Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rZX6kUcp_ICOFWtOJmcCEcotwt8.cer
File: rZX6kUcp_ICOFWtOJmcCEcotwt8.cer (raw, json)
Hash identifier: UC2nRBfQjVvRcPBlVY35kqSGei3BFqvgQCzGVM6epWw=
Subject key identifier: AD:95:FA:91:47:29:FC:80:8E:15:6B:4E:26:67:02:11:CA:2D:C2:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AE617ED0FC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/e97e8b-a29e-4d2d-bf06-1a5be443c158/1/rZX6kUcp_ICOFWtOJmcCEcotwt8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/e97e8b-a29e-4d2d-bf06-1a5be443c158/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 09 Mar 2022 10:55:40 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 195.5.104.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 748960010492 (0xae617ed0fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 9 10:55:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad95fa914729fc808e156b4e26670211ca2dc2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:52:22:37:bc:22:78:94:eb:ab:1c:51:c5:
3d:39:24:6d:ea:0b:a9:05:84:1e:29:15:c7:37:57:
4f:09:b0:6d:df:81:52:2b:fe:c3:73:08:d2:b6:49:
16:ab:84:ce:62:e7:1b:8f:2f:e4:be:3e:ac:58:24:
29:85:27:65:b6:5b:f5:b6:de:7e:86:a6:cd:fe:c3:
5e:00:89:71:e1:4b:a6:a6:63:9f:df:26:07:01:91:
b6:d5:7a:77:3d:e0:60:28:3f:05:f9:7a:47:d7:08:
84:61:eb:b6:b8:28:1b:f1:a6:44:ae:eb:79:52:69:
26:e0:4f:46:29:a2:45:6b:d0:92:cd:a9:df:f7:df:
bf:f9:d9:82:d0:a1:71:26:ec:40:07:9b:13:1c:58:
7c:b5:35:7f:96:e0:31:ac:5a:30:ca:68:7b:b6:92:
7e:4b:a0:3a:73:7b:c0:24:ae:9a:83:b0:69:23:03:
65:b6:78:6c:91:6c:5d:eb:92:f6:d7:5e:cf:e7:74:
fc:9e:4e:ae:f6:55:66:63:37:9f:c8:a6:c8:d0:fa:
73:38:54:d6:16:db:68:1b:65:c3:b3:3f:0c:2f:53:
cd:fa:72:bc:5a:ce:6b:7b:0c:49:e6:1a:bd:4f:79:
03:dc:81:20:dc:3e:dc:be:c7:4c:eb:c5:5c:b6:05:
46:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:95:FA:91:47:29:FC:80:8E:15:6B:4E:26:67:02:11:CA:2D:C2:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e97e8b-a29e-4d2d-bf06-1a5be443c158/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e97e8b-a29e-4d2d-bf06-1a5be443c158/1/rZX6kUcp_ICOFWtOJmcCEcotwt8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.104.0/23
Signature Algorithm: sha256WithRSAEncryption
56:18:0f:ed:e5:9c:68:3f:3d:d3:c1:32:1e:a9:9d:4c:cc:bd:
15:81:b9:a5:f1:b5:bf:93:c2:9d:a2:79:6d:a4:3c:8f:0e:03:
38:d3:2b:78:27:b6:5e:2c:a7:70:22:86:0a:8d:1f:c2:68:24:
5d:c1:ca:e7:1e:0b:9b:23:03:f4:90:7c:08:17:18:f2:68:cd:
1e:19:de:63:fc:b2:e5:47:75:e8:76:dc:45:a6:40:08:10:a1:
b6:e4:72:7b:27:99:78:8c:59:4a:4c:68:9e:a1:f3:a7:ab:53:
8c:e5:07:20:34:36:44:3f:ec:a6:cf:38:58:4b:d3:9e:06:37:
b4:71:b0:cb:cb:d1:3a:9f:c2:48:32:cd:b2:26:94:22:86:02:
a2:e1:b8:0a:aa:bd:40:46:be:1a:f2:b0:59:b9:51:25:86:16:
3d:43:a3:a1:ef:47:42:8c:cd:14:46:34:06:67:fb:7d:5c:6f:
9c:39:87:18:4a:88:b9:fe:b3:1f:4e:4f:2b:3e:dd:5a:ff:ab:
3c:4c:35:7d:4b:d3:af:ca:bb:6f:08:f9:39:01:f3:ec:8d:a8:
28:27:05:29:71:81:0d:38:8b:cc:cd:8e:24:26:16:bd:dd:56:
3f:b9:0a:c7:1d:55:2f:8a:28:46:58:5c:0c:a6:4b:f9:b1:02:
2a:fd:0e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:39 2025 by rpki-client