Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tT5UR8oGTpiuCDVWxyHRTy2aalI.cer
File: tT5UR8oGTpiuCDVWxyHRTy2aalI.cer (raw, json)
Hash identifier: PQPMts0DZBdRSpgBsJNfuWlizasRNUylBhnOoI5TyNU=
Subject key identifier: B5:3E:54:47:CA:06:4E:98:AE:08:35:56:C7:21:D1:4F:2D:9A:6A:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9E8DCD2773
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf6c24-ed3d-41ea-98f7-173f2e7a36f1/1/tT5UR8oGTpiuCDVWxyHRTy2aalI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf6c24-ed3d-41ea-98f7-173f2e7a36f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:04:29 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 2.58.92.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680983865203 (0x9e8dcd2773)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:04:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b53e5447ca064e98ae083556c721d14f2d9a6a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ae:60:79:5d:92:99:25:4f:a1:4e:fd:fa:85:
4b:fe:71:29:73:ea:0c:ee:dd:5e:8f:08:0c:54:d5:
61:84:70:1b:68:f6:19:da:aa:a5:32:4f:9b:2f:9d:
70:93:67:98:c2:ac:3b:16:07:90:a4:05:00:f7:dc:
77:10:b8:b9:93:59:ab:45:4f:1a:8c:49:5b:92:ca:
7e:a1:bd:d9:61:b4:0a:c6:41:f7:5b:55:4e:15:d3:
d0:20:bc:68:b4:66:2d:4a:8e:95:84:ec:9a:f9:41:
bc:68:78:51:15:33:a7:3a:b7:19:0d:88:89:c5:5d:
be:1a:18:4d:76:f7:9b:b6:f6:ba:e3:aa:d9:cf:b1:
4d:b3:96:f0:52:c4:b9:9a:11:67:44:61:61:b7:30:
c7:97:23:8a:e5:4b:3d:3a:ce:51:a5:ae:5a:d6:e4:
a3:2e:b2:e9:fb:2e:00:c9:e4:e7:1b:fe:10:2c:5d:
0d:b0:87:d0:60:3f:1d:a0:96:e8:e3:df:ce:ec:b5:
48:2c:2f:9c:49:b6:5a:f6:79:ec:9a:10:0e:be:c0:
8e:fc:61:ff:ea:be:41:da:8f:63:67:85:a7:8c:08:
1e:5c:d0:45:fc:d1:af:3d:07:1d:39:78:79:71:d5:
10:04:c5:12:85:63:59:cc:91:2b:24:dd:3c:50:c4:
44:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3E:54:47:CA:06:4E:98:AE:08:35:56:C7:21:D1:4F:2D:9A:6A:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf6c24-ed3d-41ea-98f7-173f2e7a36f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf6c24-ed3d-41ea-98f7-173f2e7a36f1/1/tT5UR8oGTpiuCDVWxyHRTy2aalI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.92.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:69:ec:da:27:d0:24:3b:4a:5c:92:fc:bc:5d:17:81:cd:5b:
3f:78:48:ec:bf:f1:56:d8:4a:a9:2b:f0:f7:69:bc:e1:01:6c:
6c:81:de:e3:97:a4:e0:4f:9f:84:26:c4:6f:8c:14:59:a1:bc:
05:3a:59:39:ef:aa:ee:18:b2:80:60:9f:41:0f:df:ab:2a:8a:
c3:65:18:e5:89:12:fd:72:fb:0c:9a:31:88:c6:e7:cf:ab:e1:
17:17:68:ec:50:74:05:bc:e6:ff:f9:d7:bb:d9:f5:3a:80:e8:
e9:b0:6b:40:bd:f6:18:be:2a:e3:cb:31:a8:4c:94:50:61:09:
20:46:1f:24:20:f1:0b:f8:3c:0e:37:2a:f0:8a:9a:f6:88:88:
02:1e:dd:48:b5:46:fc:a2:23:c8:45:c3:cc:86:47:ba:36:04:
97:76:81:bd:0d:f1:a5:b4:44:7d:65:39:09:e8:73:b5:df:16:
b7:fc:f3:59:9e:58:73:43:de:70:89:e1:56:42:db:f2:33:1a:
29:b3:52:b1:82:f6:5e:ba:b5:4c:89:84:54:b8:dd:bd:d3:37:
6a:69:f2:fa:11:02:92:14:e8:fb:5b:91:95:fb:8f:86:77:b0:
c2:e1:a7:81:20:0b:26:3f:8c:bc:94:23:ee:68:30:55:78:0d:
e2:f9:a5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:18 2023 by rpki-client on console-ams.rpki-client.org