Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kxQz4rt-gyYGxGK1Nm-pQcz6H8o.cer
File: kxQz4rt-gyYGxGK1Nm-pQcz6H8o.cer (raw, json)
Hash identifier: 8KRArB5n9WUQTgztMOBkG5aHk2CBD//K+kovc6GsRlw=
Subject key identifier: 93:14:33:E2:BB:7E:83:26:06:C4:62:B5:36:6F:A9:41:CC:FA:1F:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A9892930AE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/d4374e-a52a-4620-8f59-1e15a5a885a5/1/kxQz4rt-gyYGxGK1Nm-pQcz6H8o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/d4374e-a52a-4620-8f59-1e15a5a885a5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:58:21 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 194.107.160.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 728150651054 (0xa9892930ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:58:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=931433e2bb7e832606c462b5366fa941ccfa1fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:64:0b:7f:8a:a3:c5:2b:39:9f:d0:4f:65:19:
8e:46:0c:a7:0c:cb:11:b9:26:d4:07:62:7c:b2:b4:
a7:66:6f:7f:4f:06:13:98:f7:89:0b:e7:c8:0e:71:
68:53:7a:b3:7c:07:e5:73:bf:3b:04:6c:06:53:f8:
8c:3b:7f:fb:e0:ff:15:be:1d:8d:8a:dc:71:2d:0e:
2f:1d:59:2f:22:aa:54:3c:43:3b:7e:f8:80:e6:26:
46:61:4e:db:64:fb:cc:73:3a:fd:38:32:5d:15:22:
d9:f6:39:3e:8d:84:66:03:31:46:e5:5a:16:64:06:
85:41:34:3c:c9:7b:d0:f9:83:1f:12:ea:46:d5:66:
6b:d2:30:93:76:8c:5b:24:76:df:4f:0f:9c:e8:41:
29:1f:f8:d3:bb:f7:67:ac:33:d3:4c:15:d5:4f:e0:
0b:f7:8c:7a:07:46:d6:66:a8:27:65:f4:0d:bc:b5:
86:6d:a5:7d:78:7d:50:14:68:e4:5f:cc:22:2c:65:
ce:95:6e:dc:79:41:ac:0c:db:fe:d4:87:c7:b1:98:
f0:33:e9:da:54:52:39:ac:63:8c:e2:ab:1a:4c:2b:
5b:f8:84:73:1d:60:02:84:8c:81:18:ae:b8:a4:e9:
6f:6a:65:ff:ba:b4:5f:62:22:5e:4f:94:57:f5:6a:
81:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:14:33:E2:BB:7E:83:26:06:C4:62:B5:36:6F:A9:41:CC:FA:1F:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d4374e-a52a-4620-8f59-1e15a5a885a5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d4374e-a52a-4620-8f59-1e15a5a885a5/1/kxQz4rt-gyYGxGK1Nm-pQcz6H8o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.160.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:a1:ba:85:f0:e9:16:27:53:76:0a:75:41:16:07:bf:92:b8:
e3:2d:f5:4b:40:48:f8:5b:46:24:2a:a3:47:c9:8b:dc:b4:b4:
ec:7d:3a:be:79:d1:9b:61:c3:f3:a7:90:b6:8d:75:7b:d0:71:
73:58:76:a2:85:11:cb:21:77:51:71:57:ea:16:7c:bd:d2:2e:
f1:89:e0:44:53:6a:7b:ff:e0:59:b4:a0:af:fe:1c:26:6d:38:
17:40:45:a0:97:bc:92:7d:2a:68:b8:da:bc:7e:f7:62:96:44:
cb:8b:74:e0:23:36:b2:8b:74:0d:8c:13:28:35:54:29:35:e6:
e3:a2:51:04:dc:f1:3f:46:b8:77:05:5c:ad:74:b6:72:e9:3d:
43:fb:65:00:a7:71:6d:38:11:43:5a:03:ce:8e:c2:9e:e8:02:
13:e5:f9:3b:13:d0:ed:9d:49:1c:59:2f:bf:e1:06:28:49:8d:
c2:3e:88:33:b6:5b:12:cf:cb:b1:41:de:09:dd:ec:16:9d:90:
a8:ad:e1:01:26:06:3a:28:a5:d6:cc:c2:58:ec:01:5d:45:95:
15:f7:df:75:aa:11:a5:33:0e:b6:af:91:8b:47:2a:61:d6:3c:
71:eb:12:05:74:f0:69:20:b5:f1:b4:2f:61:6a:40:ff:c2:9a:
48:1c:0f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:57 2024 by rpki-client on console-ams.rpki-client.org