Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o32ugP3p3lF9Z8B_0sMp-1YH9v8.cer
File: o32ugP3p3lF9Z8B_0sMp-1YH9v8.cer (raw, json)
Hash identifier: MYhyZ4pNpDlw4QLUycpB01UFugutnnf5pF25yZAbiNU=
Subject key identifier: A3:7D:AE:80:FD:E9:DE:51:7D:67:C0:7F:D2:C3:29:FB:56:07:F6:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9BE3CD7ADB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/d364ae-edab-4c78-acc2-ba4b237e2867/1/o32ugP3p3lF9Z8B_0sMp-1YH9v8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/d364ae-edab-4c78-acc2-ba4b237e2867/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:57:54 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 188.239.191.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669541825243 (0x9be3cd7adb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:57:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a37dae80fde9de517d67c07fd2c329fb5607f6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:a2:cf:7b:af:e3:e0:8f:22:78:21:12:5b:
73:db:c0:fb:fb:b4:da:2f:74:01:2c:67:9b:7b:d1:
b0:1c:5a:42:ff:d4:9c:7d:7b:b7:d5:cd:f6:63:fc:
68:fe:1a:51:16:7d:f2:b5:92:4d:3f:21:1c:5b:81:
c9:13:c9:4e:03:71:43:92:4e:1e:7c:19:39:ce:0e:
c5:bb:f7:4b:ad:6b:28:0a:6e:7d:cb:7d:42:d5:c1:
ab:25:a0:0d:8b:97:a5:b8:89:f3:e1:11:9f:cd:83:
57:66:31:3e:63:bc:8c:d9:26:2d:2d:66:14:5f:36:
06:bb:ff:7b:4c:8f:c9:4e:ef:f4:24:1d:fb:25:9b:
da:b3:c7:c8:d2:ec:9a:c5:3d:bd:79:58:89:86:4b:
bb:17:5f:05:fe:6f:0f:d2:46:7e:7c:d7:6e:f8:36:
aa:2c:3f:aa:95:7d:86:47:b1:6e:5d:70:75:72:be:
b7:70:4c:f0:79:ec:52:a1:30:74:b8:47:78:76:c7:
fe:65:1e:92:6a:3f:63:4b:b4:32:a8:b7:ef:5e:47:
79:d0:a6:c5:28:94:b6:21:a4:e7:e2:3f:9a:53:3c:
09:98:8f:aa:12:0f:b1:df:57:8d:56:d9:c7:59:f2:
3f:9c:67:35:63:fc:58:8a:eb:a1:30:93:0d:0b:25:
2d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7D:AE:80:FD:E9:DE:51:7D:67:C0:7F:D2:C3:29:FB:56:07:F6:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d364ae-edab-4c78-acc2-ba4b237e2867/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d364ae-edab-4c78-acc2-ba4b237e2867/1/o32ugP3p3lF9Z8B_0sMp-1YH9v8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.239.191.0/24
Signature Algorithm: sha256WithRSAEncryption
08:24:5e:0d:09:5a:72:2a:8f:cf:9c:06:58:07:09:50:9a:16:
04:ba:ba:a7:e1:8a:d6:2e:93:57:b6:c0:9b:98:f5:ae:34:84:
4f:98:5e:00:ba:b2:90:44:aa:1c:66:94:71:6c:1e:97:e7:fb:
8e:02:d8:e2:5d:0a:50:29:96:0b:a2:b8:f5:a7:9a:3f:35:42:
ee:b0:36:ad:96:0c:4f:f8:85:9f:56:e7:9f:72:b9:f2:11:d3:
ce:6f:52:10:2d:01:f7:7a:4a:d3:04:88:46:6f:8d:38:6a:bd:
0f:1d:c1:7a:56:22:10:1c:46:59:a1:7f:5c:6b:ad:5d:38:51:
52:93:34:67:ce:d0:3e:83:1e:9d:66:bc:e8:36:29:e6:90:0c:
51:86:8d:a4:71:b5:21:57:ea:8d:e7:9e:d9:88:a6:71:51:78:
ea:5a:d2:90:0b:16:be:c8:93:bf:6c:f1:bc:84:68:12:7a:fc:
91:e1:6a:1b:35:6b:ba:89:6e:32:2e:68:84:da:ec:97:c1:87:
39:df:12:c9:ca:70:d2:23:5d:59:66:72:56:06:31:b3:40:b4:
d3:d2:da:b3:03:72:84:19:79:df:42:41:b2:94:76:56:90:16:
57:11:7d:05:43:ce:41:10:27:fb:26:77:e9:1f:ca:cd:95:23:
83:d6:f8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:40 2024 by rpki-client on console-ams.rpki-client.org