Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w5VF64g6JRRchy11csTFEHcE39w.cer
File: w5VF64g6JRRchy11csTFEHcE39w.cer (raw, json)
Hash identifier: NqNiM6w/X0UBU2K/mpZTpjLccMH+R+EQyuz0sO3pesg=
Subject key identifier: C3:95:45:EB:88:3A:25:14:5C:87:2D:75:72:C4:C5:10:77:04:DF:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9C5DCC483D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/7a5965-3e3b-4588-a67b-eda23f8932fe/1/w5VF64g6JRRchy11csTFEHcE39w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/7a5965-3e3b-4588-a67b-eda23f8932fe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:51:09 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 2.57.156.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671588567101 (0x9c5dcc483d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:51:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c39545eb883a25145c872d7572c4c5107704dfdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:78:76:e3:a9:ac:c2:0c:72:57:60:22:31:
87:33:94:e1:21:51:34:ca:65:b4:b0:78:28:97:78:
8f:c6:2e:dc:04:b5:58:e5:87:77:92:6b:9f:e1:4b:
4f:5a:af:1c:64:84:0a:49:93:0d:7c:42:43:ca:4c:
e2:dd:ca:c0:69:77:4a:e8:bf:24:a1:3b:f8:1c:5c:
db:7d:b9:78:19:87:65:d7:26:eb:1a:30:71:99:01:
8a:5b:87:7b:c5:d4:4e:a6:10:2f:51:33:ba:d0:1c:
ac:66:27:45:81:23:41:35:1a:87:4e:bb:e2:a4:6f:
95:72:20:ba:89:7a:40:c5:69:90:61:b6:5a:88:57:
39:f7:e0:5e:bb:a7:07:cd:d3:cd:82:d5:29:8d:d8:
ac:20:43:52:18:56:b4:17:b8:0c:ec:90:85:16:92:
a7:b9:e6:9c:18:c6:4a:22:63:16:2e:aa:17:dd:5e:
4a:20:09:e7:60:20:2b:ee:ad:73:46:b0:60:43:4d:
ed:5e:47:b9:33:b2:8a:97:1a:01:46:0b:03:80:6c:
b0:38:ef:8c:91:50:79:f4:c2:31:c0:af:f6:06:47:
5c:25:ef:d0:72:ea:f4:f0:6c:10:a0:35:a1:6a:0b:
bf:73:c7:26:3c:ab:38:a3:ce:bb:3b:7b:13:d4:46:
f3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:95:45:EB:88:3A:25:14:5C:87:2D:75:72:C4:C5:10:77:04:DF:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7a5965-3e3b-4588-a67b-eda23f8932fe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7a5965-3e3b-4588-a67b-eda23f8932fe/1/w5VF64g6JRRchy11csTFEHcE39w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.156.0/22
Signature Algorithm: sha256WithRSAEncryption
65:9c:bb:b7:06:ca:95:11:92:11:59:93:d3:06:18:22:16:9d:
b8:2e:7c:8f:36:24:69:6a:bc:03:19:77:47:f2:05:e7:a7:01:
dc:ac:10:c1:3e:da:6e:59:fd:15:5d:6f:aa:32:1f:8d:6d:20:
08:c1:7a:23:42:da:36:87:ad:20:7f:9a:26:fe:40:4f:f2:de:
68:8d:27:5d:26:78:08:1e:94:89:71:03:ca:7a:53:85:82:06:
01:b9:cb:33:87:cd:fe:1e:54:96:da:40:80:a0:1a:9c:e4:12:
e5:a4:4d:0c:d6:12:c7:0a:e2:3b:4f:ce:9a:db:3d:92:47:a5:
b5:c2:e6:83:bb:e2:52:02:ec:37:1d:68:8a:af:6b:23:30:77:
27:3d:7e:b9:59:8c:8d:12:4d:da:04:f4:1f:48:55:a9:c3:84:
43:e4:16:64:10:72:9d:ce:5e:17:5e:54:8a:03:20:b9:66:b5:
17:c6:e0:4a:cb:23:77:8b:ef:69:94:78:62:07:98:6e:8c:fa:
5d:70:b5:49:e4:e4:c3:ae:20:8a:be:d9:0f:ab:ae:87:36:79:
6a:15:ad:36:b2:20:b3:fd:28:10:ed:8e:5a:42:9c:96:91:dc:
b3:85:c7:54:4d:16:bf:02:4a:97:b8:eb:ce:f6:61:0d:e4:9c:
e4:25:78:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:39 2024 by rpki-client on console-ams.rpki-client.org