Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rZcLW-fV-Kd5pI97FHJNw865eSs.cer
File: rZcLW-fV-Kd5pI97FHJNw865eSs.cer (raw, json)
Hash identifier: 91DoptVL7nGvl20EhVy28sEIwFGs4/0vpwar9FHWAfY=
Subject key identifier: AD:97:0B:5B:E7:D5:F8:A7:79:A4:8F:7B:14:72:4D:C3:CE:B9:79:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A25355E20A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/3d0d9b-9a17-4432-8f21-2db4e86e9e5c/1/rZcLW-fV-Kd5pI97FHJNw865eSs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/3d0d9b-9a17-4432-8f21-2db4e86e9e5c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:53:47 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 212.6.38.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697182839306 (0xa25355e20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:53:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad970b5be7d5f8a779a48f7b14724dc3ceb9792b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:71:09:46:0a:00:31:95:a0:f8:19:8a:78:
6a:dd:e9:47:51:75:18:6f:c8:0d:1d:ff:d4:49:9d:
30:b6:22:5b:67:37:ce:3a:16:84:c8:f0:44:e8:39:
4c:fd:8d:da:bf:06:fc:dd:5a:08:b6:b7:2e:2c:0f:
48:2a:b5:e2:c7:8f:10:03:23:a4:d1:78:ea:2a:c1:
e8:31:aa:f4:5c:87:78:da:bc:be:e8:2a:39:8a:d8:
9a:85:a7:f6:39:e6:96:10:82:82:ab:1e:b9:86:3f:
83:1a:e2:40:2c:66:2b:c7:03:8d:7a:f7:74:6c:9b:
99:8c:3f:0a:be:38:ef:f3:e2:36:bb:8e:c3:42:35:
c9:22:fa:92:38:e7:b6:aa:8e:1b:6f:c0:f1:b9:fc:
59:d7:c9:d4:21:97:1f:f7:44:ef:6e:4d:10:bb:12:
05:3a:d9:1d:f8:80:29:15:2e:45:2d:e6:b9:3a:f8:
a8:a3:30:12:e7:0b:1a:ed:43:3e:ea:6f:ac:0e:9e:
ea:54:f0:82:2e:4b:bf:87:c4:c8:05:71:fb:c4:0e:
b2:a9:87:8a:d2:e2:84:3c:b1:48:4d:3c:1b:68:94:
58:cc:af:44:26:62:f6:cc:5d:83:0c:4c:aa:09:42:
80:6f:63:a7:7f:4d:42:a3:27:97:33:38:e1:97:1a:
17:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:97:0B:5B:E7:D5:F8:A7:79:A4:8F:7B:14:72:4D:C3:CE:B9:79:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/3d0d9b-9a17-4432-8f21-2db4e86e9e5c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/3d0d9b-9a17-4432-8f21-2db4e86e9e5c/1/rZcLW-fV-Kd5pI97FHJNw865eSs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.38.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f3:ad:31:a8:b7:1d:38:68:58:eb:6d:7a:62:28:b9:1b:7e:
55:ec:43:c1:16:be:a8:09:82:04:1b:7f:c7:98:9b:16:cf:f6:
16:c4:7b:cc:2e:d7:ed:3f:6e:37:be:7e:22:b0:e3:9d:6d:fe:
5a:7a:e6:45:27:7b:80:cb:92:9e:b1:cc:a9:65:36:0a:81:d9:
e5:fc:6c:37:cc:bc:c6:1f:5a:23:c1:91:67:2e:b3:b4:ae:25:
99:f5:ad:f1:f0:f7:df:c4:a7:17:3c:6a:75:e2:2c:b1:3a:0d:
3b:f3:d5:eb:b8:55:dc:e3:c2:1f:c4:e7:c6:44:98:a3:e8:1b:
55:58:20:54:85:d0:2c:a4:c8:56:94:4f:af:e4:dc:24:bc:de:
50:2d:cf:ee:77:86:31:ce:cc:4e:46:b0:6b:ad:44:a2:1a:19:
fa:c3:91:e6:8e:fd:d3:69:4f:16:48:b4:5b:d8:78:70:df:1e:
f7:ed:6f:63:a2:c5:86:f1:9c:9d:31:f3:a3:d6:0c:37:43:57:
e6:29:d7:1d:79:46:99:48:ca:b1:59:81:01:5c:c7:23:6d:6d:
7e:19:1a:e2:25:2a:fc:5a:41:bf:d4:57:43:03:41:d9:84:72:
eb:74:ca:db:6f:d9:9f:d0:68:27:2a:26:28:eb:a7:4c:09:b6:
04:13:c7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:04 2024 by rpki-client on console-fra.rpki-client.org