Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oxVuG7nlRKZuIWTRVJHi4W8AeMU.cer
File: oxVuG7nlRKZuIWTRVJHi4W8AeMU.cer (raw, json)
Hash identifier: S0gH2wYacgZWUw8i07MdLRJKSz5bqoR7jjYMCFs7oos=
Subject key identifier: A3:15:6E:1B:B9:E5:44:A6:6E:21:64:D1:54:91:E2:E1:6F:00:78:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9D74BF5438
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/866243-4a17-4521-adbe-9fc5fea1f8ee/1/oxVuG7nlRKZuIWTRVJHi4W8AeMU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/866243-4a17-4521-adbe-9fc5fea1f8ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 04:03:45 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.134.136.0 -- 185.134.138.255
IP: 2a0e:2a40::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676268561464 (0x9d74bf5438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:03:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3156e1bb9e544a66e2164d15491e2e16f0078c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:8d:ca:89:b5:9b:52:f9:2e:a2:e2:a9:21:
47:59:de:7a:68:92:03:b1:ab:cc:f9:1f:6e:71:01:
f6:c3:76:5c:73:fe:de:2c:e4:40:35:f0:db:12:7e:
28:26:ec:d5:50:60:35:b9:82:75:d8:c8:dd:45:aa:
db:1d:56:ed:11:1f:a9:49:f9:76:a0:6f:c1:ac:69:
e5:aa:d6:7e:1f:01:ee:e1:d3:56:1b:69:12:99:3c:
90:90:87:6b:86:be:c6:4a:57:62:7d:01:42:ef:f4:
d3:ca:81:3b:8d:fc:e6:be:16:6b:ef:05:28:77:53:
f8:f6:22:3b:3b:37:5c:a0:6a:1f:1a:55:4b:7d:92:
3e:47:e9:d4:0a:06:62:48:9f:c8:7a:6b:fb:a7:59:
43:99:fc:55:86:5d:54:39:2e:07:10:0b:ef:c6:67:
86:19:3b:bd:99:48:1e:36:b1:bb:2d:c2:3a:69:63:
e3:4a:b3:80:be:49:28:31:51:1b:bc:fc:f2:34:aa:
7a:34:09:12:ac:89:29:3e:e9:5b:f6:6f:cd:72:6e:
16:7b:b5:54:98:c8:25:1e:fb:4d:83:45:9f:8c:8f:
10:d3:3f:16:9c:30:ec:16:af:f5:b3:af:a3:ab:cd:
d6:cd:d3:fc:85:1a:d9:47:c7:4d:a7:fc:6f:79:fa:
9f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:15:6E:1B:B9:E5:44:A6:6E:21:64:D1:54:91:E2:E1:6F:00:78:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/866243-4a17-4521-adbe-9fc5fea1f8ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/866243-4a17-4521-adbe-9fc5fea1f8ee/1/oxVuG7nlRKZuIWTRVJHi4W8AeMU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.136.0-185.134.138.255
IPv6:
2a0e:2a40::/29
Signature Algorithm: sha256WithRSAEncryption
7d:ce:de:ad:e8:3e:af:65:55:54:ef:28:13:86:18:c2:ce:f7:
09:23:43:f2:01:a2:7a:0d:0c:32:f1:d9:d2:2a:e1:94:48:bb:
81:3d:b8:ad:d8:28:47:13:b1:b3:18:ec:40:44:d0:3c:47:49:
f2:33:59:ae:d2:81:8d:c2:e1:4c:6b:98:69:96:67:ec:77:00:
ae:f1:22:e9:84:71:0c:d7:22:1b:27:f2:0a:dc:db:cb:4a:fe:
c2:98:35:00:f1:de:13:59:07:0b:08:02:6b:ba:f7:c5:3e:1a:
28:6b:e6:0e:ab:1d:4c:47:8b:8e:25:3c:13:e2:52:85:2e:66:
3d:fe:7a:dc:7b:18:20:70:41:89:3d:bb:3f:b8:1d:28:8b:79:
d6:62:85:43:14:35:46:03:66:8b:c1:0f:87:de:61:e5:2e:9a:
e7:56:3b:a5:b4:6b:e2:19:b8:34:c4:47:6c:57:ac:74:ed:3e:
81:5b:49:6b:58:69:3e:2b:fd:9a:47:57:9c:8a:87:a4:88:d6:
0b:02:4d:a1:34:cc:d8:ef:e4:f4:cf:d8:07:31:22:bd:b0:7f:
79:f9:d6:cb:2b:85:5c:ed:d7:b6:87:41:37:32:c4:df:0a:b3:
58:b9:18:36:09:fa:26:01:40:bd:67:eb:92:8e:9c:fd:a8:24:
b1:15:b7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:41 2024 by rpki-client on console-fra.rpki-client.org