Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l9NLXQZr4d0EHs3dall9qEwPreM.cer
File: l9NLXQZr4d0EHs3dall9qEwPreM.cer (raw, json)
Hash identifier: 6uxtmv2CGRH/zZrq6741NG8DcB2grc8VJsk9aIP1E/I=
Subject key identifier: 97:D3:4B:5D:06:6B:E1:DD:04:1E:CD:DD:6A:59:7D:A8:4C:0F:AD:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A88D774138
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/d1cc24-a999-40f7-bfc1-7a1e90601167/1/l9NLXQZr4d0EHs3dall9qEwPreM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/d1cc24-a999-40f7-bfc1-7a1e90601167/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:00:54 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 195.158.248.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723927908664 (0xa88d774138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:00:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97d34b5d066be1dd041ecddd6a597da84c0fade3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:0c:e4:74:e9:b4:79:34:b0:90:46:17:9e:
6e:17:48:b8:29:ff:00:ba:5f:39:8c:b1:6e:9a:69:
27:29:9e:d5:9d:db:dd:f4:92:e6:f0:4c:b2:12:56:
09:ff:3a:ae:80:24:08:ae:16:41:06:a5:3f:dd:e7:
0c:bb:42:ec:a7:a8:ea:dd:21:60:27:0c:74:77:da:
34:77:c9:e3:ca:6d:d1:32:dd:37:22:2b:17:6b:d8:
cf:cd:3c:f0:a8:23:b1:82:65:d7:13:5c:a1:d6:8b:
fb:c0:86:27:d8:79:11:57:06:22:bd:b6:b9:d5:13:
cb:19:9f:b8:81:37:06:3f:ec:ce:8e:37:90:c9:49:
2d:a3:50:af:01:d9:4f:38:df:49:83:2c:ce:e1:c3:
df:41:9d:b8:17:d5:ac:bf:30:54:5a:e0:c9:8a:ae:
b4:31:27:a8:c8:9b:3e:50:9b:c7:31:73:97:29:2b:
2a:10:1a:4e:fc:0d:d5:aa:de:6e:e3:39:52:1b:e0:
b5:38:ac:ff:56:4f:32:70:03:ab:a7:fb:77:0a:31:
3e:3d:bc:56:a5:b8:10:8d:e0:ed:01:66:7c:4e:59:
0d:33:fc:a8:b9:6d:98:3c:cb:c5:71:be:3e:46:3f:
84:87:d1:ea:e1:1e:f9:b4:12:fb:3e:82:94:89:33:
cf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D3:4B:5D:06:6B:E1:DD:04:1E:CD:DD:6A:59:7D:A8:4C:0F:AD:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d1cc24-a999-40f7-bfc1-7a1e90601167/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d1cc24-a999-40f7-bfc1-7a1e90601167/1/l9NLXQZr4d0EHs3dall9qEwPreM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.158.248.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:bb:18:ff:33:f3:3d:3f:15:63:47:ba:03:b4:7e:33:e7:5f:
93:79:8f:f6:64:91:54:4f:86:cc:b9:bb:1c:b2:ed:ab:23:c1:
ab:f3:a8:82:e8:97:17:c6:ed:4e:e2:80:18:42:ff:e2:5c:47:
a2:df:3c:8d:57:ea:7f:48:d7:ff:f5:89:e0:f2:c1:8b:0b:08:
90:2d:8a:57:37:4f:63:b0:f3:db:a8:9e:7c:af:af:e2:c4:8a:
4f:1d:9d:c4:42:55:ce:d2:b0:f9:80:74:e5:d3:3c:9d:24:74:
64:ba:43:52:fa:a6:6e:93:e5:c8:49:33:88:dc:a6:f9:90:9d:
37:fc:ab:7b:19:95:a0:03:64:95:a3:df:34:37:d1:86:07:94:
f9:c2:51:35:ff:18:6b:dd:5a:7a:b5:65:e9:55:09:b4:4b:19:
b3:f7:e7:3a:30:18:2a:92:39:51:ef:51:a5:97:bf:6c:48:56:
28:b4:b1:82:62:ec:0b:de:13:a8:53:24:7e:a3:24:a7:56:9d:
59:be:0d:3a:fe:aa:aa:78:1e:68:11:c7:a3:43:7c:71:b6:31:
10:b7:bc:dc:99:05:82:9a:af:ef:27:6f:34:c4:45:f4:1e:eb:
01:04:93:f0:a0:c9:31:14:7d:18:cc:13:99:e0:8c:dc:7e:0d:
30:65:e6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:00 2024 by rpki-client on console-ams.rpki-client.org