Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lSNBQ5NVofaeOuBlxDcm0e_0eW0.cer
File: lSNBQ5NVofaeOuBlxDcm0e_0eW0.cer (raw, json)
Hash identifier: 4DbMElHmmeGqDst5jx+tfE3ygbig1uzP+k5ow7kqcKk=
Subject key identifier: 95:23:41:43:93:55:A1:F6:9E:3A:E0:65:C4:37:26:D1:EF:F4:79:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A9748DE65D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/cd9945-b467-466b-b83e-9aa75fb6bb04/1/lSNBQ5NVofaeOuBlxDcm0e_0eW0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/cd9945-b467-466b-b83e-9aa75fb6bb04/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:57:31 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 31.40.204.0/22
IP: 2a09:9200::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 727804929629 (0xa9748de65d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:57:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=952341439355a1f69e3ae065c43726d1eff4796d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:73:34:1c:d1:0c:20:e5:29:54:7a:a4:71:2f:
04:38:30:1b:3f:61:92:69:7a:55:7a:6a:46:c6:1d:
28:cf:01:ee:9a:d1:6e:a7:2e:f8:75:03:38:a0:aa:
50:9a:6e:1e:ec:1f:28:27:73:19:db:49:47:c7:9d:
c7:8b:11:35:30:e8:75:68:6e:52:08:b2:1d:55:5e:
1e:f7:e9:b5:cf:9b:4a:cf:5f:07:23:39:76:b4:fb:
1c:6e:2f:14:d7:1b:bb:11:7f:38:e1:b9:43:4a:b9:
fb:13:3c:32:46:78:6f:4a:22:79:a7:46:a6:cf:88:
06:a8:5e:dd:ab:10:6c:4e:c4:bf:76:24:38:39:87:
05:c1:59:82:72:d6:b2:10:e1:bb:bd:7d:33:57:ba:
1e:a7:30:bc:b0:16:97:2a:be:96:ac:50:a3:36:b5:
af:61:ce:40:b6:62:e0:3e:16:c9:f5:d5:8b:34:d8:
ff:12:b0:0b:81:a8:7f:b8:dd:84:b8:fa:66:51:f7:
2a:91:0b:7a:53:a2:5e:15:d3:28:ce:dd:a3:41:1f:
bf:a7:95:9e:66:bf:52:14:88:a4:86:26:5f:d7:08:
49:ac:3d:f1:ba:8e:9b:4f:03:27:b2:17:ee:90:32:
fa:35:49:67:f4:30:fa:dd:33:8d:f0:15:30:fc:62:
4f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:23:41:43:93:55:A1:F6:9E:3A:E0:65:C4:37:26:D1:EF:F4:79:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cd9945-b467-466b-b83e-9aa75fb6bb04/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cd9945-b467-466b-b83e-9aa75fb6bb04/1/lSNBQ5NVofaeOuBlxDcm0e_0eW0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.204.0/22
IPv6:
2a09:9200::/29
Signature Algorithm: sha256WithRSAEncryption
1f:83:3d:31:9a:33:63:db:57:95:68:a3:52:73:f0:2a:13:83:
6a:76:f5:49:62:a7:b6:c7:17:7b:87:ca:29:7e:ce:ef:bb:08:
5e:17:89:38:ef:7a:de:b4:58:65:4b:c0:66:9e:e1:f4:3e:29:
7b:f3:59:e9:88:42:53:ed:96:4d:b2:6c:4e:95:42:5d:62:9d:
72:a4:a6:29:06:83:61:d1:54:7f:fa:43:39:84:a1:2a:47:15:
72:76:ed:74:b0:91:00:72:8d:b2:ca:03:76:a1:ba:6b:3c:3e:
e5:5b:a3:6a:0a:1b:dc:1a:f2:d4:c5:64:3a:dc:3b:7c:2e:9b:
94:91:20:ba:ea:a0:34:3d:06:dc:01:5f:de:ff:89:02:a2:af:
86:71:5b:28:c7:ab:68:1d:af:77:40:8f:49:f0:9e:62:7b:ba:
55:ba:fc:b2:b9:d3:c6:1c:6e:71:4d:9a:30:50:67:8f:ea:27:
14:1f:ca:e0:62:d9:1c:0d:8c:8c:e2:c4:38:20:22:c1:4d:fc:
9e:e8:d3:ba:4e:f3:59:aa:02:a3:86:ff:19:c2:97:4b:3f:46:
0c:c8:95:40:31:25:aa:3b:f6:61:9a:6c:f8:6e:c3:5e:02:22:
5d:34:54:67:68:38:98:bf:eb:29:86:0e:1a:f8:b1:f5:ed:ec:
23:c2:69:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:07 2024 by rpki-client on console-fra.rpki-client.org