Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lHucnRwb68omBTI5RsgJiHvpCHE.cer
File: lHucnRwb68omBTI5RsgJiHvpCHE.cer (raw, json)
Hash identifier: TPuyQwq1vc3yS1ARFHCzF/xxP02Plv5mtCCU02yRm0I=
Subject key identifier: 94:7B:9C:9D:1C:1B:EB:CA:26:05:32:39:46:C8:09:88:7B:E9:08:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 98CF42CC27
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/3547ff-202c-492f-9699-b27c80107861/1/lHucnRwb68omBTI5RsgJiHvpCHE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/3547ff-202c-492f-9699-b27c80107861/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:50:29 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.148.252.0/23
IP: 193.149.2.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656312290343 (0x98cf42cc27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:50:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=947b9c9d1c1bebca2605323946c809887be90871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fa:ed:09:2c:59:c8:11:d2:96:bd:8d:26:e7:
bf:9c:14:c1:fe:d6:1f:24:75:11:f8:8f:9e:be:5d:
17:72:58:64:11:0a:d2:c5:48:ea:f3:50:16:bf:0b:
c9:9f:ff:a8:2f:d8:96:d4:ef:e7:4d:1c:7b:b0:df:
6a:32:f0:6d:5f:cf:d8:c9:42:e2:81:a9:29:33:18:
cc:cf:df:01:2f:49:e1:77:f0:87:ba:53:80:c6:fc:
4c:19:c0:c7:c9:7c:68:27:dd:32:04:51:78:f2:4e:
57:47:11:a2:2c:f6:e0:8f:e9:8d:34:f7:eb:de:be:
45:65:99:22:58:cd:61:46:18:ca:0c:ce:a1:23:bb:
ab:12:f5:66:1c:85:86:c9:d5:af:ba:40:37:dc:8f:
ac:8a:ec:59:a0:c7:3c:68:6a:1f:0d:fd:5c:bb:30:
41:04:16:7f:f9:13:85:7b:86:45:64:7a:3f:55:ce:
25:5b:8f:2e:b7:d0:2c:e2:73:a4:98:5a:6b:64:13:
31:33:67:a6:40:d1:e9:ca:7f:81:5b:14:57:83:61:
11:1a:de:04:30:11:4d:82:9c:10:db:6d:33:8b:5b:
16:7d:13:07:c9:c8:1b:29:d0:28:91:b5:8e:04:c5:
4c:6b:3c:c3:08:c4:a8:dd:19:f4:45:f1:7a:c9:7d:
ef:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7B:9C:9D:1C:1B:EB:CA:26:05:32:39:46:C8:09:88:7B:E9:08:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3547ff-202c-492f-9699-b27c80107861/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3547ff-202c-492f-9699-b27c80107861/1/lHucnRwb68omBTI5RsgJiHvpCHE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.252.0/23
193.149.2.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:0f:d7:81:27:eb:a3:8f:0d:80:fe:3f:29:7c:2f:06:38:cf:
a7:54:b3:1b:63:41:cd:4d:5e:1d:ea:90:ef:2f:44:fa:91:29:
b6:57:f1:02:6e:41:78:98:9e:ec:e8:4d:6f:99:82:08:59:d6:
41:6c:68:92:60:36:a8:2b:6c:25:d8:e7:bb:a5:91:df:58:2a:
02:e1:a0:29:a0:2f:2b:49:2c:05:fd:ef:db:27:ec:03:33:f3:
0f:bf:d7:df:cd:3c:a6:07:f8:76:47:b1:df:36:59:f8:12:bf:
64:1e:39:64:a2:9e:29:74:1d:41:2e:f7:52:07:ea:05:0c:40:
09:b4:e1:f4:34:c3:31:c9:50:b7:be:e9:4a:43:d8:19:16:9c:
44:fc:38:50:51:d1:26:33:20:c5:98:45:0b:48:06:2e:a8:08:
09:77:51:55:32:71:b7:f8:61:10:3a:24:b3:c9:e1:00:9c:8f:
12:7a:01:15:47:87:49:85:b7:28:3d:e0:31:b6:86:ff:c4:51:
67:3f:0b:28:8a:9f:ef:3d:76:7e:21:8f:c5:fe:ab:71:b7:90:
08:ca:24:0a:55:1e:57:07:2f:f9:af:23:b1:43:7f:70:25:6e:
4b:e2:20:8d:3e:22:f1:5b:3c:e5:84:34:0c:12:77:2a:ed:26:
ef:b6:b5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:03 2024 by rpki-client on console-ams.rpki-client.org