Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p0hjKq_pJsCeVLs1rK5QC35MpEI.cer
File: p0hjKq_pJsCeVLs1rK5QC35MpEI.cer (raw, json)
Hash identifier: xwQ75GDmkv4ps7z3iB/YT4j5RDpiqlEA1SkoGlxM/lw=
Subject key identifier: A7:48:63:2A:AF:E9:26:C0:9E:54:BB:35:AC:AE:50:0B:7E:4C:A4:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01852B292EDCF54DD4CA4ACEF2524E806778
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/ac66a7-83bc-43a7-b9c2-dc1f78071472/1/p0hjKq_pJsCeVLs1rK5QC35MpEI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/ac66a7-83bc-43a7-b9c2-dc1f78071472/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 19 Dec 2022 16:13:17 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.240.20.0/22
IP: 2a0c:6a80::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2b:29:2e:dc:f5:4d:d4:ca:4a:ce:f2:52:4e:80:67:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 19 16:13:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a748632aafe926c09e54bb35acae500b7e4ca442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:3f:ce:74:a3:1c:93:12:8a:db:a8:4c:23:
a1:e5:63:9a:01:3b:56:ae:8d:98:94:aa:dd:06:8b:
b1:0b:e6:6a:85:21:db:3f:07:ef:48:16:cd:67:16:
68:1a:fa:b1:67:da:44:61:9e:9b:7b:78:36:12:d7:
dd:d0:95:e6:a3:9d:0d:37:2d:10:15:95:fb:eb:8c:
46:04:2f:49:a2:fd:49:d1:8b:48:6e:43:ad:9f:47:
c3:84:78:1a:2f:a9:c2:be:21:3a:fc:f6:fb:39:cf:
60:6c:8c:ea:0a:dd:ab:1a:8a:8e:37:83:47:1a:72:
98:88:f8:42:82:88:a6:b0:cd:ae:e1:e1:57:a8:dd:
26:af:90:41:f8:1b:4b:5a:31:03:43:a9:f2:d8:ae:
01:7b:81:b8:d1:84:05:75:2b:3d:aa:a0:07:8a:8b:
10:e8:5f:c1:0b:3c:e1:4d:89:69:13:83:6b:4d:23:
59:e7:6b:50:9d:8d:99:e0:e6:4f:36:eb:cd:fa:b9:
69:b6:90:f5:8b:e7:e1:ad:56:35:5b:bb:79:93:42:
fe:6c:b0:1b:f6:ae:a1:7e:a6:2e:df:74:3e:b8:29:
33:74:ac:79:f3:2e:82:55:e4:de:b9:b8:36:da:a3:
1d:cc:21:d6:cd:e8:5f:3d:80:07:13:3a:61:3c:70:
c7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:48:63:2A:AF:E9:26:C0:9E:54:BB:35:AC:AE:50:0B:7E:4C:A4:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ac66a7-83bc-43a7-b9c2-dc1f78071472/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ac66a7-83bc-43a7-b9c2-dc1f78071472/1/p0hjKq_pJsCeVLs1rK5QC35MpEI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.20.0/22
IPv6:
2a0c:6a80::/29
Signature Algorithm: sha256WithRSAEncryption
90:86:10:ed:be:cd:11:5d:ba:55:3c:1b:b8:e8:49:c1:b1:32:
a1:c6:d7:5c:b5:43:e0:23:30:e0:17:bd:56:1f:72:de:c9:57:
9b:7a:9b:e1:a0:5a:a4:d8:e9:d8:24:0a:09:c6:b8:20:c3:a7:
f0:83:8d:4a:27:1b:08:a5:2f:76:9f:9d:27:7f:03:dc:fd:0f:
d8:6e:b5:0b:1f:1f:22:e9:1a:d8:95:e1:33:44:2c:79:0b:5b:
98:c1:50:2f:3c:73:5c:76:7b:61:15:57:af:c4:e8:48:d8:98:
e0:11:93:b8:b9:44:19:8e:f0:3f:34:e6:1c:69:c5:9c:79:80:
19:48:4a:f6:99:d3:bd:18:ed:f5:d3:24:a9:72:1f:2f:c8:9b:
69:43:8c:21:e6:17:3d:75:e3:57:9b:3a:fc:38:a4:9b:d3:9e:
9d:1b:5a:82:f4:72:ec:4a:28:b3:e6:23:02:66:86:c1:9e:0a:
a9:bc:12:d2:7d:b6:b9:b4:ff:41:3c:99:25:dd:3d:fd:4e:79:
98:e6:52:df:96:d2:ab:1b:2e:04:a9:9a:70:62:bf:e8:7c:b1:
0e:24:ee:13:57:c7:1d:97:b9:bd:03:64:74:87:aa:17:34:96:
02:f9:6a:ac:55:20:d7:9a:69:5d:9e:2b:da:a4:de:d0:c3:84:
3a:3a:63:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:41 2024 by rpki-client on console-fra.rpki-client.org