Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tFm-j50Gj65BQFgEmLyrbyH7TLU.cer
File: tFm-j50Gj65BQFgEmLyrbyH7TLU.cer (raw, json)
Hash identifier: mN/aNdjApOAFp+RnxJM3Z+QEcdA+i5iqMOS6GJvKH6k=
Subject key identifier: B4:59:BE:8F:9D:06:8F:AE:41:40:58:04:98:BC:AB:6F:21:FB:4C:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A0B6FD7E23
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/7af521-48b0-4e8e-ac5f-bbb6fb695fb5/1/tFm-j50Gj65BQFgEmLyrbyH7TLU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/7af521-48b0-4e8e-ac5f-bbb6fb695fb5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:00:40 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.138.140.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 690264833571 (0xa0b6fd7e23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:00:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b459be8f9d068fae4140580498bcab6f21fb4cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f0:49:d3:dd:5c:f8:6b:b3:d3:12:34:53:3d:
6f:5b:69:87:2e:2f:42:57:16:85:e0:b5:4e:3a:80:
41:70:17:9f:4e:b2:2b:b0:9b:58:eb:b9:60:7a:29:
31:49:35:c8:c0:9b:36:f6:38:67:2e:4d:11:68:b1:
79:f0:33:77:9a:48:ed:91:ae:c2:64:a5:80:31:43:
df:95:ff:00:36:b5:41:9b:28:33:b6:b4:42:ab:d4:
76:45:3e:fa:63:cd:e8:fb:07:1c:6c:39:94:f2:91:
29:62:61:6a:6b:f7:6b:94:a4:4e:2b:94:34:51:aa:
d4:ad:c7:e8:3f:e4:9a:4c:29:f1:90:4b:54:75:ac:
d9:52:6c:9f:a3:b1:c2:6f:9e:d7:28:1b:8a:bc:50:
0d:6d:07:c5:fb:76:36:80:2e:32:84:c3:33:e1:14:
88:af:0f:c9:d3:75:3c:84:c5:6e:b2:19:ae:d1:e1:
99:09:44:ba:27:da:c9:ba:d9:a3:12:9a:e3:ee:f5:
df:90:51:c9:3b:5f:6a:fa:55:dd:ef:3e:12:4d:ef:
76:41:41:c2:58:ae:19:9f:c3:56:63:e9:09:d4:23:
24:69:b5:ed:14:46:95:b5:5e:01:da:e9:70:e5:40:
00:24:cd:ed:15:7e:e1:55:95:b1:b8:bb:5e:00:07:
fb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:59:BE:8F:9D:06:8F:AE:41:40:58:04:98:BC:AB:6F:21:FB:4C:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/7af521-48b0-4e8e-ac5f-bbb6fb695fb5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/7af521-48b0-4e8e-ac5f-bbb6fb695fb5/1/tFm-j50Gj65BQFgEmLyrbyH7TLU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.140.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:7a:6a:84:bc:53:1a:d5:c9:6c:26:cf:fd:ce:d5:d7:53:a2:
93:db:f4:a3:f1:7d:39:7b:e4:fa:2e:9b:4c:8e:f7:c4:a4:0c:
66:27:5c:44:d6:da:ca:53:9d:ab:31:b2:ac:b2:09:2c:5c:af:
0e:eb:6b:c9:6d:e6:23:c9:0d:e3:6e:ee:67:d3:cd:e4:9a:d5:
d3:cb:1e:1c:bb:dd:ca:2c:f7:35:89:fa:a2:91:74:d8:e4:ff:
38:7f:95:16:cd:56:fd:29:f6:e3:34:87:ca:6e:f5:c9:54:a1:
a0:82:17:1f:04:22:0c:54:f0:7f:0f:c5:6a:55:6d:3c:8d:bd:
71:73:a0:d3:46:1c:3e:d7:48:32:af:4d:2a:fd:b9:64:ea:da:
0c:2f:73:e6:79:f0:a3:0e:06:f6:03:98:a1:da:8c:2d:bd:ce:
fb:7f:26:5e:77:0a:ab:58:9d:87:3c:11:7e:8f:b0:bf:42:de:
5d:39:2f:92:da:54:33:f1:23:a3:9c:85:43:30:1d:a4:13:51:
c6:51:ca:18:46:7c:5a:c3:2d:96:9c:cc:3d:d3:2f:37:dc:e8:
59:ca:19:9c:c8:33:40:4b:b1:19:e4:ea:f8:77:d9:68:59:23:
d8:a1:8f:e8:be:f4:62:72:a4:ad:54:e5:d4:c4:21:ae:eb:cc:
34:b7:87:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:20 2024 by rpki-client on console-fra.rpki-client.org