Signature Algorithm: sha256WithRSAEncryption
8c:05:d8:68:b5:4e:08:a8:4f:32:1a:26:96:5d:bd:80:12:be:
4c:65:e6:29:47:3f:43:b2:88:c8:74:23:5e:26:cd:fc:8a:8a:
6c:cc:a3:70:46:32:b8:df:63:d6:89:3e:b7:d2:77:37:85:ee:
f1:e4:32:62:f0:39:bc:b5:07:c2:81:30:3f:2c:9c:4d:a4:db:
77:fc:2a:83:ed:f3:47:4b:c5:90:e5:c9:4e:57:32:4c:95:48:
fe:83:7a:09:b6:a9:91:0d:4a:e1:97:a8:1e:3e:d7:50:85:27:
0f:3c:50:61:9d:6f:17:13:cb:3c:93:e3:91:b7:26:0d:60:96:
4e:ef:fe:b3:9a:9b:35:1e:20:fe:cb:46:7f:d2:e9:2e:b8:ff:
9e:a3:44:f5:7a:82:69:7a:da:a3:9c:04:b5:76:e4:a5:db:cd:
72:e1:09:cb:84:8d:6f:ec:37:3b:55:c4:cf:36:53:da:95:ef:
2a:37:21:0b:05:5e:fe:50:17:36:c1:0e:23:8b:5f:8f:8f:8e:
fd:5c:65:ca:09:79:64:a2:38:db:19:3a:a8:ae:e9:c4:1e:3a:
16:d9:7f:f8:9c:9c:1c:e7:8f:9e:78:21:b8:4f:86:27:4c:f4:
42:20:99:52:3a:39:d3:a4:ee:36:2f:be:b0:66:69:be:fa:10:
db:82:fb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:49 2024 by rpki-client on console-ams.rpki-client.org