Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
File: pSlSN6tEvONd38Jif9SajERhJEE.cer (raw, json)
Hash identifier: s40szE8Wb5CnHaBjOLnpGRqmQkb9+7/KYPQ15fPtbFk=
Subject key identifier: A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A774BFFC3B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/pSlSN6tEvONd38Jif9SajERhJEE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:00:21 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 46.165.64.0/18
IP: 62.85.128.0/19
IP: 77.84.0.0/16
IP: 77.233.96.0/19
IP: 78.159.0.0/19
IP: 79.132.32.0/19
IP: 80.185.0.0/16
IP: 82.151.0.0/19
IP: 85.117.128.0/19
IP: 85.192.192.0/18
IP: 86.63.224.0/19
IP: 87.100.0.0/17
IP: 88.219.0.0/16
IP: 89.170.0.0/16
IP: 89.185.160.0/19
IP: 91.88.0.0/16
IP: 91.91.0.0/16
IP: 93.182.192.0/18
IP: 93.191.80.0/21
IP: 95.136.128.0/17
IP: 95.157.192.0/18
IP: 95.168.0.0/19
IP: 95.171.128.0/19
IP: 95.174.160.0/19
IP: 95.175.160.0/19
IP: 159.20.8.0/21
IP: 178.18.176.0/20
IP: 178.19.0.0/20
IP: 185.150.120.0/22
IP: 188.7.0.0/16
IP: 188.141.128.0/17
IP: 188.224.0.0/17
IP: 213.176.192.0/19
IP: 2a00:5e80::/32
IP: 2a00:7180::/32
IP: 2a00:8380::/32
IP: 2a00:8d80::/32
IP: 2a00:a580::/32
IP: 2a00:b280::/32
IP: 2a00:ba80::/32
IP: 2a00:c780::/32
IP: 2a00:cc80::/32
IP: 2a00:d780::/32
IP: 2a00:e080::/32
IP: 2a00:e880::/32
IP: 2a00:ec80::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 719218277435 (0xa774bffc3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:00:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:4c:c5:de:4b:ec:bf:f5:74:1f:1d:a5:9b:
62:6e:f6:2d:46:e1:d4:19:25:df:e9:4d:aa:fd:e9:
78:29:15:6b:de:98:48:a8:a5:de:4c:c1:80:96:4b:
36:5d:9d:05:db:17:0b:1b:f9:6a:97:14:fb:9a:71:
cd:a8:dd:b7:cc:d5:f6:22:58:1b:ed:cd:40:7b:db:
49:34:7a:e4:34:aa:52:e1:d1:43:20:11:70:5a:de:
39:1b:3c:00:c9:d1:31:fe:33:76:c3:27:c1:06:c8:
8a:47:94:00:c8:fc:87:8d:26:97:dd:23:3a:24:57:
fb:a6:5d:21:a5:35:a9:9d:b0:3b:f5:70:e0:69:dc:
52:64:f4:2f:fe:9f:a0:06:04:14:f5:8c:6a:a8:c1:
7b:61:ad:af:dc:36:20:5b:b2:64:28:08:be:cb:30:
e4:ee:82:a8:5b:bb:bf:5a:67:bb:3b:61:69:6e:61:
c0:34:93:de:7c:d2:89:65:d2:ca:7f:8c:b2:a1:eb:
eb:42:f7:be:33:c0:3a:6d:6a:03:c0:96:45:d5:01:
c1:0f:86:c1:ad:09:bb:4f:b6:8f:e3:25:04:88:94:
3c:ca:45:23:f8:26:c7:8d:e0:dd:9f:42:00:96:fc:
2a:23:e7:05:ed:fa:15:9b:8c:1d:18:49:7a:be:b9:
c1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/pSlSN6tEvONd38Jif9SajERhJEE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.165.64.0/18
62.85.128.0/19
77.84.0.0/16
77.233.96.0/19
78.159.0.0/19
79.132.32.0/19
80.185.0.0/16
82.151.0.0/19
85.117.128.0/19
85.192.192.0/18
86.63.224.0/19
87.100.0.0/17
88.219.0.0/16
89.170.0.0/16
89.185.160.0/19
91.88.0.0/16
91.91.0.0/16
93.182.192.0/18
93.191.80.0/21
95.136.128.0/17
95.157.192.0/18
95.168.0.0/19
95.171.128.0/19
95.174.160.0/19
95.175.160.0/19
159.20.8.0/21
178.18.176.0/20
178.19.0.0/20
185.150.120.0/22
188.7.0.0/16
188.141.128.0/17
188.224.0.0/17
213.176.192.0/19
IPv6:
2a00:5e80::/32
2a00:7180::/32
2a00:8380::/32
2a00:8d80::/32
2a00:a580::/32
2a00:b280::/32
2a00:ba80::/32
2a00:c780::/32
2a00:cc80::/32
2a00:d780::/32
2a00:e080::/32
2a00:e880::/32
2a00:ec80::/29
Signature Algorithm: sha256WithRSAEncryption
4c:cf:e2:1c:c3:da:89:6b:ee:3e:98:76:e4:41:99:56:6f:6c:
de:23:2b:5a:6e:50:39:07:e0:c8:68:10:c5:f0:53:a4:94:96:
04:01:ef:01:2a:cc:bb:cc:85:e0:42:4b:26:ce:5d:f4:1f:cc:
a5:72:dc:a3:d2:3f:31:ee:cd:4d:14:f2:28:bf:24:be:9d:25:
a1:52:64:26:23:af:6a:60:74:a3:b6:80:0e:0d:e6:3e:c5:8d:
8c:64:08:2a:dc:a0:63:0f:de:30:32:62:4e:e3:e5:cc:3e:a3:
02:4e:91:9d:3b:f4:4b:f4:35:56:05:5d:d6:8f:d6:50:5a:a2:
4d:64:a5:f6:7d:a8:4c:ea:28:25:f9:ca:14:92:6d:90:4f:5d:
98:1c:38:34:2e:0e:f9:d4:4b:91:b7:eb:4c:18:c9:a1:97:cd:
8c:19:12:e3:82:e6:54:b9:b8:a5:15:89:fe:41:db:2b:71:a6:
6b:35:47:e3:fd:b0:d8:10:6f:b7:66:54:4c:ec:43:d5:25:76:
d6:f8:bc:ce:46:95:87:86:ec:6e:b4:4b:7b:55:a4:19:1a:9e:
f9:f8:5d:bf:4f:cc:70:0c:87:80:7c:2b:71:72:7d:9f:46:89:
d5:ea:87:df:18:1e:36:97:83:61:2a:f4:13:87:0c:d7:b6:9a:
00:f4:40:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:45 2024 by rpki-client on console-fra.rpki-client.org