Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mjGR-i-CPjlYTX0_U_EC2M45VDM.cer
File: mjGR-i-CPjlYTX0_U_EC2M45VDM.cer (raw, json)
Hash identifier: KauxfwXV+LSMn2/dpbnrzgb/fjMOPCC5vP4E9TnftUU=
Subject key identifier: 9A:31:91:FA:2F:82:3E:39:58:4D:7D:3F:53:F1:02:D8:CE:39:54:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0184574C5A11A2F2689DDA0BA5176385FFB3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/3fb180-e169-463d-8df6-327313a32bda/1/mjGR-i-CPjlYTX0_U_EC2M45VDM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/3fb180-e169-463d-8df6-327313a32bda/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 08 Nov 2022 12:52:12 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.211.56.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:57:4c:5a:11:a2:f2:68:9d:da:0b:a5:17:63:85:ff:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 8 12:52:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a3191fa2f823e39584d7d3f53f102d8ce395433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a3:ac:0f:32:df:2d:4c:7e:99:c7:a7:c4:8a:
d3:5a:4c:0f:bb:81:33:9e:22:13:8e:16:b4:91:13:
2a:6e:34:2b:52:60:97:25:be:e4:69:d5:cb:7a:c8:
27:64:c2:a7:83:50:51:65:12:14:72:c9:7d:90:f0:
dc:9c:28:60:2b:f7:7e:15:20:d3:97:cf:8d:ba:8f:
7c:25:23:a3:1e:48:3b:52:5e:32:e6:43:ea:12:18:
56:3a:2c:bc:30:c4:b9:69:8a:a2:fc:80:25:20:0c:
f6:fa:1f:40:1d:f0:21:19:34:8a:65:f9:07:6b:78:
7d:9f:de:df:c2:48:2b:81:ae:1f:18:99:92:8b:5b:
08:a8:a4:ea:ca:54:1e:7b:2d:bb:5c:4b:9b:a8:98:
3d:f8:6b:53:b7:57:47:dc:7a:2a:39:89:1f:6e:11:
b8:8c:aa:72:1d:cc:c7:34:e3:ee:08:b8:55:81:b0:
39:17:f3:31:61:72:5c:db:a1:ed:f2:0d:1c:c3:52:
0b:7c:41:dd:4c:99:a1:aa:eb:61:f2:09:c6:c6:91:
04:43:c1:a1:2b:65:52:78:42:fe:b5:ee:23:5e:2a:
af:7a:7a:fb:d9:c4:22:e2:36:db:4e:fb:43:e5:60:
44:91:c3:c5:5f:80:3d:74:dd:29:9a:7f:2f:50:5f:
17:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:31:91:FA:2F:82:3E:39:58:4D:7D:3F:53:F1:02:D8:CE:39:54:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/3fb180-e169-463d-8df6-327313a32bda/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/3fb180-e169-463d-8df6-327313a32bda/1/mjGR-i-CPjlYTX0_U_EC2M45VDM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.56.0/22
Signature Algorithm: sha256WithRSAEncryption
42:a0:b0:62:63:04:b0:3f:71:9c:81:18:d5:ef:f4:56:bf:c4:
06:0d:cb:80:6e:c7:fe:d7:cd:ef:9e:9a:12:03:a7:e6:c0:7a:
d4:9d:5c:98:e4:62:79:b4:21:ca:a9:a5:23:00:35:f5:a9:0f:
73:4e:c0:30:d5:c4:00:d6:89:0a:68:eb:34:a8:2f:66:86:9e:
1e:f5:76:82:08:09:d7:91:db:31:f0:f1:bb:10:7c:fb:c8:fc:
8b:95:01:c0:c8:3a:27:fc:6f:13:e6:a1:d3:e0:bc:e5:9b:57:
0f:8e:9c:30:7c:22:8a:13:9c:14:5c:94:a9:17:f8:d5:64:f6:
56:a1:42:66:06:16:43:7f:a2:ac:68:55:62:c8:f8:e4:af:6f:
30:49:13:fb:f4:fc:66:e7:95:ae:9c:31:6f:63:92:27:a2:2d:
c2:7f:3d:f5:8b:f4:a5:a3:1d:a9:fb:11:d3:11:2d:78:04:60:
fd:cf:a6:61:f6:19:d8:98:73:31:d5:1c:25:81:33:2e:32:bc:
3d:6a:1e:88:3a:f6:d7:31:62:58:6e:ec:73:02:a5:03:2b:4f:
e3:b6:4b:4e:61:07:49:f8:f4:71:20:c8:7b:f2:ba:2f:9b:5a:
3d:a8:67:cc:6e:d5:c0:9d:62:9e:df:c2:2b:4b:17:f2:9a:43:
85:01:77:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:19 2024 by rpki-client on console-fra.rpki-client.org