Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r4vYQ3JwA_FZk6tCdQRucRtq8Oo.cer
File: r4vYQ3JwA_FZk6tCdQRucRtq8Oo.cer (raw, json)
Hash identifier: 72vY3/RY1Bp2pBI4TWK9h6YYubUiVFOnPmCJli4i8x0=
Subject key identifier: AF:8B:D8:43:72:70:03:F1:59:93:AB:42:75:04:6E:71:1B:6A:F0:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9D94FD23A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/5984b7-f2d7-4998-b550-1661c9c41458/1/r4vYQ3JwA_FZk6tCdQRucRtq8Oo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/5984b7-f2d7-4998-b550-1661c9c41458/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 04:51:36 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 2a09:4bc0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676809483168 (0x9d94fd23a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:51:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af8bd843727003f15993ab4275046e711b6af0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:13:2a:c6:7a:ce:f7:44:18:22:08:09:b9:c1:
73:ac:83:dc:47:0a:4f:14:88:d5:55:c4:5a:b8:6f:
4b:5a:45:08:73:2f:b2:be:8b:5a:d3:01:b1:fb:19:
23:71:f2:40:13:76:f8:6e:cf:ce:ef:61:39:d6:95:
17:6c:e1:47:04:23:33:01:8e:a9:6d:6b:c5:1e:a6:
b7:f9:64:c2:25:03:19:79:1b:9f:e7:87:7a:dc:02:
9c:2c:6e:ea:4d:ba:b1:82:fd:52:99:7c:b8:2c:7b:
f5:ce:61:b4:79:5a:ce:17:95:f3:c5:6a:fb:84:30:
be:9c:22:a9:24:1e:92:09:b5:47:97:de:39:28:a6:
0b:1d:77:33:71:47:25:51:44:7d:1e:46:a3:8b:fa:
56:94:36:69:35:3a:43:8e:a9:32:a1:b3:7b:b0:c3:
0a:3d:63:e0:ca:0f:6d:21:5b:c3:01:e5:9b:86:b8:
2e:b9:52:da:25:08:47:d9:87:0a:df:9a:fe:05:ba:
ba:e9:eb:40:3d:51:49:6c:1a:7c:7c:23:04:ad:86:
99:5e:28:85:3b:c5:f2:69:92:03:a5:77:1e:0b:b4:
40:d7:61:0c:2c:ae:2e:e0:a8:f8:e6:07:74:69:3e:
7e:9e:18:24:b7:ab:13:20:a7:f4:e2:25:46:2a:ca:
87:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8B:D8:43:72:70:03:F1:59:93:AB:42:75:04:6E:71:1B:6A:F0:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5984b7-f2d7-4998-b550-1661c9c41458/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5984b7-f2d7-4998-b550-1661c9c41458/1/r4vYQ3JwA_FZk6tCdQRucRtq8Oo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:4bc0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:80:b5:2b:a8:19:b8:d8:14:55:80:83:ca:73:0e:30:67:85:
86:a6:e4:6f:2c:55:22:7c:9e:a8:3f:c4:5b:17:76:7f:79:0a:
d6:b0:84:80:46:7a:7c:d9:18:de:97:3f:ad:0d:0c:56:7f:21:
78:1f:8c:11:14:70:64:78:08:25:10:2e:df:d2:50:d3:83:fe:
7f:7d:ca:53:cd:b9:37:6e:b1:f6:f4:d3:a2:3c:97:cc:57:4b:
e9:ac:4b:d8:35:4d:c2:51:12:1c:21:27:34:fe:35:07:4a:b8:
fe:bf:b9:38:1a:6e:fd:a8:6e:76:db:db:5e:2f:6d:f1:b8:0e:
c3:0f:b2:56:75:fe:13:32:d4:ed:fa:dc:97:c6:fc:f1:b6:cb:
20:22:cf:04:fa:b8:dc:10:3c:fb:b9:26:94:b3:a9:9d:75:54:
af:3c:75:ed:e6:a2:a4:ce:17:14:0b:02:6c:a5:d8:b3:f6:dc:
64:d9:2f:fe:2b:52:49:bc:50:94:57:e2:65:54:4c:28:c8:b0:
2b:e4:0c:62:03:1e:c2:e6:8e:cd:18:f9:6f:11:d5:21:a5:0d:
a0:8a:9e:fd:85:2a:a9:c4:aa:af:fe:fb:f2:ed:18:33:d7:8c:
f4:d2:f9:38:d6:92:0f:80:a5:32:5f:42:98:bb:34:74:bc:54:
e9:73:bb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:33 2024 by rpki-client on console-ams.rpki-client.org