Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ol2KrWkUSTfY_vbhIegTPCtTXhs.cer
File: ol2KrWkUSTfY_vbhIegTPCtTXhs.cer (raw, json)
Hash identifier: d05UMQ6kfN9pfJAn1YBww6bVbAdy8N5SyPE2h1ct6hk=
Subject key identifier: A2:5D:8A:AD:69:14:49:37:D8:FE:F6:E1:21:E8:13:3C:2B:53:5E:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A3F7E50FAB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/1a917c-4c1a-4041-a902-df2996dc2dc5/1/ol2KrWkUSTfY_vbhIegTPCtTXhs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/1a917c-4c1a-4041-a902-df2996dc2dc5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:59:34 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 5.181.240.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 704238653355 (0xa3f7e50fab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:59:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a25d8aad69144937d8fef6e121e8133c2b535e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ec:33:29:d8:a5:f4:8c:d5:bc:3a:26:13:0d:
2f:61:bc:60:77:19:60:0b:de:6d:64:7b:12:19:29:
e1:73:7b:15:f5:6c:68:9a:39:29:92:ac:59:2e:ca:
24:3f:ac:24:62:0c:27:06:6f:94:7c:0b:85:a4:24:
cd:be:43:81:d9:42:15:db:6d:a4:eb:34:23:66:23:
bc:7d:21:f1:18:56:9d:1e:d5:5e:4d:08:bd:38:ea:
ac:e4:c5:b2:a5:39:50:1f:7e:3f:8c:d8:06:d1:ca:
12:06:1b:a6:1c:c3:44:00:dd:f7:43:62:de:4b:32:
a2:6c:cc:16:7d:f9:24:9d:3c:84:4d:91:65:c0:ba:
c7:76:e5:2f:45:90:3f:dc:b4:96:67:33:3c:e4:10:
a2:97:45:5e:6a:f0:6c:90:82:43:a7:f8:4d:ba:ac:
5c:dc:3b:80:8f:7c:78:b6:01:bf:44:e6:8d:6a:c7:
38:2f:2d:84:8c:ea:15:0a:e2:e1:7d:52:1c:2d:88:
36:e7:eb:bb:5e:9f:94:81:5f:d3:67:57:52:5a:84:
34:9e:c0:63:6d:64:99:c9:0d:9d:27:84:98:91:ce:
b6:e4:00:06:e5:3d:20:d7:0a:48:ee:2f:fe:cb:3a:
85:da:80:57:12:f1:bc:3d:b3:e5:b5:bd:45:2f:f6:
8d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5D:8A:AD:69:14:49:37:D8:FE:F6:E1:21:E8:13:3C:2B:53:5E:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1a917c-4c1a-4041-a902-df2996dc2dc5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1a917c-4c1a-4041-a902-df2996dc2dc5/1/ol2KrWkUSTfY_vbhIegTPCtTXhs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.240.0/22
Signature Algorithm: sha256WithRSAEncryption
31:fd:57:19:b2:6f:61:2f:cc:5c:15:c7:8c:a6:9d:4f:2e:04:
62:c3:5a:05:37:c4:6a:9b:49:b5:59:65:b1:a2:7e:93:77:17:
94:00:94:fc:99:07:28:f8:2d:1e:5c:a4:94:79:8e:18:c9:dd:
84:be:92:fe:f6:cb:59:1c:12:e2:85:52:84:08:f4:40:8b:39:
35:f7:fd:e8:c4:5b:b3:4a:c4:d5:e2:65:21:79:9a:55:d6:6f:
a8:1d:62:48:36:42:e4:a7:8b:d6:2b:b2:5f:de:68:b3:29:2a:
68:63:60:63:1c:4d:89:7a:cb:c9:be:d6:b6:18:5c:4f:03:7c:
cc:4c:16:00:64:4a:18:e5:ee:b9:5a:c7:62:0c:77:f7:28:c7:
ec:24:24:11:02:05:c6:4c:41:e6:a4:81:2c:2c:02:06:bb:3f:
57:78:df:d6:09:28:84:0f:76:30:31:ab:5c:94:07:fc:d0:d5:
4c:63:6d:75:71:0a:1a:bb:f9:3b:91:80:42:84:87:4e:da:8d:
2e:1b:8a:22:9b:a8:0d:1c:31:dd:2c:e2:26:05:d3:ba:e2:d2:
49:38:13:6d:a8:a0:7b:43:a0:e3:6a:55:2b:2c:0f:51:0e:35:
59:f9:8c:e5:5d:a8:07:58:bf:3a:7b:b1:d6:16:40:eb:9b:ac:
fd:7d:af:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:51 2024 by rpki-client on console-ams.rpki-client.org