Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lhbvJyeDCdIis-yXM05Kg61Ilxs.cer
File: lhbvJyeDCdIis-yXM05Kg61Ilxs.cer (raw, json)
Hash identifier: 5nD1JCyRpKc8eWkgNkUw/7IFX8ACv18xE1dZHb4gBnk=
Subject key identifier: 96:16:EF:27:27:83:09:D2:22:B3:EC:97:33:4E:4A:83:AD:48:97:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED3A8CC53FED1A6E97A8CEB9F465D58
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/9a29bd-11c4-4838-bb3a-411f8f7be744/1/lhbvJyeDCdIis-yXM05Kg61Ilxs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/9a29bd-11c4-4838-bb3a-411f8f7be744/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:34:03 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.52.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d3:a8:cc:53:fe:d1:a6:e9:7a:8c:eb:9f:46:5d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:34:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9616ef27278309d222b3ec97334e4a83ad48971b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:4e:12:ac:55:23:33:87:ee:41:33:77:67:
fb:e5:c6:0f:cd:d6:c8:1e:f2:13:7f:19:7e:0d:fb:
ac:8f:11:4f:76:cf:fa:b6:93:47:ad:48:f3:dd:21:
cc:96:bf:5f:d8:cd:08:31:ab:c4:4d:51:61:dd:78:
7d:29:29:5e:24:ab:13:94:52:16:4f:70:8c:74:99:
4a:10:0b:7b:50:b4:b3:84:58:9a:42:b7:82:24:e1:
86:9b:f4:61:75:4b:4d:b6:db:a3:b2:4b:9e:b3:2b:
58:99:e6:e9:0a:e5:f8:5b:0c:40:9f:b3:de:1d:d3:
e1:bc:5d:47:4d:ae:ff:25:e3:d7:bf:c9:81:a9:ea:
f5:6e:5d:7f:c2:77:c6:fc:f0:9e:dc:3e:79:9d:5b:
2e:21:e6:55:5a:fa:c9:99:ed:74:7b:53:c3:7f:1f:
9f:1c:67:aa:f8:3e:0a:09:85:c3:8c:45:01:0c:ed:
e7:03:24:00:4e:a0:d0:f2:11:e2:d8:6d:75:26:6c:
99:ed:29:5e:55:46:2b:2c:00:ed:5c:e5:b4:10:d6:
f1:4f:85:24:80:d9:0c:b9:92:ba:6d:3b:ed:ab:f5:
5f:d8:1c:f4:bc:73:88:a8:9d:5f:26:b3:65:4c:d3:
02:ab:6f:bb:89:e4:6c:ec:fc:69:5e:09:4a:8c:05:
02:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:16:EF:27:27:83:09:D2:22:B3:EC:97:33:4E:4A:83:AD:48:97:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a29bd-11c4-4838-bb3a-411f8f7be744/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a29bd-11c4-4838-bb3a-411f8f7be744/1/lhbvJyeDCdIis-yXM05Kg61Ilxs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.52.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d3:9e:1c:c6:a7:64:e5:80:26:58:77:71:a7:d2:c4:b8:cb:
cf:79:42:83:fc:e3:76:ad:25:b1:27:d6:15:87:4c:15:b4:2f:
ef:8d:d3:05:38:e2:87:aa:1f:42:61:fa:86:7f:73:1c:23:d8:
77:47:17:1c:58:a9:36:e7:55:b1:1e:d0:4d:c6:06:62:af:59:
be:e6:b8:20:33:e5:8f:a8:e5:ba:99:a5:59:bd:ff:13:15:d0:
6c:7a:37:15:14:f6:6d:69:07:53:b8:6f:4d:69:28:46:c2:a6:
af:80:bb:dc:59:2f:57:44:a7:18:1c:a6:ae:90:23:ee:3e:a0:
66:08:94:be:84:3a:5f:f7:c5:c5:e8:93:a6:67:49:1f:60:2e:
54:2f:a4:87:a9:dd:90:dd:b1:81:0c:af:be:13:4e:ff:bd:7d:
84:d6:42:0b:f8:0d:a6:d7:de:8a:c6:e9:da:8b:36:09:74:d7:
12:8e:ab:50:f5:b2:e7:cd:2e:92:61:74:7d:5b:83:a0:76:dd:
10:53:ac:54:56:2f:59:31:8e:57:84:c0:fe:5d:d6:24:00:e8:
c7:0f:90:78:c5:82:9c:17:89:7e:72:c0:3c:a4:6b:5a:8f:ce:
71:ec:d3:d7:6e:4a:b6:dc:9b:51:29:9b:cc:07:c3:a8:85:43:
7c:5f:d9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:46 2025 by rpki-client