Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mH5-yFxzp_Jre--yqoaaLqeh0cM.cer
File: mH5-yFxzp_Jre--yqoaaLqeh0cM.cer (raw, json)
Hash identifier: cmPvAJTC2IFDnSlfFpdkbTfUf6MKE7cb14/bJpSPW5U=
Subject key identifier: 98:7E:7E:C8:5C:73:A7:F2:6B:7B:EF:B2:AA:86:9A:2E:A7:A1:D1:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856F41D9957C68D7791591B6F485D32BEC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/391a9f-db82-4bb2-aac9-7bafbfac9184/1/mH5-yFxzp_Jre--yqoaaLqeh0cM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/391a9f-db82-4bb2-aac9-7bafbfac9184/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 21:34:24 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.190.158.0/24
IP: 2a11:6580::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:41:d9:95:7c:68:d7:79:15:91:b6:f4:85:d3:2b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:34:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=987e7ec85c73a7f26b7befb2aa869a2ea7a1d1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:32:b3:10:ab:48:e4:e6:18:60:a8:8a:69:8f:
46:3e:a7:03:0c:82:bd:f5:99:ba:d9:41:b0:25:a4:
16:cc:a5:47:e9:de:74:ee:77:3a:f1:3e:ae:4f:a1:
f8:c2:37:4e:e2:51:95:5b:43:d1:74:c7:de:1a:5d:
23:40:e0:15:3e:ab:4e:0a:4e:0f:97:8e:ac:64:64:
e8:13:f2:28:24:f4:bb:c0:41:b9:3b:ab:76:fa:53:
aa:82:0f:52:a4:3d:53:36:60:1c:b1:c2:58:8d:e4:
3d:ba:c6:9c:8e:fb:49:14:59:c5:b2:a0:c0:f4:8f:
d6:53:c4:b7:bc:74:94:1b:48:82:a1:6d:f3:66:bc:
f0:75:80:b6:56:be:2c:0a:18:95:ad:a5:2b:3a:d9:
c1:48:89:6b:2d:b2:db:75:4f:2e:72:74:5b:b9:d4:
83:54:9b:aa:1c:82:91:8b:7a:e0:71:d8:5d:d6:d2:
7d:30:6b:4f:b4:d3:45:e6:85:87:8b:ce:f2:f1:56:
a3:50:33:30:56:28:52:36:80:b6:cc:26:bb:a7:fb:
a3:7e:65:7a:4e:4c:21:20:88:50:b5:1d:8d:e8:24:
9d:c8:b6:45:a2:a6:be:0d:23:c1:80:c6:87:8c:53:
67:31:ea:04:16:1a:60:87:90:53:4a:04:28:d5:d5:
87:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7E:7E:C8:5C:73:A7:F2:6B:7B:EF:B2:AA:86:9A:2E:A7:A1:D1:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/391a9f-db82-4bb2-aac9-7bafbfac9184/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/391a9f-db82-4bb2-aac9-7bafbfac9184/1/mH5-yFxzp_Jre--yqoaaLqeh0cM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.158.0/24
IPv6:
2a11:6580::/29
Signature Algorithm: sha256WithRSAEncryption
53:b7:93:28:cc:13:56:39:56:ae:d4:35:36:4f:57:ed:c0:5c:
a5:54:a3:87:dd:c9:f0:6d:29:28:57:33:82:cb:5d:55:f4:72:
03:b5:26:ea:c3:ac:7a:fc:a0:e8:44:2c:c5:de:a1:f9:31:94:
19:00:67:46:cd:8e:ae:72:e1:2e:9e:ef:6a:0e:e1:8b:09:5c:
b4:1c:ce:ea:fe:32:10:d7:44:bb:14:cc:a0:8d:1f:f9:27:25:
e6:f8:d5:f1:db:0f:ab:aa:89:b7:c3:ce:a9:92:a1:42:83:22:
e9:d9:0e:36:51:c8:8e:0d:02:9a:ed:79:ed:3a:64:1c:cd:44:
ab:ec:c2:38:4b:44:ce:d8:27:f0:23:36:1a:ca:9c:03:62:58:
d0:f1:a9:85:41:2b:fa:5b:66:5b:d2:6c:49:57:10:34:ba:83:
ce:8c:92:6a:93:bb:02:3b:f6:99:eb:62:79:ee:6a:30:bf:f1:
36:a0:bd:3d:74:0a:2a:ad:cf:5c:39:5f:70:9a:8e:4e:3f:9d:
a2:3a:d6:a5:a8:c6:fe:0a:94:9c:e6:99:2d:5b:37:ae:2d:22:
c0:5e:fb:1d:e1:05:2a:52:9a:1b:c1:58:52:93:9b:00:f7:1f:
15:45:2d:ac:6f:17:89:9a:72:1b:70:78:c2:72:2e:fb:e5:d7:
99:e4:ab:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:38:39 2025 by rpki-client