Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ypmz6LqC0NSPFwxv_Y6dqjqiI9Q.cer
File: ypmz6LqC0NSPFwxv_Y6dqjqiI9Q.cer (raw, json)
Hash identifier: 3OrQdZYQ9jVCANecdxQFli0Z4P1PQDmLLDhf42z/VRM=
Subject key identifier: CA:99:B3:E8:BA:82:D0:D4:8F:17:0C:6F:FD:8E:9D:AA:3A:A2:23:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: ACB3034EF1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/4b3bcd-5082-4b67-ac90-a3604ee68e3e/1/ypmz6LqC0NSPFwxv_Y6dqjqiI9Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/4b3bcd-5082-4b67-ac90-a3604ee68e3e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 31 Jan 2022 10:16:46 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.148.94.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 741737713393 (0xacb3034ef1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 31 10:16:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca99b3e8ba82d0d48f170c6ffd8e9daa3aa223d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6e:7a:bc:f4:86:c9:0e:c9:9e:0c:77:36:97:
b2:c6:95:1a:33:2c:e8:72:75:da:76:50:d4:6b:82:
cb:7f:7c:f0:0e:03:c8:d0:4e:5f:62:8b:b1:ed:6e:
09:cb:ba:c1:34:40:bb:2a:31:9f:c9:3e:e2:6b:7c:
8b:57:82:ed:96:f6:cc:3c:ee:81:1e:05:5c:e0:31:
24:ca:a4:91:57:d4:d5:cf:0f:b8:af:25:ed:06:2d:
22:75:2b:86:34:ef:2d:d6:18:dd:f0:83:d3:7c:fb:
b9:0c:34:c4:30:f7:5e:35:87:7e:df:9f:3c:b9:5c:
66:37:ba:3d:d5:f9:45:94:e3:f1:e1:c3:25:1d:8b:
8e:9b:17:45:5f:30:ac:fd:89:d1:92:c6:7a:6b:66:
07:7c:98:f1:2a:69:7f:d6:4e:8a:30:3a:56:b9:ac:
2a:ab:16:27:b6:6e:b1:16:a9:d5:29:5b:ce:4b:81:
38:cb:47:7c:c3:56:82:0b:72:92:bd:c8:3c:bd:4c:
33:62:91:5c:d9:77:d3:c9:bc:a0:41:b9:01:15:84:
7d:a3:68:fc:c2:28:8d:86:82:2a:46:0a:69:36:49:
d5:0d:53:d4:f6:df:26:87:b0:6a:0d:4d:d7:39:11:
64:7d:17:1d:3b:88:05:47:ef:1f:25:08:f7:82:d1:
46:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:99:B3:E8:BA:82:D0:D4:8F:17:0C:6F:FD:8E:9D:AA:3A:A2:23:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4b3bcd-5082-4b67-ac90-a3604ee68e3e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4b3bcd-5082-4b67-ac90-a3604ee68e3e/1/ypmz6LqC0NSPFwxv_Y6dqjqiI9Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.94.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:16:6f:08:f6:c8:dc:2a:fb:7f:71:24:2a:83:72:62:1d:0a:
a5:70:5e:85:ab:e1:58:5d:07:fe:97:9a:41:cd:5e:e1:06:a1:
8b:ef:47:61:d4:97:c3:9a:4e:07:8e:69:83:0c:0f:a0:80:ce:
54:c1:f4:2b:7e:89:ad:d3:95:91:b5:c5:3e:65:3a:8b:2a:8f:
c3:48:47:33:4a:81:5b:77:ae:75:83:a2:5b:1e:b5:fb:12:aa:
2e:14:78:f1:c2:41:1a:2e:50:25:61:a9:10:db:ae:22:21:77:
e8:6d:b3:28:02:9f:dd:27:ad:30:5a:22:d3:69:67:5d:62:90:
1d:6d:f0:b5:86:46:47:84:7c:39:38:31:4c:bb:02:c2:7b:c6:
fb:be:61:8f:24:72:8c:4d:a2:41:ce:15:80:34:cb:8d:0f:63:
5e:52:d1:83:cd:6c:64:69:f7:d4:f1:ce:fb:61:87:e7:9f:8e:
e6:a9:06:c6:1a:09:57:e9:4f:cb:43:c6:10:45:2b:07:31:69:
f9:76:73:4d:56:52:14:96:c7:fc:c2:3f:31:10:1b:31:f1:da:
55:b8:fe:59:9b:42:fd:00:3d:d0:de:aa:69:91:f6:e8:2a:ce:
9a:ce:44:3b:54:50:a6:0a:3c:7e:36:57:2d:44:c3:75:47:09:
b6:3e:35:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:12 2024 by rpki-client on console-fra.rpki-client.org