Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nZGpaaubnuLWpcZOiyn0rjuy6pE.cer
File: nZGpaaubnuLWpcZOiyn0rjuy6pE.cer (raw, json)
Hash identifier: RPmns5suhZG23jbRubfmY8K4Lu7QU5P9PSqnGMUj+/0=
Subject key identifier: 9D:91:A9:69:AB:9B:9E:E2:D6:A5:C6:4E:8B:29:F4:AE:3B:B2:EA:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9A39C3EE53
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/2acf67-0ec0-48d2-bad7-77d5ca51aaf2/1/nZGpaaubnuLWpcZOiyn0rjuy6pE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/2acf67-0ec0-48d2-bad7-77d5ca51aaf2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:53:06 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 212.103.36.0/22
IP: 2a09:2400::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662394105427 (0x9a39c3ee53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:53:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d91a969ab9b9ee2d6a5c64e8b29f4ae3bb2ea91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:82:d2:81:80:d9:5b:6d:d7:9e:de:be:47:
f5:d0:2b:b5:1b:c7:3c:ba:2a:40:e7:00:e4:46:9c:
8d:b5:51:f7:80:aa:7f:79:8d:59:96:b4:9e:72:d4:
a0:35:79:dd:0b:3f:7f:78:86:b2:97:ef:6f:bf:69:
d2:fc:6f:8e:e7:4f:5d:fc:e6:a2:ef:b1:ec:42:e1:
0c:b2:a6:43:03:67:15:d8:39:16:47:0d:f8:cb:55:
f2:2e:28:e1:41:ba:be:55:e6:f8:df:45:5c:d7:78:
eb:02:3f:45:f4:09:56:d3:68:6f:b6:c9:f4:56:c6:
7b:cc:60:95:76:0d:72:55:ac:2d:0c:d6:d1:41:1d:
f4:78:98:28:12:a5:aa:c2:d9:60:61:dc:b7:5a:21:
84:84:5b:7b:44:e1:f7:f7:64:e0:8e:1e:83:0e:6b:
94:bb:ec:ae:d7:6b:d4:6e:b0:56:7d:fc:d7:99:a9:
75:61:81:8c:be:3d:52:03:1f:b3:53:2b:a2:07:7f:
ae:1d:cd:c4:6e:6f:20:df:b1:35:1f:02:20:4f:5d:
4b:fe:5b:32:26:89:a3:35:86:89:7c:8c:3f:f1:32:
9a:37:41:6b:12:7d:82:d3:9e:10:56:1a:5d:e6:20:
3c:f0:02:6f:36:dc:27:d0:6b:67:99:17:c5:ba:14:
2a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:91:A9:69:AB:9B:9E:E2:D6:A5:C6:4E:8B:29:F4:AE:3B:B2:EA:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/2acf67-0ec0-48d2-bad7-77d5ca51aaf2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/2acf67-0ec0-48d2-bad7-77d5ca51aaf2/1/nZGpaaubnuLWpcZOiyn0rjuy6pE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.36.0/22
IPv6:
2a09:2400::/29
Signature Algorithm: sha256WithRSAEncryption
27:37:0f:ef:2a:9c:ed:0e:4a:bf:71:88:f0:bc:d2:31:91:be:
86:82:0f:aa:a4:63:35:72:b0:60:4f:67:b2:2f:2e:97:c2:78:
43:5f:41:30:4c:65:0d:5b:91:72:3c:ea:7a:8f:88:b5:26:cd:
78:4e:5f:13:68:85:ea:11:6a:61:e4:11:f9:37:e4:87:b8:10:
d5:7e:b3:60:78:47:73:16:4e:18:d7:9f:e5:3e:c6:f1:92:ab:
64:26:f3:5d:91:6c:b7:4f:18:a2:a1:50:fa:54:1a:45:8c:c1:
e6:c3:b7:a0:c6:09:37:64:02:49:84:ad:07:24:f4:f3:be:4b:
f1:05:4d:49:f5:43:49:bf:38:49:02:9c:bf:63:d6:f4:0c:ca:
94:f6:eb:b5:4c:20:c5:8b:44:b4:a5:b5:5e:8e:4e:a1:c6:8b:
07:80:00:30:25:f8:f1:44:ba:0c:be:e0:24:40:39:f6:82:ae:
a2:6a:90:dc:45:f5:3e:2b:f5:82:32:be:d9:c9:4a:ce:ad:59:
d7:09:9c:05:83:c8:03:87:a4:11:70:54:1c:16:3e:68:44:d6:
85:74:0c:3c:c1:48:ed:c9:ae:90:8d:32:95:95:ef:46:e6:e0:
aa:81:b1:ae:5b:b5:41:03:25:c3:66:38:6b:19:bc:ed:99:00:
d7:83:63:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:33 2024 by rpki-client on console-ams.rpki-client.org