Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lILuSEtLzVsFPhe9H3O87iP0M5I.cer
File: lILuSEtLzVsFPhe9H3O87iP0M5I.cer (raw, json)
Hash identifier: a5p1K0vGMYE9vH3YIJ9GiK3juNtm3Uh7KoPi9hLgG3M=
Subject key identifier: 94:82:EE:48:4B:4B:CD:5B:05:3E:17:BD:1F:73:BC:EE:23:F4:33:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01849ADDBEE59FB6068DEF96FDA04486718D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/ba6c2b-c22f-4151-b07b-4995fb9b1e59/1/lILuSEtLzVsFPhe9H3O87iP0M5I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/ba6c2b-c22f-4151-b07b-4995fb9b1e59/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 21 Nov 2022 15:45:34 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 5.182.72.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9a:dd:be:e5:9f:b6:06:8d:ef:96:fd:a0:44:86:71:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 21 15:45:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9482ee484b4bcd5b053e17bd1f73bcee23f43392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bc:ae:77:1d:71:50:cc:10:83:63:4e:45:8c:
7b:a2:44:27:ef:cb:6b:b5:dc:07:59:c3:d1:53:61:
0e:b8:94:36:83:3e:38:a9:63:a7:6b:c4:ab:93:4a:
b4:a9:9e:6b:d2:40:93:e0:83:62:ca:40:0f:2f:3f:
1b:f9:db:32:e1:25:04:9e:5c:19:f9:41:87:1e:42:
eb:54:b9:56:e1:00:46:7d:e7:d1:4c:88:e1:f6:70:
5a:43:3f:7b:30:60:34:1d:c5:4e:9c:2c:12:9b:cb:
ac:a8:3b:66:2f:bc:15:a8:ef:e5:15:54:e6:05:0c:
bf:24:80:86:2f:47:db:cf:29:40:88:04:c3:16:8f:
65:d9:68:51:7c:57:34:76:15:b8:f8:6b:80:b0:47:
67:1d:7c:88:8f:89:3a:6f:81:22:bc:a2:83:d5:ec:
d5:e5:04:0a:9b:2b:67:d7:7c:38:43:57:7a:28:18:
cf:64:7f:9b:5f:45:14:88:00:b8:4f:5c:38:f5:d9:
7f:1f:83:51:25:11:3e:ab:66:f2:e7:e3:17:48:09:
08:8b:87:fb:67:2a:7d:80:91:29:87:aa:d9:5b:3e:
36:bd:70:f6:39:3e:9a:c0:72:d5:61:a3:ec:1d:3b:
f3:80:da:e8:77:6d:a9:01:4e:a6:ad:07:00:9f:a1:
bd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:82:EE:48:4B:4B:CD:5B:05:3E:17:BD:1F:73:BC:EE:23:F4:33:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/ba6c2b-c22f-4151-b07b-4995fb9b1e59/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/ba6c2b-c22f-4151-b07b-4995fb9b1e59/1/lILuSEtLzVsFPhe9H3O87iP0M5I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.72.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:2a:5a:b6:47:bd:57:de:0c:ce:f1:48:a6:52:8a:2b:a1:de:
f8:58:74:a8:82:75:6d:ab:c4:70:73:a9:d7:3e:1f:d3:ad:c8:
dc:27:10:da:49:53:6a:6b:b2:b3:99:44:ea:6f:84:f6:5e:b1:
f6:6d:20:a0:e6:97:84:97:c9:05:68:87:11:a1:7f:66:2d:0b:
2a:0e:53:63:b5:8e:7f:a2:17:9b:cb:41:6e:05:25:d7:3d:4d:
3a:1f:15:4d:df:5e:fc:b9:b3:49:db:0c:18:24:df:d5:33:8e:
c2:bd:91:72:6e:cf:ef:6d:73:8a:c5:21:b6:33:d6:4b:1a:66:
bb:1d:65:52:fd:75:9e:d3:7c:17:f0:28:b8:a9:52:7c:f9:fb:
4a:e8:fe:26:6b:87:1c:50:e2:51:71:16:e3:20:93:cf:10:e9:
57:57:ec:d9:85:f1:c4:47:3c:e1:7b:bd:8b:26:26:98:b8:6b:
c5:01:71:1e:bf:8e:1b:0a:3e:05:88:b8:10:2d:5c:16:5b:b1:
91:cf:de:86:39:27:9e:27:67:31:1a:d8:31:22:d1:e8:2f:a8:
02:27:65:86:16:78:4d:55:9c:c6:2d:ff:3c:66:c5:32:21:35:
3d:7f:ba:b3:07:42:36:27:8a:f1:66:be:5e:3a:f8:00:24:0c:
04:77:71:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:03 2024 by rpki-client on console-ams.rpki-client.org