Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ndmtptqmPMZROxnuiHNBpJhkMP4.cer
File: ndmtptqmPMZROxnuiHNBpJhkMP4.cer (raw, json)
Hash identifier: li3APuC7Nxg2esOgxzImNZZHyfHz4lhbX69iFLbSZ50=
Subject key identifier: 9D:D9:AD:A6:DA:A6:3C:C6:51:3B:19:EE:88:73:41:A4:98:64:30:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AB96798470
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/06af59-fd8e-478b-b710-b0e70b269d8c/1/ndmtptqmPMZROxnuiHNBpJhkMP4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/06af59-fd8e-478b-b710-b0e70b269d8c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 06 Jan 2022 04:06:31 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.103.148.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 736963953776 (0xab96798470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 6 04:06:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9dd9ada6daa63cc6513b19ee887341a4986430fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ad:bc:77:74:9d:3c:64:78:68:56:70:44:17:
56:fa:01:50:4f:2e:f1:86:8d:6f:1c:94:e5:d6:eb:
16:22:c6:7c:6c:e3:13:d3:f8:cc:a9:16:a2:38:69:
f5:49:9b:48:c6:1e:50:ff:48:9f:97:c9:eb:e0:6d:
8e:52:46:e6:74:8e:1e:ca:ca:69:1a:a3:31:68:f1:
86:74:f7:a6:6a:d0:a4:58:b6:bf:a7:81:dc:e1:d8:
fd:d2:e9:f5:ee:ac:ed:68:f0:47:39:bf:7c:35:12:
43:2b:2f:0a:41:7f:34:47:a1:32:7e:7b:0e:ed:62:
7a:f8:69:fc:a6:2e:6e:5e:7e:b9:9a:87:49:05:66:
c8:8f:4b:92:7d:f8:e0:1f:1c:29:d1:5a:c3:4e:f3:
48:83:5b:9c:89:25:b5:56:7f:20:57:fe:3f:9c:da:
ea:98:77:96:71:3b:b7:c0:5a:ee:e4:e5:3e:5a:8d:
be:b6:7a:c5:6d:bd:f6:ae:68:2d:fc:b5:b0:4d:ea:
94:81:36:31:9f:91:1d:a6:45:23:fc:3b:ef:ab:03:
a9:26:45:a3:52:c2:79:c5:7b:0d:e7:b6:29:08:33:
29:b3:7e:00:a7:91:d3:b7:d0:23:3b:2a:69:8b:0a:
a7:7d:69:d5:64:8e:89:90:3f:9b:f0:6f:54:97:d2:
85:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D9:AD:A6:DA:A6:3C:C6:51:3B:19:EE:88:73:41:A4:98:64:30:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06af59-fd8e-478b-b710-b0e70b269d8c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06af59-fd8e-478b-b710-b0e70b269d8c/1/ndmtptqmPMZROxnuiHNBpJhkMP4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.148.0/22
Signature Algorithm: sha256WithRSAEncryption
22:ee:48:68:7c:6b:3d:9e:d2:5b:bf:7b:46:24:b0:e8:b0:e9:
1b:f6:8c:ab:f0:97:b2:25:f7:07:7d:32:48:c9:d9:80:53:35:
d4:cd:ae:f8:30:e4:2c:b1:1e:fd:70:68:27:f3:c3:46:1a:95:
9d:3f:0b:08:d3:26:54:e5:eb:99:ec:07:7d:aa:11:9c:be:97:
9d:46:dc:a3:d5:d6:11:d5:f8:f9:e5:00:df:0a:cf:1a:71:3f:
50:e5:3e:51:86:e2:3f:24:17:ae:c9:4a:e8:68:39:f9:ca:01:
b3:fc:f8:7c:fd:f5:09:d1:41:f9:ce:fa:6c:0c:aa:13:91:55:
a6:d2:6f:55:f6:6e:fb:4f:29:4d:71:aa:da:75:76:35:4a:83:
89:60:10:b1:4b:25:74:c4:dd:33:78:0f:e3:d4:a9:4e:ad:cd:
ea:a0:6f:5a:2d:c4:ef:b6:d5:a8:e2:ee:40:c9:42:8f:6d:75:
a2:30:f4:18:b0:d8:c5:e2:38:e3:d0:25:21:b6:73:64:59:13:
26:bf:72:4f:56:1b:a6:8b:6c:bc:72:14:96:84:c1:bb:63:0e:
c8:68:dc:29:85:15:9c:98:a3:f0:0b:fc:38:b5:26:9e:f8:d2:
3e:f6:99:1e:94:05:62:7e:1b:3b:42:db:a6:e6:fd:5b:fe:31:
e9:cf:65:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:34 2024 by rpki-client on console-ams.rpki-client.org