Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tB_uWRyOvP8cC4PEnSWKeyEb_og.cer
File: tB_uWRyOvP8cC4PEnSWKeyEb_og.cer (raw, json)
Hash identifier: M6GKaq09J9plDKQwLKtL/VvoHyMWvP0l/LBEsbwI4ZE=
Subject key identifier: B4:1F:EE:59:1C:8E:BC:FF:1C:0B:83:C4:9D:25:8A:7B:21:1B:FE:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9B79A03900
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/77127c-2ecf-4150-aca6-e44635daf021/1/tB_uWRyOvP8cC4PEnSWKeyEb_og.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/77127c-2ecf-4150-aca6-e44635daf021/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:54:10 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.10.240.0/22
IP: 2a02:e700::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667760474368 (0x9b79a03900)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:54:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b41fee591c8ebcff1c0b83c49d258a7b211bfe88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d7:aa:51:54:41:d0:61:c0:7a:0c:e9:ab:2a:
06:d4:be:d8:df:6f:e9:ee:da:22:b1:3f:5f:87:bd:
bd:28:ff:dc:61:46:3c:86:53:4b:3b:e2:ca:a7:12:
92:1c:26:41:c8:62:87:c1:7c:0e:d8:cb:b6:a7:3f:
ad:8b:c6:49:25:84:2f:00:18:60:43:8e:46:87:36:
ac:e1:05:ce:12:0c:b4:7a:5a:14:90:72:f2:85:39:
aa:55:cb:7b:f1:57:06:a1:73:b3:65:d5:e2:85:d6:
e7:92:48:74:39:41:0e:c9:d3:0b:1b:be:cc:ed:ac:
01:91:81:cb:fa:1a:f9:83:66:2b:a3:1b:65:db:cc:
7b:ba:7a:0b:e6:83:09:e8:3e:30:da:0b:9f:4a:d7:
9b:3b:9d:e6:e9:f1:c8:b0:c3:df:1a:42:e3:4f:74:
8e:43:a6:fc:9f:65:83:52:17:51:e5:39:33:c1:9f:
b0:4f:92:a6:b7:fc:c2:67:92:32:17:e3:13:c8:0d:
35:db:a8:dc:d9:5a:70:f9:0f:cd:72:6a:2f:86:c3:
21:4c:2d:86:9b:99:1c:42:c3:f3:19:f6:f9:25:93:
9c:25:cd:eb:32:10:12:a0:18:71:17:26:8f:66:e7:
97:8f:8d:c6:57:78:6a:e5:85:80:fc:08:22:55:b2:
b1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1F:EE:59:1C:8E:BC:FF:1C:0B:83:C4:9D:25:8A:7B:21:1B:FE:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/77127c-2ecf-4150-aca6-e44635daf021/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/77127c-2ecf-4150-aca6-e44635daf021/1/tB_uWRyOvP8cC4PEnSWKeyEb_og.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.240.0/22
IPv6:
2a02:e700::/29
Signature Algorithm: sha256WithRSAEncryption
29:6f:94:cc:7a:cc:8b:e5:f9:69:91:30:36:2e:7d:d2:65:81:
fe:8b:ab:c8:8e:0a:e3:25:f7:81:a0:77:ef:6e:de:5e:90:61:
8a:15:d5:6c:87:6b:81:9f:e9:96:a9:c6:89:fe:f4:1a:6e:92:
67:fb:0c:2d:fb:d6:56:34:3c:48:3e:9d:cd:d6:f8:2a:9d:6e:
83:51:e9:4b:de:73:38:b7:2a:7c:8d:98:ae:76:d1:47:28:e6:
5b:47:69:e6:91:3e:d7:e3:df:bd:76:f7:55:5a:e0:44:09:c8:
6d:81:4d:4e:86:7a:9f:59:66:67:dc:aa:c8:7e:15:4a:3d:5f:
a7:dd:37:bf:d6:6b:7f:bf:3c:74:f2:ef:0e:e6:31:e8:bc:aa:
4c:8e:9c:98:96:90:9b:7b:37:af:b2:c9:52:a1:13:8f:40:b8:
8e:7f:9b:6f:51:7c:28:ef:a8:df:12:65:8b:0a:6d:2a:39:bb:
9c:d2:75:e2:ec:7c:a4:24:86:25:1d:dd:51:f3:f5:d7:80:06:
62:ab:df:c0:38:1e:23:93:bd:80:e3:a1:14:f7:0b:2b:ec:7f:
e4:48:2a:fb:6c:48:30:59:01:0e:9a:3f:d9:dd:8e:04:5b:3a:
7a:ed:24:76:cf:eb:ec:ad:7a:b8:bd:3c:27:8c:f2:76:1a:f7:
5e:6f:3e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:00 2024 by rpki-client on console-ams.rpki-client.org