Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rMbhsDWuE6Yk8l6R-SijIozOtlU.cer
File: rMbhsDWuE6Yk8l6R-SijIozOtlU.cer (raw, json)
Hash identifier: wbsyGVtHoAXtVULjKCj6W4o9YnoropaPjQK6MxOpocs=
Subject key identifier: AC:C6:E1:B0:35:AE:13:A6:24:F2:5E:91:F9:28:A3:22:8C:CE:B6:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AAB0B03457
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/0c9af1-7879-44a4-b81b-aa82a7d9b352/1/rMbhsDWuE6Yk8l6R-SijIozOtlU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/0c9af1-7879-44a4-b81b-aa82a7d9b352/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:58:40 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 139.28.32.0/22
IP: 2a09:f480::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 733108778071 (0xaab0b03457)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:58:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acc6e1b035ae13a624f25e91f928a3228cceb655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:57:37:ce:80:c5:16:5f:58:7b:b1:c9:33:65:
9e:e1:0b:92:54:1f:b5:10:bd:ba:53:6f:d9:63:7d:
e1:b0:4d:a3:1a:bf:e0:b3:4d:f2:34:ca:2e:d1:89:
b2:ad:a1:f4:6b:be:a1:26:01:32:55:af:be:5d:dc:
35:5a:8b:f1:9e:54:a9:c1:ce:b5:07:30:27:58:73:
7f:a7:77:4a:de:fd:f3:d1:cc:74:44:86:fe:23:24:
85:65:4b:f2:e8:2b:6a:8f:65:6d:63:54:46:09:52:
82:df:ac:ed:9c:70:34:d3:1d:cc:61:32:e5:67:fb:
ef:ab:f3:70:f1:3b:7a:e8:5b:68:0d:40:97:97:7c:
03:24:d1:4e:96:9e:ed:ad:d7:4f:23:3f:68:78:42:
69:b5:fe:94:24:ef:a1:f2:5f:16:9c:a8:dc:6d:af:
62:08:e7:70:fd:fe:35:8b:8a:ee:63:78:7d:0b:54:
b9:ec:64:27:a2:b0:dd:7a:be:1c:50:4a:07:e6:f4:
58:94:aa:c9:98:54:45:bd:fc:1c:4f:62:b2:ad:0b:
cc:5a:05:b6:77:b7:94:95:46:1c:65:f4:15:f3:bf:
10:ac:13:c2:dc:ac:27:97:a6:f6:73:26:87:12:08:
70:0c:1a:a0:38:8b:ea:87:d3:fe:1e:a9:a6:d9:c3:
dd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C6:E1:B0:35:AE:13:A6:24:F2:5E:91:F9:28:A3:22:8C:CE:B6:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0c9af1-7879-44a4-b81b-aa82a7d9b352/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0c9af1-7879-44a4-b81b-aa82a7d9b352/1/rMbhsDWuE6Yk8l6R-SijIozOtlU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.32.0/22
IPv6:
2a09:f480::/29
Signature Algorithm: sha256WithRSAEncryption
6f:11:ad:a8:0c:32:40:14:57:6f:36:6e:64:06:59:3c:4e:c2:
d0:02:58:9b:bb:34:aa:6e:f0:7d:56:96:89:57:09:f2:35:77:
22:89:1d:ee:a2:79:fd:12:6d:4a:f4:9f:0a:ed:84:b0:a9:42:
c3:8e:a9:9e:1a:e3:69:4d:8c:40:ca:2c:04:92:05:50:ed:21:
bb:db:53:b3:46:00:65:2f:70:12:fb:da:5e:d3:80:50:f4:13:
5b:a8:89:77:32:f0:0d:59:87:f3:04:8e:d8:25:0f:c5:f2:d2:
fa:34:76:40:ce:0a:13:04:0d:37:06:67:3a:6e:8a:6a:af:cb:
88:65:24:88:b3:b5:d8:2d:da:f5:b3:36:e4:a8:8e:f0:a1:18:
c5:8e:d5:6a:19:bb:80:6c:57:13:79:5a:4d:f7:77:ba:ac:01:
10:df:7e:cb:20:8f:bc:31:00:a0:6a:9a:ca:a2:b2:5f:4d:c8:
d5:00:43:ab:87:1c:e5:3b:b5:64:7a:79:03:a3:53:b6:a2:a5:
9d:10:9b:96:4e:a6:7e:f8:08:de:11:ce:1f:19:97:d3:4c:27:
c0:ec:0c:ea:5e:be:0e:30:a2:71:e5:a9:88:fa:b7:64:a5:f8:
d1:fa:4e:09:f7:47:77:87:92:c8:56:e4:0d:50:2f:fa:2e:d9:
52:e3:f8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:03 2024 by rpki-client on console-fra.rpki-client.org