Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lsE5kO_a65htmv2oLF386CK0-TA.cer
File: lsE5kO_a65htmv2oLF386CK0-TA.cer (raw, json)
Hash identifier: ElYtEEmy6zmX41U1NzTOEOKfcLqs/XX6HFRFvfSByUc=
Subject key identifier: 96:C1:39:90:EF:DA:EB:98:6D:9A:FD:A8:2C:5D:FC:E8:22:B4:F9:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9C9ED464F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/843281-3712-419b-8e15-9ae9e3c7439a/1/lsE5kO_a65htmv2oLF386CK0-TA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/843281-3712-419b-8e15-9ae9e3c7439a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:53:36 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 195.8.104.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672679617777 (0x9c9ed464f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:53:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96c13990efdaeb986d9afda82c5dfce822b4f930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:03:9f:02:3b:d7:3f:01:4b:e1:17:58:99:ad:
c2:85:de:b8:46:f0:79:c4:28:9a:22:f9:3d:ae:e6:
67:7e:a0:65:5d:a3:e6:19:05:b5:a0:0d:af:2b:83:
63:13:17:6f:b1:b2:15:ea:0e:f7:ce:3b:ca:57:f3:
19:24:61:5b:b4:a7:cd:81:a0:12:b0:a1:31:69:5c:
25:37:88:79:58:76:23:68:ad:ed:5e:b1:25:e2:17:
7f:8c:a5:78:99:02:83:30:57:ed:44:48:35:e5:75:
2c:19:45:37:d0:31:db:eb:cd:69:29:d2:99:da:c8:
0f:bc:98:e8:a6:ef:de:50:72:05:cb:c5:55:6e:71:
ab:98:5f:f8:c3:0c:b3:79:2e:0b:f9:8e:38:0d:41:
5a:fd:e7:8a:d7:b4:14:2f:e2:e3:b2:26:7c:00:d7:
7e:41:05:9e:a3:e1:75:fa:fc:d5:0b:de:f8:05:32:
2e:cc:da:8d:7b:b5:0c:5e:bd:5c:df:7d:09:1b:21:
43:b8:e9:7d:05:db:4b:b6:c4:7c:b8:37:73:24:e1:
be:24:f6:fa:b5:bf:d8:20:62:45:b6:3d:f7:81:40:
df:90:90:53:ac:19:a1:f3:3d:72:2a:45:83:83:2d:
de:f0:6c:b2:76:5a:3c:91:9b:18:12:ec:58:35:7f:
dc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C1:39:90:EF:DA:EB:98:6D:9A:FD:A8:2C:5D:FC:E8:22:B4:F9:30
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/843281-3712-419b-8e15-9ae9e3c7439a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/843281-3712-419b-8e15-9ae9e3c7439a/1/lsE5kO_a65htmv2oLF386CK0-TA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.104.0/24
Signature Algorithm: sha256WithRSAEncryption
29:89:a1:0b:e3:51:b4:75:9c:2c:58:73:92:d2:90:ee:93:c7:
57:96:9b:c2:81:ac:a3:39:d1:05:72:51:6c:6e:44:58:dd:bc:
b9:63:ce:e6:b5:11:89:52:85:12:bb:12:f6:a9:91:03:f1:5c:
07:45:4b:32:1c:fa:ce:ee:9b:4f:c4:29:7e:8b:d6:95:0e:14:
2d:65:bd:9e:2c:5c:17:96:03:1c:e5:0b:ac:36:26:75:f3:3a:
9e:88:11:cf:d3:db:a6:80:6a:9c:a8:14:b1:27:b5:81:c7:32:
3b:2b:08:0c:d3:75:48:60:49:ed:d3:c0:bb:fd:1d:2e:25:a3:
41:f8:ec:c3:3b:98:50:3d:bc:76:a2:e1:45:ac:fb:b1:c6:6d:
a9:96:c8:93:c5:2f:a8:4c:6f:d0:bb:ac:89:02:11:2a:e1:d4:
ad:1d:e4:e0:09:f8:f4:a8:73:23:99:09:0b:ea:a8:e1:ac:aa:
23:75:c4:2c:9b:a5:f1:77:9a:fa:92:c0:ab:11:ef:6d:04:b6:
95:7e:b4:fb:46:fb:d1:d9:5e:e9:7e:9a:68:b1:52:b6:1a:75:
d8:54:0d:43:7b:39:29:0f:d5:d6:93:28:02:f9:58:98:af:6b:
cb:df:47:45:64:4f:04:5f:5f:81:8b:0c:ac:38:0e:d9:3a:c0:
f1:6c:1b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:11 2024 by rpki-client on console-ams.rpki-client.org