Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ka6rCUWu-iga5RnSURz0fiDe3Qg.cer
File: ka6rCUWu-iga5RnSURz0fiDe3Qg.cer (raw, json)
Hash identifier: 15rnsDZs1lLonSpAfukg3fBNcv/bw/EyXichOYoryro=
Subject key identifier: 91:AE:AB:09:45:AE:FA:28:1A:E5:19:D2:51:1C:F4:7E:20:DE:DD:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 98B08EA43C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-rsync.e15f.net/repo/MISAKA-RPKI/8/91AEAB0945AEFA281AE519D2511CF47E20DEDD08.mft
caRepository: rsync://rpki-rsync.e15f.net/repo/MISAKA-RPKI/8
Notify URL: https://rpki.e15f.net/rrdp/notification.xml
Certificate not before: Sat 01 Jan 2022 00:00:29 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.189.72.0/24
IP: 2a11:6e00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655797167164 (0x98b08ea43c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:00:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91aeab0945aefa281ae519d2511cf47e20dedd08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:eb:08:3e:32:3d:a5:62:3c:c2:b9:77:c9:1d:
37:56:77:9e:f8:7f:16:0a:70:19:cf:43:b4:71:b5:
bd:2b:63:25:3f:ac:e7:3d:68:14:e4:d5:7b:02:29:
4d:d5:dc:57:6b:d4:85:a4:f9:46:fa:5c:5d:ed:24:
51:33:75:ea:3d:2a:1c:df:e2:dc:a7:13:2e:82:7b:
fd:5d:38:db:a2:84:e0:50:60:c4:74:14:86:e5:f4:
de:6a:97:1f:73:2c:bf:35:c7:d3:df:25:26:81:02:
9a:0d:4f:61:72:8c:99:9c:94:2f:a8:9e:28:9b:95:
3f:13:87:d7:de:2c:e4:86:49:f1:28:90:a1:93:64:
53:39:12:d8:e5:61:47:6f:7a:63:b6:ef:2b:55:bb:
a1:0a:05:7d:7b:24:a5:57:87:c7:26:2d:96:39:1e:
df:04:6c:f4:7e:45:8e:36:c0:11:bc:f5:f4:c4:d8:
67:ef:3d:27:c8:d9:1f:df:1b:63:05:37:ca:37:76:
5d:da:eb:12:d7:e9:9a:29:72:e5:ba:aa:7f:a4:88:
52:41:60:c1:57:2b:79:07:8b:d0:07:d5:b6:89:67:
72:4f:44:07:3e:bf:fc:cc:15:8d:3f:a5:65:05:54:
8c:39:36:93:b8:c1:35:7e:a1:79:7e:54:50:5d:a4:
2d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AE:AB:09:45:AE:FA:28:1A:E5:19:D2:51:1C:F4:7E:20:DE:DD:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.e15f.net/repo/MISAKA-RPKI/8
RPKI Manifest - URI:rsync://rpki-rsync.e15f.net/repo/MISAKA-RPKI/8/91AEAB0945AEFA281AE519D2511CF47E20DEDD08.mft
RPKI Notify - URI:https://rpki.e15f.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.72.0/24
IPv6:
2a11:6e00::/29
Signature Algorithm: sha256WithRSAEncryption
1f:ef:01:f1:8c:ec:49:7f:ac:d4:e6:e6:48:e1:91:8f:0a:16:
16:df:25:82:f6:21:d0:ed:65:1e:80:93:28:c8:91:6b:a0:04:
ab:a3:10:44:57:1e:c9:db:d2:f8:e1:90:6e:9f:8f:5e:b4:35:
54:7e:14:39:5a:20:15:2d:4d:f0:18:fd:ae:9c:3d:2e:ac:b8:
4f:95:64:6c:37:01:9e:27:3a:00:6b:97:53:0c:36:4d:e6:50:
77:6c:4f:18:b7:d7:24:0b:58:f8:e2:72:29:94:b5:81:b3:40:
5a:54:ad:7b:64:15:12:7c:39:2c:65:20:e1:46:b5:76:a2:fc:
39:b3:38:b5:98:87:9b:d5:bb:75:c7:16:f9:12:82:26:86:48:
77:89:ff:9b:9c:dc:70:f5:1b:c5:7b:ee:4e:e9:b1:2c:3d:56:
de:96:e9:9d:0c:aa:15:30:30:a2:12:37:6d:6e:86:a9:9c:21:
1c:45:82:64:47:ee:43:1e:85:43:17:08:1a:f8:75:22:67:84:
31:1d:b2:86:1e:fa:14:ef:5a:da:6d:09:91:57:a2:bf:bb:1d:
a3:82:e8:e9:59:11:84:13:db:7a:87:88:fc:3c:fe:38:32:9a:
37:05:12:87:ae:1f:55:fb:d9:4a:94:fe:f6:55:c1:27:b7:53:
d3:14:c3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:59 2024 by rpki-client on console-fra.rpki-client.org