Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uNTTBIoAMnr7hYDAW03tTQSdFtk.cer
File: uNTTBIoAMnr7hYDAW03tTQSdFtk.cer (raw, json)
Hash identifier: WmbfR4iFvBGYS4mR+wS+B6F4ZkVBYQBvT9ot5nlq2IM=
Subject key identifier: B8:D4:D3:04:8A:00:32:7A:FB:85:80:C0:5B:4D:ED:4D:04:9D:16:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 99CEFD6350
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/5aa382-ee14-43db-86f7-9ffc92a158be/1/uNTTBIoAMnr7hYDAW03tTQSdFtk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/5aa382-ee14-43db-86f7-9ffc92a158be/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:01:42 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 194.45.36.0/23
IP: 194.45.196.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660602708816 (0x99cefd6350)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:01:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8d4d3048a00327afb8580c05b4ded4d049d16d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d8:27:a0:c1:2f:1a:fa:81:24:c2:9c:10:f3:
0d:be:d9:7f:ca:e1:73:db:70:ac:1b:ee:8b:20:83:
34:11:70:61:75:2f:d5:f7:c8:f3:a7:d4:1c:f7:a0:
2a:1f:a2:76:5a:cf:d1:a7:35:cc:5d:72:62:7e:dd:
ae:f5:a9:71:12:ba:2b:87:f8:f3:c8:9c:15:a8:19:
e9:c1:41:7f:29:57:e6:0e:e8:d1:5f:2e:0d:fe:fa:
1a:89:fa:73:2e:f9:c5:c2:60:a7:3e:f5:ff:24:e3:
ae:90:bf:fa:99:fb:81:db:5c:df:9e:66:0e:02:3a:
d8:4f:fa:4e:d5:b9:61:fe:3e:28:b7:02:d0:f7:bb:
30:d5:55:71:10:f7:0a:8a:e8:bd:10:8a:89:54:cc:
83:bc:fc:17:07:fd:ad:ce:43:77:87:33:b8:a7:4c:
ba:39:0c:3e:ca:c5:31:63:a7:b9:d7:c7:9a:65:e8:
5a:d8:06:83:a8:57:51:92:68:97:c0:8a:6e:68:6c:
4f:c9:37:fa:1e:ad:03:ca:08:c2:58:46:7d:bc:91:
0b:9e:ee:df:89:cd:c6:61:50:a0:03:1d:16:e4:5c:
b1:9e:04:22:58:b5:3d:4b:9e:c6:26:cc:74:21:39:
d7:be:f0:5d:f1:32:ea:52:22:32:66:05:ce:a6:b2:
2e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D4:D3:04:8A:00:32:7A:FB:85:80:C0:5B:4D:ED:4D:04:9D:16:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5aa382-ee14-43db-86f7-9ffc92a158be/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5aa382-ee14-43db-86f7-9ffc92a158be/1/uNTTBIoAMnr7hYDAW03tTQSdFtk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.45.36.0/23
194.45.196.0/23
Signature Algorithm: sha256WithRSAEncryption
52:13:10:8e:86:bd:d4:b3:a6:90:24:08:82:ca:4c:8c:e2:7b:
00:ae:71:00:fe:85:43:6f:4f:e8:80:58:b1:8a:7d:4d:9a:5b:
0a:b5:d7:40:dc:6e:0f:17:8a:c5:67:9d:f9:ad:b8:b1:84:95:
da:91:7e:34:21:1c:5a:1a:7d:88:da:89:b0:00:24:c4:cf:4d:
b0:99:df:3f:b2:26:13:ba:35:ad:f3:4a:6c:ad:dd:03:ad:4a:
58:e2:e4:d4:db:a0:b3:6c:e2:35:a7:96:a0:f7:46:c2:f4:73:
3c:aa:cd:74:fa:54:a5:f9:e5:20:0b:22:9b:e7:dc:9a:42:0d:
b1:62:db:1c:1e:43:6e:6e:67:b1:37:98:f2:ae:30:8f:7f:bb:
aa:c2:ca:9b:c9:2c:02:8c:c4:ec:d6:e2:d4:2a:87:45:ea:bf:
eb:88:ca:b7:c8:46:88:9c:50:8f:35:a5:ac:58:41:99:57:1f:
f7:42:2e:44:3f:4a:17:d7:e2:84:5c:50:e2:54:c0:f7:04:4e:
1f:ff:ff:b4:d0:cb:47:d7:71:f4:ea:f4:9a:da:cf:28:2a:f6:
a0:96:39:ed:c4:dc:93:7d:64:c8:7a:09:70:62:e2:5d:78:e2:
ff:8e:ec:41:83:12:b4:82:0c:ad:59:d3:b4:66:a8:f7:77:59:
6c:16:cc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:31 2024 by rpki-client on console-fra.rpki-client.org