Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vgQmHxCpoCXacAV0r2usnP78PHA.cer
File: vgQmHxCpoCXacAV0r2usnP78PHA.cer (raw, json)
Hash identifier: mqd4EbJ2/J3y7TkY0ysiVG9ZyXNtsDMfEz7pGOHoZvs=
Subject key identifier: BE:04:26:1F:10:A9:A0:25:DA:70:05:74:AF:6B:AC:9C:FE:FC:3C:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AA6B18A529
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/292d76-7f9c-4c4f-bf3b-ae98258963e3/1/vgQmHxCpoCXacAV0r2usnP78PHA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/292d76-7f9c-4c4f-bf3b-ae98258963e3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:55:32 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 2a02:8e0::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 731941217577 (0xaa6b18a529)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:55:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be04261f10a9a025da700574af6bac9cfefc3c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:30:33:ab:6a:35:7a:b1:cc:65:74:bf:00:ca:
5d:03:f8:ca:8f:93:ec:48:42:f8:94:6c:52:a5:2f:
d6:a9:f1:66:94:7e:6b:e5:70:9d:5f:be:08:ac:1f:
5b:af:91:6c:fe:8d:a1:c2:f7:99:98:fe:91:0a:b6:
e2:9b:1b:c8:86:90:bd:8e:04:92:a1:13:4e:cb:64:
8f:12:13:64:7b:05:7d:cf:71:e9:ed:92:14:7a:13:
11:99:ec:d8:4e:37:3c:bd:71:6c:0b:9c:54:23:ae:
63:27:bd:ae:1b:e3:58:71:dc:6e:3f:d8:21:81:1a:
4f:f3:2e:83:c7:d1:14:c5:b5:53:04:af:5e:c2:63:
ef:be:0e:61:87:6c:7d:d3:a8:2a:f7:87:63:48:ca:
b3:9f:b7:cd:ef:c6:d1:42:f7:54:aa:05:15:a9:6f:
83:9b:4a:99:ff:50:c0:7b:a2:c4:92:9d:22:54:a0:
16:2d:4b:5b:0c:e5:b2:fa:65:7f:6b:4b:d2:e0:f6:
2a:4a:4e:9e:62:e7:fc:1c:a0:2f:22:a8:b8:79:2a:
21:d7:3a:8e:2e:be:84:a7:0f:f0:05:f2:e7:c7:53:
2c:a6:19:ad:2c:3e:a2:ea:62:c8:e6:6d:d2:ed:b1:
ee:3c:68:2a:93:16:48:a0:71:93:37:33:ca:45:f1:
d2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:04:26:1F:10:A9:A0:25:DA:70:05:74:AF:6B:AC:9C:FE:FC:3C:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/292d76-7f9c-4c4f-bf3b-ae98258963e3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/292d76-7f9c-4c4f-bf3b-ae98258963e3/1/vgQmHxCpoCXacAV0r2usnP78PHA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:8e0::/32
Signature Algorithm: sha256WithRSAEncryption
29:49:81:60:33:f1:37:8e:b3:14:b1:96:cb:09:4d:04:c9:1c:
f2:1a:f8:ec:52:bf:2e:48:2c:48:56:32:17:86:03:20:50:7f:
67:ea:b1:06:26:64:49:bb:81:59:b5:fe:ef:dd:9d:8f:9c:ca:
b8:ec:54:c5:92:6b:d2:f5:fd:cc:d3:76:ea:d6:dc:40:1d:16:
19:5a:d1:17:49:17:92:8c:20:60:26:4b:00:a5:8f:9e:b4:39:
27:76:c8:d6:36:ee:df:fd:d5:fa:8b:9e:81:5f:48:83:0b:ff:
ff:9a:ca:c7:b3:a8:f4:d4:be:d7:bf:72:f4:84:b2:9f:7f:af:
7d:0e:aa:c8:cb:88:88:9a:9b:d3:6c:8c:fe:c1:7f:04:0d:00:
e9:be:c8:e5:32:54:15:50:67:9b:98:dd:52:56:24:6e:78:55:
04:73:18:88:89:0d:15:ba:4a:25:79:94:76:c8:2f:ca:5b:b1:
b7:fd:5f:55:27:b3:ab:48:52:52:1d:bd:8f:04:b1:26:18:e7:
af:06:2b:04:de:65:34:92:3c:42:41:6b:97:ff:5a:eb:e4:27:
17:13:1b:91:63:9e:c2:d7:05:f3:47:ce:78:07:bb:0d:70:d5:
0e:6c:f6:cd:fc:4c:7a:c1:e1:5f:6c:13:fb:9b:c5:4b:b6:f0:
75:5c:3f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:43 2024 by rpki-client on console-fra.rpki-client.org