Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rioCdkYfSC_8ljMZpD1Zm1vkZoY.cer
File: rioCdkYfSC_8ljMZpD1Zm1vkZoY.cer (raw, json)
Hash identifier: kiYJd3g9nkZhhVvcSOxlsLFG2js3I08zQDt864i+Aos=
Subject key identifier: AE:2A:02:76:46:1F:48:2F:FC:96:33:19:A4:3D:59:9B:5B:E4:66:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 997A3CF020
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/48714b-cce3-447d-8b4d-7c166e53d373/1/rioCdkYfSC_8ljMZpD1Zm1vkZoY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/48714b-cce3-447d-8b4d-7c166e53d373/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:57:24 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.29.43.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 659180810272 (0x997a3cf020)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:57:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae2a0276461f482ffc963319a43d599b5be46686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:1f:9d:02:40:6b:e8:a1:b4:21:86:a8:a7:
53:cb:f8:e2:37:c8:95:ad:24:c7:6f:6c:2d:aa:be:
af:20:f9:45:f4:64:e0:0c:19:48:3d:be:24:41:c7:
47:cc:0a:cc:4c:f8:42:f8:39:e2:a1:2c:86:84:8e:
93:3d:3e:6b:af:fb:93:4a:10:33:1a:af:32:79:3a:
8b:fd:dd:82:48:72:ca:60:dd:41:1c:87:ce:e1:47:
b7:78:ae:fb:23:92:e3:9a:f4:3e:14:3d:67:f8:6c:
61:ce:f9:08:80:bb:69:db:1f:82:04:0c:b4:f5:15:
39:f5:a2:10:98:3b:6b:ce:92:b3:31:6b:32:49:ab:
62:d4:1a:86:e8:b7:cf:7c:aa:a8:72:98:46:32:1b:
5a:d2:2f:0c:99:c1:5c:53:a2:75:f3:b2:34:be:86:
3f:ef:8f:f9:ab:61:6c:10:e7:c2:23:6f:26:34:e4:
a0:ea:99:42:c3:a4:19:97:3c:37:10:a8:92:3a:df:
8e:e4:2e:e0:43:d0:62:5e:70:99:87:0b:fa:ed:4a:
ed:83:fb:bf:71:93:ed:1c:02:42:fc:fe:b6:80:cb:
cc:40:fc:65:e2:83:c3:6f:12:a9:5e:e1:3a:4e:65:
8f:91:10:ff:56:5e:93:77:d5:7f:40:2d:f5:db:bf:
98:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2A:02:76:46:1F:48:2F:FC:96:33:19:A4:3D:59:9B:5B:E4:66:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48714b-cce3-447d-8b4d-7c166e53d373/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48714b-cce3-447d-8b4d-7c166e53d373/1/rioCdkYfSC_8ljMZpD1Zm1vkZoY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.43.0/24
Signature Algorithm: sha256WithRSAEncryption
70:75:0d:02:77:8f:af:09:88:fd:49:a4:29:e8:a1:24:8b:e8:
9a:c9:3c:fc:90:18:72:e9:78:d6:b5:7a:65:a0:96:b2:c0:11:
4d:df:00:d4:ff:e7:ab:8f:1a:77:7a:8c:a7:d5:51:2e:d9:b2:
c4:27:95:9c:82:e0:73:62:48:c5:88:e8:61:ce:84:e4:c3:06:
f7:18:c3:ac:2e:b9:3b:bb:61:01:ef:88:52:64:41:e4:57:ac:
b5:ff:5e:fd:29:dd:a7:5a:6a:73:0a:11:de:12:99:a0:2e:79:
a3:8e:83:99:c4:71:f3:40:56:b4:ba:19:da:e3:7b:6c:6f:0c:
e8:2e:ed:57:53:50:8f:02:62:d4:45:ca:0b:c8:bb:63:3f:0f:
d6:37:b8:19:56:3e:1e:20:0f:5a:1b:60:7b:04:91:60:06:e8:
56:27:a9:50:97:a1:a0:7a:ef:15:c0:44:f1:ad:54:4d:2d:33:
af:67:0b:c4:2a:f7:bd:93:f2:c0:9e:e2:b2:36:54:3b:85:b6:
6a:29:87:74:d7:03:bc:d6:de:1b:ef:a1:1a:e3:13:25:ec:ec:
21:04:87:18:6c:ce:30:73:06:36:27:0d:6d:29:93:c0:63:32:
a8:b6:ab:95:30:06:01:2e:57:19:23:df:c0:5c:13:61:58:4e:
8e:e8:d6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:06 2024 by rpki-client on console-fra.rpki-client.org