Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y0mE8LkcI29BmMTyan2_7obhEBw.cer
File: y0mE8LkcI29BmMTyan2_7obhEBw.cer (raw, json)
Hash identifier: +J/YRaTBZfyi4Vk76dixCwmGBJg8U1zXlnxQg6jZmL8=
Subject key identifier: CB:49:84:F0:B9:1C:23:6F:41:98:C4:F2:6A:7D:BF:EE:86:E1:10:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A7EA5922CC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/a84b1c-878e-42c6-a4cc-c42bd6ee6f6a/1/y0mE8LkcI29BmMTyan2_7obhEBw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/a84b1c-878e-42c6-a4cc-c42bd6ee6f6a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:06:32 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.9.104.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 721191248588 (0xa7ea5922cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:06:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb4984f0b91c236f4198c4f26a7dbfee86e1101c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5e:eb:b6:bc:cb:74:03:e4:7d:2c:26:ca:f1:
91:f1:0a:e9:a7:19:c0:ea:8e:ee:21:fb:9a:2e:fa:
f7:49:28:de:c7:56:6b:57:6c:87:2c:32:92:b3:97:
1f:6a:6b:f4:f7:4c:f8:94:b5:fb:4b:4d:ed:58:40:
be:20:d3:7e:e3:e6:01:c6:5b:8c:1a:bc:15:01:0b:
10:b8:6d:3c:14:bd:27:3a:5a:bf:ce:52:76:e6:b4:
5e:b8:eb:60:78:9d:07:65:39:e1:04:d4:40:d3:a4:
08:ca:a7:53:58:8a:f0:c2:62:44:ac:54:37:dc:a9:
c3:50:a8:77:d7:67:ca:83:be:3f:72:52:b5:f7:12:
95:6c:94:8f:6d:ba:2b:15:02:56:71:80:49:19:d1:
bf:72:1e:ec:a8:25:fc:48:8a:ad:81:f3:21:05:5f:
62:f7:8e:f7:b5:53:93:ce:9e:b3:a5:2a:8c:81:c0:
13:89:96:a3:3f:cf:d4:d2:2e:3a:79:a1:5b:23:54:
d3:8b:5e:63:ef:06:6d:97:af:b7:ac:0a:3c:e0:1b:
86:c5:be:cd:41:13:53:df:73:a7:14:f5:f4:6c:82:
f1:fb:20:06:a6:44:ee:91:43:44:56:5a:51:25:93:
04:eb:07:50:eb:7d:74:28:89:63:51:44:39:99:e8:
f1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:49:84:F0:B9:1C:23:6F:41:98:C4:F2:6A:7D:BF:EE:86:E1:10:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a84b1c-878e-42c6-a4cc-c42bd6ee6f6a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a84b1c-878e-42c6-a4cc-c42bd6ee6f6a/1/y0mE8LkcI29BmMTyan2_7obhEBw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.104.0/22
Signature Algorithm: sha256WithRSAEncryption
76:8b:61:68:22:f8:0b:81:9f:b3:77:a4:8c:7d:e1:ad:32:d2:
9d:6c:2e:9c:af:c9:1e:e6:2f:27:4a:5a:d8:a5:8e:a1:50:b1:
29:e7:1e:de:93:b6:34:c1:bc:1b:73:16:97:92:b1:eb:74:e4:
83:a8:ec:9c:94:11:c4:c3:38:9e:ba:78:ef:c0:3f:03:8e:ee:
25:a7:6c:1b:04:ee:16:e3:a8:92:14:f8:15:3d:1d:f2:29:1c:
8d:58:55:4c:65:ab:f7:74:bf:0f:96:bf:d2:cf:4f:f1:eb:48:
70:22:6d:ec:87:0e:04:7e:ff:11:f9:f0:41:17:cd:3d:5e:f6:
81:68:2e:49:7c:9b:55:c7:e3:e1:48:71:b9:8d:93:1f:78:79:
65:16:09:c9:09:91:15:4e:0a:ed:a5:53:78:22:7d:c6:97:aa:
20:af:00:74:a4:99:98:fb:db:a6:8d:a8:af:33:96:10:f0:eb:
4e:48:63:ca:7e:e9:a3:e3:bb:e3:8a:cf:c6:1b:20:2f:d8:c9:
75:e6:b8:8c:52:55:80:94:87:44:1d:65:c0:9b:b4:a2:25:60:
9e:3f:c0:ec:fe:73:fb:ed:34:d8:95:e9:9d:9b:47:28:1a:8e:
6e:b7:b5:92:66:0d:83:c7:12:94:70:bd:93:91:44:f6:c7:76:
bc:ab:13:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:05 2024 by rpki-client on console-fra.rpki-client.org