Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p6k6I4UD7ce90yQWCL-FEhAfS7w.cer
File: p6k6I4UD7ce90yQWCL-FEhAfS7w.cer (raw, json)
Hash identifier: Ot2r+f3PZirSfoi3sl4uBN813ep5/UeGVGfwzFCPCl4=
Subject key identifier: A7:A9:3A:23:85:03:ED:C7:BD:D3:24:16:08:BF:85:12:10:1F:4B:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9C21D52543
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/4b621d-d7cc-4269-9e62-dc755de7c191/1/p6k6I4UD7ce90yQWCL-FEhAfS7w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/4b621d-d7cc-4269-9e62-dc755de7c191/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:59:53 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 176.101.169.0/24
IP: 2a10:c8c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670582515011 (0x9c21d52543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:59:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7a93a238503edc7bdd3241608bf8512101f4bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:67:ae:92:83:d4:10:6f:44:63:6a:f6:94:aa:
0e:25:43:64:90:69:46:44:2f:74:ef:49:12:25:a0:
3e:10:66:5a:e8:6d:d4:ae:60:dc:c2:5b:5d:f5:52:
27:79:bd:27:7b:f9:1c:59:4e:8d:20:95:f1:1d:1f:
d7:a4:8a:6d:69:5c:b2:28:e6:8c:0f:fa:7e:e8:22:
e6:1e:11:ff:d5:ff:68:93:52:79:b5:42:e6:12:bf:
ed:53:9d:8f:3a:f6:27:57:1c:15:43:89:e5:33:31:
32:eb:b9:25:2d:0c:6f:69:33:2e:8a:17:78:d7:df:
8d:ed:9b:7f:ee:34:89:8c:ad:73:6a:ef:07:fa:e8:
24:6b:13:a0:98:1e:99:48:7c:5a:a0:f3:24:a9:58:
bc:c4:90:9c:37:05:f1:e0:45:45:0d:36:52:51:bf:
2f:45:3e:74:04:77:77:d1:a8:b9:67:10:5f:de:e7:
70:d0:ef:60:7c:aa:99:43:90:ff:d9:76:73:0c:d7:
b2:fe:8c:8c:92:0c:a8:9e:b9:04:92:93:96:3a:16:
45:2e:64:6f:37:2f:d4:df:e8:f7:ed:91:78:3b:0b:
d2:4b:f9:25:73:98:c5:d1:d0:60:92:31:09:b2:d3:
20:c5:5c:2c:b4:da:36:3d:ac:58:33:49:f6:c6:c8:
d5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A9:3A:23:85:03:ED:C7:BD:D3:24:16:08:BF:85:12:10:1F:4B:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4b621d-d7cc-4269-9e62-dc755de7c191/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4b621d-d7cc-4269-9e62-dc755de7c191/1/p6k6I4UD7ce90yQWCL-FEhAfS7w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.101.169.0/24
IPv6:
2a10:c8c0::/29
Signature Algorithm: sha256WithRSAEncryption
95:7d:ac:a7:b3:54:1d:9f:87:47:c7:94:d1:fb:38:56:34:aa:
ff:69:76:f6:59:0a:3f:f4:ff:90:32:4c:1a:f0:23:2d:e7:6f:
4e:ec:79:57:49:e4:b4:81:d0:83:02:2f:48:0b:50:19:ae:0c:
9b:25:30:16:c0:f9:5d:ef:65:c5:3c:ea:c6:7f:1b:d5:e5:46:
d7:7c:46:22:40:fb:bb:b3:aa:e6:e8:57:2d:56:a0:25:4a:d4:
a7:30:8e:00:1e:ed:d7:5a:96:e2:f5:ab:fe:cd:e3:a6:95:6e:
d9:f3:b2:9c:c4:5b:64:8a:50:77:dc:3e:7e:21:86:5a:a3:d3:
86:8b:0d:92:0c:06:96:50:ea:d6:6d:b0:e6:e8:59:98:6f:1d:
14:8f:6c:30:19:d2:bc:fd:e3:9b:49:b1:06:c9:3b:43:5f:10:
30:84:ab:35:a1:45:89:dc:9b:6f:60:de:5d:eb:fa:8f:88:cc:
fb:31:b7:bd:53:0c:44:71:27:f6:e6:69:74:b1:22:ee:60:ce:
5e:05:c9:ab:9d:1f:c8:1f:93:b7:96:3d:a3:88:c3:96:10:49:
c9:0d:66:45:fd:f7:43:36:9c:28:cd:54:85:fc:2c:ff:14:a7:
1a:04:7c:37:59:36:96:8c:8f:9a:53:ee:84:c9:bb:ed:c9:49:
4b:42:58:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:55 2024 by rpki-client on console-ams.rpki-client.org