Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uEBKteaS51LsrB-LvE8MVWx7exs.cer
File: uEBKteaS51LsrB-LvE8MVWx7exs.cer (raw, json)
Hash identifier: VDAL72qv3flva+CRuB98JyeO4Gcz0b6ZnBHdo8kFLtE=
Subject key identifier: B8:40:4A:B5:E6:92:E7:52:EC:AC:1F:8B:BC:4F:0C:55:6C:7B:7B:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AFDEB804EC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/972f1b-5f7e-4f61-8e37-f469d839ba8e/1/uEBKteaS51LsrB-LvE8MVWx7exs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/972f1b-5f7e-4f61-8e37-f469d839ba8e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 08 Apr 2022 14:29:07 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 2.59.252.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 755355878636 (0xafdeb804ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 8 14:29:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8404ab5e692e752ecac1f8bbc4f0c556c7b7b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:1d:94:a0:26:12:aa:79:00:b4:4a:d6:1c:
11:35:fa:ea:67:af:7f:73:24:9b:fe:6b:1b:86:71:
d0:81:e4:77:e2:19:9f:f9:8b:36:7c:cf:81:41:af:
53:24:5b:0a:72:78:bd:26:b8:b2:ac:02:2b:89:b3:
4a:e1:0a:13:10:9a:72:25:09:a4:da:68:ff:cc:6f:
eb:c7:d7:88:7f:51:cc:84:2f:c6:cf:98:3a:fb:1d:
9e:12:2c:d7:fd:3d:a1:6e:48:91:02:7f:cb:67:16:
11:1f:98:92:d3:de:90:1b:d1:a8:a1:99:c2:e4:83:
48:48:90:f7:07:8a:06:79:47:42:e1:8f:e5:45:14:
2d:a6:46:7a:7f:85:24:1a:3d:30:e0:e1:04:1e:ca:
61:a1:10:b7:45:e2:b9:dd:47:f5:cd:f3:68:db:4b:
b7:c8:9e:85:bf:b0:d5:ed:64:b0:e1:02:4a:c2:89:
d4:71:fb:3f:4a:9f:e5:37:6a:09:84:12:ee:5d:c7:
79:19:f5:4f:bc:1a:21:4b:a8:31:a2:cd:c1:ed:90:
7b:14:45:03:1b:30:27:e9:fc:15:b9:06:af:d6:da:
80:f3:10:d7:fa:58:1a:df:0d:e0:2c:e7:1d:7c:c8:
33:87:ae:8a:75:29:b4:0d:6a:41:9c:27:d4:48:3c:
0f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:40:4A:B5:E6:92:E7:52:EC:AC:1F:8B:BC:4F:0C:55:6C:7B:7B:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/972f1b-5f7e-4f61-8e37-f469d839ba8e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/972f1b-5f7e-4f61-8e37-f469d839ba8e/1/uEBKteaS51LsrB-LvE8MVWx7exs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.252.0/22
Signature Algorithm: sha256WithRSAEncryption
44:6d:f2:5e:07:28:fb:6e:91:81:f8:b5:8c:ef:f0:63:b4:42:
8b:27:d5:e7:f2:b6:f4:54:bf:65:65:a1:7f:cc:5c:89:7f:97:
44:10:29:f9:8a:83:d1:83:d4:cc:f3:ff:a0:c5:94:0b:92:41:
0c:3f:e8:ab:0b:ae:88:fd:dc:4d:5e:d7:8a:36:b0:2a:a8:5b:
fe:ac:a2:3e:fd:dc:27:22:42:f1:05:74:0e:da:ca:c9:f3:a3:
fc:57:69:87:dd:40:d4:70:f9:ba:2a:4f:b6:39:05:9a:f8:81:
5a:c9:90:54:a6:af:d7:38:51:50:1a:93:70:31:8f:fc:2a:20:
0b:b3:c9:70:c0:59:61:f5:16:80:71:93:96:c0:7a:79:56:b9:
ef:5a:9d:42:1b:32:df:99:f6:99:95:ea:83:65:7a:26:65:d2:
de:f6:1c:71:79:d1:7e:29:22:65:bc:cb:2a:87:3e:34:20:6a:
cc:93:99:ee:68:bb:65:be:03:e5:c4:41:aa:fa:03:4b:18:e1:
fb:e8:00:b8:f3:a4:c2:d9:00:5f:30:fc:5c:33:61:b8:5a:cf:
38:c1:b5:24:f8:a6:df:bf:f4:58:4c:72:2e:78:11:2c:d7:14:
a6:f8:49:ad:db:e5:06:81:78:30:0f:48:7a:18:71:c1:77:75:
4a:b3:c2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:13 2024 by rpki-client on console-ams.rpki-client.org