Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xblcBhMV6X9w90Oslaq9ujWF4bc.cer
File: xblcBhMV6X9w90Oslaq9ujWF4bc.cer (raw, json)
Hash identifier: /UKhlsEnVS7eupRn+5lMsF2ZmOb4SW2e61VQBU0Zbhg=
Subject key identifier: C5:B9:5C:06:13:15:E9:7F:70:F7:43:AC:95:AA:BD:BA:35:85:E1:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AF78E3E0C0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/875f41-2bc6-43b7-9ed4-20772f0d1656/1/xblcBhMV6X9w90Oslaq9ujWF4bc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/875f41-2bc6-43b7-9ed4-20772f0d1656/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Apr 2022 09:11:25 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 2a0f:6f40::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 753647476928 (0xaf78e3e0c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 1 09:11:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5b95c061315e97f70f743ac95aabdba3585e1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:db:fe:b5:da:02:97:02:9c:19:ed:ae:a2:2e:
3c:5d:65:69:7d:f5:b1:38:ca:e4:6b:1c:57:8d:94:
94:ed:92:37:8d:3c:e8:52:4b:d1:6b:2d:d2:43:16:
3c:b3:49:e7:0b:14:76:65:06:33:17:56:f9:03:aa:
d4:8d:66:57:76:8e:7c:3b:08:13:c6:27:01:e5:06:
cf:41:31:fb:36:9e:c5:c5:0f:17:75:33:43:20:0c:
8e:83:fa:51:5f:f2:6c:b2:2b:76:27:35:44:6a:06:
7c:26:39:27:92:17:c8:9d:48:a0:57:79:ac:65:dd:
bc:44:6e:30:b8:39:45:fe:c4:8e:26:03:fc:d8:2a:
17:83:8e:97:da:a8:5d:61:46:63:25:72:cc:52:57:
df:73:fd:74:b5:3c:72:55:43:27:03:32:25:ce:d2:
87:ab:e6:a3:9b:7a:88:b8:36:10:b6:da:e3:bf:e3:
c4:5d:f2:58:de:69:58:29:57:2c:3f:d5:55:5e:2a:
f8:ac:10:21:8a:19:83:e9:74:b4:6d:94:92:08:04:
97:61:39:1d:07:02:9a:73:6b:9a:26:05:52:d0:e3:
22:e9:a0:20:88:7a:91:bc:0b:e9:5d:22:9f:da:88:
fe:5f:95:01:3e:78:4e:92:c7:13:bc:0d:47:67:22:
b3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B9:5C:06:13:15:E9:7F:70:F7:43:AC:95:AA:BD:BA:35:85:E1:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/875f41-2bc6-43b7-9ed4-20772f0d1656/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/875f41-2bc6-43b7-9ed4-20772f0d1656/1/xblcBhMV6X9w90Oslaq9ujWF4bc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6f40::/29
Signature Algorithm: sha256WithRSAEncryption
0c:b6:99:46:7d:29:f1:08:a9:e7:ee:03:4c:0c:7c:4d:78:1b:
d0:ad:a5:37:7a:a6:91:df:05:5f:68:b7:0e:b2:4c:7d:00:36:
1f:56:0a:30:d9:c1:c2:ed:51:f0:9b:81:eb:8a:48:63:54:66:
99:5d:cd:be:07:f6:5b:27:b0:46:04:68:ad:c1:25:5c:80:b3:
a4:9a:aa:cf:61:e4:15:55:93:9f:ee:71:3b:d4:f6:66:99:33:
be:52:bb:8a:15:3b:6c:12:5e:4a:90:ec:a6:d3:7c:69:fc:0b:
17:00:d4:53:e6:43:60:38:4e:80:ae:76:46:09:09:13:03:a7:
eb:30:49:2d:84:fa:3e:d6:ee:39:39:6c:fd:6a:1f:19:2b:e9:
f1:cb:50:f3:2b:0a:b9:c3:3f:1d:b4:3a:4e:54:f8:97:84:20:
ef:c7:d7:d9:11:20:3b:bf:ab:4c:11:65:77:51:d6:c8:3e:79:
42:7b:54:bd:18:fa:46:7d:6c:10:67:57:7a:17:1c:bc:1d:fe:
9f:e9:02:b8:19:3c:1f:e8:04:72:92:9a:a4:47:4d:e0:e8:a9:
4f:91:0e:5d:0b:29:d3:d7:31:bb:41:5d:5e:df:f1:6c:a8:96:
de:e9:c3:76:39:22:9a:15:73:05:6f:1b:76:1f:ff:d9:d2:05:
06:11:5d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:11 2024 by rpki-client on console-ams.rpki-client.org