Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rstb7TwkRXPnnRFsena7Cr7Pvi0.cer
File: rstb7TwkRXPnnRFsena7Cr7Pvi0.cer (raw, json)
Hash identifier: hKgeDZP0AewzxOFF/OU+h6AIppLesFJHQwsHD9UlBEE=
Subject key identifier: AE:CB:5B:ED:3C:24:45:73:E7:9D:11:6C:7A:76:BB:0A:BE:CF:BE:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 99C7E0E1A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/3c157f-0e12-414e-a1ff-7e216877862b/1/rstb7TwkRXPnnRFsena7Cr7Pvi0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/3c157f-0e12-414e-a1ff-7e216877862b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:01:21 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.205.203.0/24
IP: 2a10:b800::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660483400103 (0x99c7e0e1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:01:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aecb5bed3c244573e79d116c7a76bb0abecfbe2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:28:41:07:1b:71:a5:8e:a6:de:a4:1a:41:6e:
6a:fd:da:fc:e5:bd:0e:c4:d3:74:b4:7f:83:bf:c6:
18:8d:4b:e1:2b:34:8e:3c:00:f5:1b:97:e0:c8:1d:
1d:43:a8:90:68:8a:ff:95:0d:db:51:6c:08:79:04:
61:7d:69:1d:9c:c9:f3:bd:8d:4d:37:df:9c:33:e2:
d4:8c:4e:34:5d:15:e7:06:d6:b7:bc:c8:94:2c:6e:
a4:ed:65:a9:6a:67:dd:f4:d5:70:a9:96:91:63:e9:
1b:42:8c:1b:8f:ae:af:4e:bd:58:3d:50:4b:ec:f3:
ca:8d:fb:20:16:cc:e4:a5:3a:72:fd:60:69:dd:69:
3a:82:98:43:7a:1c:c0:95:c1:4e:b1:75:71:f0:14:
ab:56:9d:4f:d8:5d:54:55:da:db:c9:3d:2e:3a:0b:
a5:66:a3:40:af:cc:33:e5:d0:c5:45:18:c3:e6:59:
b3:26:dc:2a:8e:1c:ae:00:32:1f:91:c8:26:0b:31:
70:c8:8e:60:d5:52:5e:78:88:03:47:4c:27:80:63:
8a:dc:a7:69:11:3f:99:87:de:91:a7:bc:b3:3b:91:
17:8a:7c:b3:5a:78:7a:cf:03:9c:40:3b:48:69:b2:
8c:12:e4:7a:11:c3:e6:0b:be:49:35:da:55:8f:f7:
91:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CB:5B:ED:3C:24:45:73:E7:9D:11:6C:7A:76:BB:0A:BE:CF:BE:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3c157f-0e12-414e-a1ff-7e216877862b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3c157f-0e12-414e-a1ff-7e216877862b/1/rstb7TwkRXPnnRFsena7Cr7Pvi0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.203.0/24
IPv6:
2a10:b800::/29
Signature Algorithm: sha256WithRSAEncryption
87:5b:9a:fd:30:32:1b:b5:42:36:89:eb:30:2b:e2:1e:c5:c0:
90:71:39:a2:86:8e:1c:14:d8:af:7d:ce:bc:c3:30:ee:5a:fe:
a8:ab:6c:8e:97:cd:f5:88:10:26:be:2a:b5:4a:7d:94:0b:0b:
53:cf:5a:97:8c:49:c9:48:28:f3:21:e0:f0:ee:f9:7b:09:78:
ae:74:6d:6a:82:4d:da:80:a7:c1:84:a5:e1:2d:61:57:9e:58:
76:53:5c:75:f1:f7:6f:05:70:2a:3c:9f:d5:17:62:66:e5:c0:
cc:41:49:54:4f:94:73:c4:73:77:75:45:13:2e:c1:9e:ad:3d:
85:64:b9:0b:b9:99:f7:18:58:a4:76:32:68:af:6b:5e:3a:7a:
76:c8:8f:87:8a:ea:15:c9:ee:7c:e8:78:6a:3f:d2:d7:e1:d0:
1b:ab:9e:e1:e3:c0:7a:15:5e:24:c1:30:6e:ee:e6:32:c6:c4:
af:f5:15:3f:40:46:fb:08:63:5d:55:b5:96:d6:db:cb:f1:d8:
25:fa:cf:c1:c2:fd:e6:0b:d7:57:c5:5d:4f:7f:6a:ab:eb:be:
90:6a:99:8d:22:4f:eb:dd:af:e5:80:c4:db:b2:77:60:9e:4b:
97:d2:db:1c:bd:c6:6f:bf:f9:c5:54:9e:30:ff:93:d0:9c:66:
b9:d4:72:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:43 2024 by rpki-client on console-ams.rpki-client.org