Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z6NJ47asL6JiQTwgy8QdalN0MZM.cer
File: z6NJ47asL6JiQTwgy8QdalN0MZM.cer (raw, json)
Hash identifier: 8F2nUDT399NvBCRQjEqf72LdWG57GSzdvWfjLMXZOhs=
Subject key identifier: CF:A3:49:E3:B6:AC:2F:A2:62:41:3C:20:CB:C4:1D:6A:53:74:31:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AFD77C6808
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/3d7874-2588-407f-acb9-13d9efbf5ccf/1/z6NJ47asL6JiQTwgy8QdalN0MZM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/3d7874-2588-407f-acb9-13d9efbf5ccf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 08 Apr 2022 09:15:02 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.142.132.0/22
IP: 193.228.72.0/22
IP: 194.33.156.0/22
IP: 194.34.128.0/22
IP: 194.53.68.0/22
IP: 194.110.48.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 755234531336 (0xafd77c6808)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 8 09:15:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfa349e3b6ac2fa262413c20cbc41d6a53743193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:69:b8:c6:99:84:5a:8a:ea:49:84:d8:83:89:
f6:47:7a:9d:75:7f:07:ee:3b:fa:02:71:5a:89:31:
a4:61:cc:95:47:cb:e7:00:41:b5:ec:c9:f7:bb:82:
29:f8:84:bf:53:0e:03:e7:22:07:f2:3b:96:b1:1a:
71:48:64:82:2e:e8:48:04:ca:95:57:19:3e:20:c2:
78:4a:df:56:39:06:15:fd:21:00:cf:23:50:43:e2:
79:f1:82:15:1f:c3:13:c4:e2:62:5e:f5:83:c9:a7:
38:4f:44:29:c4:23:38:a1:43:14:6b:f8:57:d5:a2:
2b:d2:e7:3a:fd:bb:a5:36:20:36:a6:fa:df:46:4f:
26:e0:fb:b7:0e:f1:fc:74:20:ae:d9:65:62:13:f6:
fd:10:7f:fc:b1:07:87:f1:49:14:09:d7:e5:7d:27:
09:33:b8:20:13:68:ef:a8:0d:eb:28:40:d4:7d:63:
96:e6:d4:76:22:1a:8c:98:3d:72:c3:2f:b1:3c:40:
a0:30:75:ef:da:ad:49:4b:51:3a:01:7d:c7:80:73:
66:66:cc:a6:11:2d:4e:c0:a8:e9:37:a0:2d:df:92:
64:22:53:43:02:72:0d:15:83:50:ba:97:95:ea:dd:
ec:bf:c9:49:cc:50:c0:0a:13:09:7e:2c:fa:d7:e0:
83:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A3:49:E3:B6:AC:2F:A2:62:41:3C:20:CB:C4:1D:6A:53:74:31:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d7874-2588-407f-acb9-13d9efbf5ccf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d7874-2588-407f-acb9-13d9efbf5ccf/1/z6NJ47asL6JiQTwgy8QdalN0MZM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.132.0/22
193.228.72.0/22
194.33.156.0/22
194.34.128.0/22
194.53.68.0/22
194.110.48.0/22
Signature Algorithm: sha256WithRSAEncryption
00:40:eb:9b:10:af:3b:39:4b:bd:85:5e:7b:fb:4f:9b:27:d9:
5d:75:e6:3e:69:96:af:fa:f3:04:45:f6:ea:68:cd:68:34:11:
29:a7:1a:17:13:8d:0e:d7:1e:81:a2:3a:aa:5a:26:4b:cd:ad:
2a:e8:03:38:d5:50:3d:e6:6a:8c:10:c6:69:58:8d:4f:4e:23:
2e:a2:d1:57:5b:f5:b4:94:b5:54:09:5e:0d:df:52:5d:60:82:
b4:ae:2d:6a:17:c8:dd:1d:d2:fe:ef:9e:20:82:22:59:2c:93:
e3:62:b0:ec:26:44:ae:b0:76:b5:9b:bf:d0:24:d3:79:d5:01:
ab:37:32:4b:25:96:30:9a:bb:b7:52:db:cf:54:76:d3:ba:61:
7a:ec:5d:d7:95:b6:5c:c1:09:c3:bf:22:e4:8c:8d:ea:80:da:
e2:0b:da:fa:41:c9:d9:5e:75:c5:16:4a:59:af:0d:86:fa:16:
8d:e5:5b:85:38:69:fa:0d:15:a9:42:48:93:f1:34:33:96:ce:
cf:c3:bb:2b:db:0b:18:04:06:ae:99:09:70:7b:62:da:ff:c5:
ec:76:3f:a8:98:a1:78:5c:e1:bb:31:ba:b0:2b:b3:fb:7e:a4:
04:85:bf:a4:70:21:dd:dd:93:32:23:13:41:83:6a:30:99:88:
5b:02:cc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:36 2024 by rpki-client on console-ams.rpki-client.org