Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mJPMbbh9ac9dAan5bPa8PIOXrYA.cer
File: mJPMbbh9ac9dAan5bPa8PIOXrYA.cer (raw, json)
Hash identifier: y1/rgaObAn6Yg7ZtfvJSMMFotIUp1m+sTn8RSxcOEHw=
Subject key identifier: 98:93:CC:6D:B8:7D:69:CF:5D:01:A9:F9:6C:F6:BC:3C:83:97:AD:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9D9387C034
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/mJPMbbh9ac9dAan5bPa8PIOXrYA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 04:51:32 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.81.240.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676785012788 (0x9d9387c034)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:51:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9893cc6db87d69cf5d01a9f96cf6bc3c8397ad80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:15:a8:7b:b2:0a:6a:23:29:54:8a:cd:dd:
d8:42:12:de:68:33:0a:73:24:40:db:31:08:3c:70:
6a:d5:ac:68:ac:df:ca:07:2e:87:b9:1c:75:de:72:
26:75:5b:3d:92:8e:2d:56:4b:ca:31:ea:1f:93:c0:
c4:49:ab:94:b6:60:d3:90:1a:fb:8a:16:59:98:5a:
61:cc:7d:9e:14:e2:dd:1c:58:d6:b1:00:a6:6d:2f:
a8:46:58:41:24:a6:9f:06:9b:47:ff:61:89:23:fc:
db:ac:32:23:53:f8:66:80:d2:29:dd:15:51:0c:b7:
a5:65:59:d3:17:61:a6:54:4d:81:22:9e:be:19:41:
db:c9:59:e2:37:27:6e:01:e1:fd:fe:a1:4b:4c:8b:
e7:96:96:b0:72:24:7b:d3:82:e4:63:12:8f:51:89:
54:83:f6:31:e1:43:0a:a5:4d:84:c4:32:30:7f:bc:
32:b2:3b:b1:74:73:88:12:be:d9:9c:ab:1a:93:91:
be:ec:1d:56:40:72:28:02:01:db:51:30:08:75:e6:
c3:b7:8e:39:01:b7:da:b2:fb:93:9c:8e:db:b7:fe:
72:a3:2b:33:29:70:ce:62:f2:07:76:60:8a:82:f9:
b2:64:07:c9:dc:72:36:49:f0:ce:f9:05:0d:1d:3b:
ba:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:93:CC:6D:B8:7D:69:CF:5D:01:A9:F9:6C:F6:BC:3C:83:97:AD:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/mJPMbbh9ac9dAan5bPa8PIOXrYA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.240.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:19:a7:e0:1a:e7:e6:19:3c:c3:2b:a1:d9:04:37:7f:ec:31:
9b:9b:cc:aa:d8:a4:ee:ec:1f:cd:b1:68:69:30:1b:f6:96:a9:
cf:e2:b2:b2:56:95:62:4f:f5:f2:f2:5e:30:19:66:e9:e9:31:
bf:e8:36:8e:40:28:0a:98:5f:a8:98:26:0a:d5:90:2a:5b:43:
7e:53:38:ed:ed:06:2a:02:5d:05:64:31:91:b0:bd:3d:f0:ab:
33:cb:14:60:ce:89:66:14:09:c2:3d:1b:88:26:4a:20:04:b3:
c6:db:93:4a:e2:d6:19:c6:aa:6d:92:53:c6:c6:00:b4:f7:75:
a9:dc:a3:c8:71:06:83:0e:42:d4:d3:36:e0:f4:1c:ee:ac:db:
1a:39:f8:15:93:46:1b:ba:49:2a:63:3d:81:16:2a:09:73:93:
d3:42:3a:33:fd:52:61:a8:f1:ed:18:44:25:f1:1c:ea:4d:da:
f7:e2:94:3e:f5:f2:b6:ab:cb:86:6a:7f:b6:58:b8:77:03:98:
d5:ac:cc:a3:26:77:51:48:14:b3:5e:4f:f3:3c:2b:c7:0d:2a:
11:bf:d1:8d:8e:7c:95:75:4f:6a:79:2e:7f:a4:a2:0d:41:c3:
65:23:60:71:1f:9e:a4:8f:9f:99:0b:23:0b:83:da:0c:db:00:
76:14:14:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:15 2024 by rpki-client on console-ams.rpki-client.org