Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nDeABLLYUP5Jo1VZ5Aq_Ca3uQC4.cer
File: nDeABLLYUP5Jo1VZ5Aq_Ca3uQC4.cer (raw, json)
Hash identifier: PUXvHIWxsKCaV2UPUCLSSCZk+3ExTLbWDiDTMEYdyrY=
Subject key identifier: 9C:37:80:04:B2:D8:50:FE:49:A3:55:59:E4:0A:BF:09:AD:EE:40:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A724F8D734
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/85e970-8a63-47d5-a2ff-994fb6f53b58/1/nDeABLLYUP5Jo1VZ5Aq_Ca3uQC4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/85e970-8a63-47d5-a2ff-994fb6f53b58/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:56:33 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.144.196.0/22
IP: 2a0f:d440::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 717879826228 (0xa724f8d734)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:56:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c378004b2d850fe49a35559e40abf09adee402e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:62:62:a9:24:90:d9:85:bb:39:7d:dd:6b:31:
f4:ae:4a:0b:e0:13:98:84:72:8c:9a:f2:12:aa:e1:
6f:04:02:8a:7b:f3:46:4c:41:ef:38:3e:c5:af:90:
12:1d:97:0e:11:c9:47:17:a3:ce:ec:20:ba:dd:36:
56:2e:f7:c5:83:41:86:55:b2:f3:f0:b5:2f:d6:70:
6a:82:63:e5:8a:98:f3:2d:d2:af:48:5d:e6:b9:9f:
da:f3:8a:09:a5:04:79:8c:b4:40:a8:8f:32:25:12:
c7:f9:15:de:30:ab:1b:a0:80:60:fe:87:4e:8e:18:
bd:11:e5:aa:af:9b:da:73:31:af:a7:eb:23:61:ab:
06:f1:28:98:e5:19:0b:49:9e:16:df:77:8c:82:09:
56:21:a9:47:5e:d3:ff:c0:82:5f:f1:12:4a:64:b4:
ac:7d:ec:7d:ca:dd:67:47:ce:3e:f5:59:80:d0:72:
1a:1a:f1:b0:82:6d:cf:a4:dd:bd:ec:6a:f8:c5:cd:
16:69:fa:b7:2f:26:12:4a:c1:47:5a:bf:73:c3:df:
dc:71:a2:07:96:70:cd:43:f6:b6:cc:34:ef:10:3b:
08:9a:d2:82:29:60:83:13:64:f0:64:dc:20:13:d0:
8b:ec:7a:02:bd:de:2b:59:c4:0d:bd:f9:2e:27:de:
3d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:37:80:04:B2:D8:50:FE:49:A3:55:59:E4:0A:BF:09:AD:EE:40:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/85e970-8a63-47d5-a2ff-994fb6f53b58/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/85e970-8a63-47d5-a2ff-994fb6f53b58/1/nDeABLLYUP5Jo1VZ5Aq_Ca3uQC4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.196.0/22
IPv6:
2a0f:d440::/29
Signature Algorithm: sha256WithRSAEncryption
8a:ad:99:d6:fa:d2:9e:df:6a:c8:23:7b:03:3a:fd:62:8d:6b:
f9:a2:97:62:b4:49:9f:7b:e2:87:2b:35:4b:71:5d:72:69:f3:
e1:51:91:de:ec:05:74:11:e0:b1:f0:39:19:cd:cc:fb:22:2b:
79:4a:74:72:ea:21:64:62:e6:6d:6c:34:e6:27:b7:f1:6b:c2:
8d:4a:6b:49:68:52:7c:2e:f9:f7:aa:3e:36:a9:e2:31:95:a1:
c4:b9:64:0a:19:68:5e:42:6d:88:9c:f1:9f:47:06:c8:da:c0:
b1:a9:1a:87:06:eb:32:7c:4a:b5:70:15:b7:64:d0:35:07:9e:
64:c5:49:02:1c:d0:9f:7d:0e:f5:ce:50:8f:fc:63:fa:40:ef:
e0:c4:db:cc:8c:e3:46:12:75:75:d8:b4:0b:9c:8f:e3:ca:57:
8e:12:ff:a5:97:56:3f:ec:28:dc:d8:f2:ae:f2:cd:52:d0:8b:
dd:db:77:3f:4a:1f:5c:67:a0:36:cd:44:2e:ff:ec:3a:e7:92:
8b:03:c3:8d:e2:7c:e4:ba:c0:ca:c1:5b:ce:df:36:8d:6e:31:
3b:d0:19:3e:88:de:ec:8a:ba:2d:b3:f1:c0:45:1c:1d:0d:ce:
e0:42:98:01:9a:56:52:81:56:54:3c:c5:67:9f:fb:67:f8:06:
7c:e1:0d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:30 2024 by rpki-client on console-ams.rpki-client.org