Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m5bl7Xzve1lUbwJATEV97gS_APg.cer
File: m5bl7Xzve1lUbwJATEV97gS_APg.cer (raw, json)
Hash identifier: 7so0Q8bhdfuWV+vOGqrJwezHwH96vjma5zOTwy0bJ3E=
Subject key identifier: 9B:96:E5:ED:7C:EF:7B:59:54:6F:02:40:4C:45:7D:EE:04:BF:00:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A31581FA6B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/13d7ec-cb9d-4751-9aab-66e84864b171/1/m5bl7Xzve1lUbwJATEV97gS_APg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/13d7ec-cb9d-4751-9aab-66e84864b171/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:02:09 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.154.248.0/22
IP: 2a0f:dd00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 700440509035 (0xa31581fa6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:02:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b96e5ed7cef7b59546f02404c457dee04bf00f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:93:01:4a:a7:b9:8e:88:72:ec:60:87:cc:
54:e9:83:5c:1c:0b:a2:8a:eb:44:5f:89:89:c2:ee:
62:ba:80:5e:df:f6:ca:9e:d4:ce:32:af:30:9e:2d:
73:a1:71:7d:75:97:20:43:6b:af:61:4f:5f:1b:51:
ea:05:68:14:35:78:33:60:29:87:03:d4:29:af:1f:
12:6d:a5:f9:5d:fa:60:fd:bd:51:51:0d:8d:37:d8:
67:11:b7:8e:6f:22:85:c4:bb:56:1d:da:f8:16:cf:
f7:09:73:3e:e6:5b:3f:0e:65:ad:4d:05:9f:61:fd:
46:9b:17:3f:62:c9:7f:2e:2f:24:16:7e:1c:ac:66:
cc:2f:aa:89:ad:e2:a3:4a:b8:08:55:fb:21:53:a6:
57:ac:42:f1:a2:08:b0:e7:ae:c9:a2:b4:2d:5c:9d:
aa:77:5f:80:ad:c1:d7:e9:d0:3f:64:8f:73:2a:e9:
3e:59:02:c9:2e:9d:e7:0c:94:7b:02:54:5b:82:7d:
7a:d5:53:2b:18:e4:40:95:02:f6:e9:49:a5:dc:3e:
d1:73:24:53:ac:68:05:f6:07:15:ec:d2:7f:f1:95:
ec:c8:9c:a4:63:7a:18:70:c1:64:e5:de:fd:00:6b:
42:a3:3d:c6:ed:79:dc:24:9c:8d:22:d8:30:03:b0:
f6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:96:E5:ED:7C:EF:7B:59:54:6F:02:40:4C:45:7D:EE:04:BF:00:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/13d7ec-cb9d-4751-9aab-66e84864b171/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/13d7ec-cb9d-4751-9aab-66e84864b171/1/m5bl7Xzve1lUbwJATEV97gS_APg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.248.0/22
IPv6:
2a0f:dd00::/29
Signature Algorithm: sha256WithRSAEncryption
8e:1c:53:7f:0f:75:ef:8f:3f:a3:46:75:28:ee:94:dc:cc:87:
09:3c:b3:f9:64:21:20:a4:d3:c3:46:11:cb:e4:bb:1c:83:ab:
9f:f1:1d:21:f9:e6:b8:d0:75:a0:c9:5d:65:f4:ef:3f:04:cf:
6b:9b:ec:34:98:2c:df:5c:1c:e5:c6:ba:1f:35:9d:aa:d8:d5:
a1:17:43:8f:6a:82:d1:1c:54:d6:a4:6c:84:12:5c:d3:6a:56:
d2:b9:e3:1e:82:30:32:57:4a:17:cd:d9:89:0a:ee:77:3d:f9:
a9:68:16:4c:3b:06:25:e9:e6:34:77:1e:cb:ce:bd:17:14:19:
4f:13:fa:fc:41:65:a6:06:34:cc:2d:de:0d:35:0c:ff:7e:21:
01:69:e0:31:ac:fe:58:a0:93:60:e7:27:2f:c0:9d:82:c8:f5:
13:c4:a8:e8:42:4d:62:c9:de:0b:ea:7d:6f:2a:ec:83:66:bc:
26:93:cf:ad:de:00:93:30:3a:c8:d9:78:0e:ee:01:09:14:24:
71:7e:01:69:2e:a5:54:05:d1:17:d4:17:1c:98:19:19:68:5e:
20:78:d4:6e:c3:7c:a3:3f:51:25:f7:50:29:e1:9a:b2:f7:0f:
ce:99:24:30:cb:2e:f4:b5:e5:fa:b2:ea:0b:b1:e4:7c:51:18:
97:81:2e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:13 2024 by rpki-client on console-ams.rpki-client.org