Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n5cOpfiJLrYn7GyJfwhyHbez6Pk.cer
File: n5cOpfiJLrYn7GyJfwhyHbez6Pk.cer (raw, json)
Hash identifier: R8cRvG+2Ks1tawu0ZVZ10KVZsceZIxCt30XzcFBNAco=
Subject key identifier: 9F:97:0E:A5:F8:89:2E:B6:27:EC:6C:89:7F:08:72:1D:B7:B3:E8:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A021349A55
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/0e7200-813a-4f21-bcc4-b7d3849bb26f/1/n5cOpfiJLrYn7GyJfwhyHbez6Pk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/0e7200-813a-4f21-bcc4-b7d3849bb26f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 06:54:51 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.221.237.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 687751862869 (0xa021349a55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:54:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f970ea5f8892eb627ec6c897f08721db7b3e8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:28:bf:4c:23:60:be:90:de:54:6c:70:5c:cb:
41:9c:63:79:63:7a:be:88:f5:17:5a:83:2f:70:31:
0c:1d:9a:79:20:04:7c:a5:ed:ce:5d:a5:ed:39:43:
e1:dd:15:c0:8d:e7:7d:2e:2a:4d:8f:5f:c3:ce:d6:
70:d9:60:e5:d8:32:c7:5b:90:43:8d:33:76:c7:25:
43:72:68:8b:0b:01:59:b9:07:c4:d0:0d:26:3a:b7:
1d:28:cf:4d:b8:e0:df:41:fd:30:9e:3b:43:fc:91:
05:d6:e7:34:53:22:00:39:73:e0:4c:96:2d:e2:9e:
8a:56:b4:e0:b7:a7:02:3e:3d:d1:f5:18:f3:ba:78:
18:9e:cc:ef:17:93:a9:70:40:1a:16:6f:4a:63:83:
e8:b8:59:e3:30:99:0a:41:5f:09:01:b2:f5:a2:36:
cb:4a:ae:fe:ea:bc:35:d9:8b:04:58:8b:a1:a0:de:
7f:dd:a4:8c:a1:d0:61:16:0d:ae:09:5f:81:20:c6:
be:28:18:b5:ac:05:9b:74:12:7c:82:fc:60:6f:6e:
86:a2:0f:81:ec:bf:37:45:2a:a2:2c:f4:59:59:09:
f1:96:a5:2b:dc:da:aa:21:60:ea:69:71:a5:0b:87:
9a:d8:b6:65:84:48:80:db:ec:46:bf:e0:d9:94:f4:
4d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:97:0E:A5:F8:89:2E:B6:27:EC:6C:89:7F:08:72:1D:B7:B3:E8:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0e7200-813a-4f21-bcc4-b7d3849bb26f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0e7200-813a-4f21-bcc4-b7d3849bb26f/1/n5cOpfiJLrYn7GyJfwhyHbez6Pk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.237.0/24
Signature Algorithm: sha256WithRSAEncryption
05:fe:6d:3e:67:22:ed:d7:ae:39:e3:0c:44:b1:ac:1c:9c:34:
9e:a9:bd:ca:32:b3:fc:60:17:23:15:2c:e4:99:4f:5b:7e:2d:
78:bc:e4:1d:2c:2d:a4:f9:29:be:dd:3c:be:bb:70:9e:e2:a7:
60:9f:52:4f:31:99:60:3f:8a:18:be:12:e0:23:d8:74:3c:48:
ea:c9:84:e9:b6:48:34:70:f4:b2:ed:e6:65:9b:b5:44:62:82:
55:07:63:ea:36:b8:97:d9:0f:22:d8:61:49:54:0e:8f:2f:e8:
01:f8:e5:5e:aa:56:f8:fc:51:31:50:98:ba:f0:b5:26:02:6b:
fd:24:21:81:2b:90:41:02:90:82:1a:bb:cb:22:79:94:34:c2:
a4:02:27:9a:35:fe:3f:4a:28:f4:ca:ad:7e:ef:6d:fb:f9:6b:
6e:a5:38:b7:6e:7f:50:9d:96:18:70:99:96:82:56:89:48:65:
79:50:e8:37:79:f8:f2:89:bd:7e:da:49:4b:a5:43:13:02:e0:
ff:07:b8:f8:65:8b:e2:43:46:e0:33:93:7e:f0:56:e1:3b:cd:
7e:d2:f6:a9:3d:61:58:a0:90:b4:e9:98:75:92:d4:1f:bc:38:
54:e1:7a:75:f5:0d:93:63:af:f6:10:e7:01:42:29:78:99:07:
06:00:95:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:23 2024 by rpki-client on console-fra.rpki-client.org