Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kio9afIcdh4qkMdyb-XgzcksM5M.cer
File: kio9afIcdh4qkMdyb-XgzcksM5M.cer (raw, json)
Hash identifier: Zr9Qfx+7RE2LfLYtEC1LoA8TMLMCwC6VrRCiQ50GsP8=
Subject key identifier: 92:2A:3D:69:F2:1C:76:1E:2A:90:C7:72:6F:E5:E0:CD:C9:2C:33:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A9BE76E245
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/36e08f-afd2-4aff-a26f-c917aa946b73/1/kio9afIcdh4qkMdyb-XgzcksM5M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/36e08f-afd2-4aff-a26f-c917aa946b73/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:01:00 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.196.63.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 729044935237 (0xa9be76e245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:01:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=922a3d69f21c761e2a90c7726fe5e0cdc92c3393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3f:b3:90:d0:1f:55:40:6d:49:f2:f3:25:77:
ab:9c:06:9e:5e:37:10:e6:c5:b5:b9:05:8c:d3:84:
d2:53:f1:8a:d5:a2:4f:9e:69:c2:f7:53:03:5b:ea:
c8:05:af:b6:c6:3e:6a:4b:eb:de:25:3e:83:25:f0:
7c:6c:f9:55:9c:db:a5:8c:38:0a:44:06:ed:df:1c:
e0:22:b6:85:ff:f2:6f:aa:df:6f:44:8c:e6:32:72:
1a:a1:be:43:c7:ae:71:45:40:fc:fc:da:8f:ab:c9:
ef:0b:4f:a0:95:be:f9:e6:8d:dd:e3:1e:bd:4e:95:
61:5c:5b:72:90:2f:d4:48:cf:f4:1f:c5:25:f2:7f:
73:65:7c:24:9f:54:e3:c0:00:01:7a:47:b3:5f:d4:
e6:6a:7d:60:fd:74:38:36:e9:2c:f4:36:53:b1:5c:
52:07:c0:5c:25:0c:5b:a8:e0:3f:93:94:06:76:c1:
73:37:ee:90:c0:86:97:55:df:0b:87:da:7d:59:1e:
cb:c6:74:54:b8:bf:2b:ce:17:0d:35:43:9d:85:75:
8e:75:82:01:e1:c5:aa:69:52:a7:2f:66:c4:5e:a5:
aa:83:96:db:e4:ac:fb:4d:96:35:31:58:eb:06:5a:
ad:95:33:c3:7b:8d:7b:0b:de:e7:1e:92:7f:61:9b:
ed:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2A:3D:69:F2:1C:76:1E:2A:90:C7:72:6F:E5:E0:CD:C9:2C:33:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/36e08f-afd2-4aff-a26f-c917aa946b73/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/36e08f-afd2-4aff-a26f-c917aa946b73/1/kio9afIcdh4qkMdyb-XgzcksM5M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.63.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:b6:d4:c3:f8:7b:55:83:50:ed:f3:03:2b:d7:8f:bf:7b:96:
20:bb:01:53:46:f2:38:aa:7e:d3:72:d5:46:d2:2d:bf:ff:1a:
18:7f:8b:80:22:9a:78:75:27:28:da:29:28:87:11:2d:88:c7:
92:e4:2c:ad:ed:50:09:69:c1:75:f2:c3:5f:f5:f5:da:cc:b4:
01:6b:87:0c:ba:dd:93:b4:d7:d2:63:4c:5f:d0:cd:d2:c3:3d:
cc:b8:50:1d:2c:01:09:40:21:d3:9d:32:9e:7d:e6:09:73:2d:
70:29:38:55:fd:73:ae:fc:02:77:47:75:61:5a:11:17:df:9d:
57:d9:ea:a9:f1:48:d9:42:7d:5c:63:97:1c:10:96:d2:c0:53:
b0:33:c5:21:2f:9c:b7:f9:bf:52:fa:e9:38:aa:7d:ae:09:45:
ae:1a:f7:54:bf:04:a0:9f:33:3c:b1:f6:63:d2:12:2b:76:dd:
2c:87:e9:a8:53:06:0d:3c:85:1d:54:ba:2b:29:59:4f:52:08:
de:6f:87:59:c9:90:d1:6f:7d:2e:40:d3:6f:8d:b7:e0:57:43:
4a:fa:a2:19:b1:ba:2c:ff:86:14:ff:e3:41:55:29:c5:54:ab:
4b:92:f0:eb:77:3a:fb:a1:19:47:d5:90:57:08:70:88:d7:49:
d1:c4:93:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:00 2024 by rpki-client on console-fra.rpki-client.org