Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/za7RPzCm3J1NJ3DTIyNtH9IEU5A.cer
File: za7RPzCm3J1NJ3DTIyNtH9IEU5A.cer (raw, json)
Hash identifier: rCO14ryw/Tsrj7LPXrlIHGVAICtnYhDaPBgWJDMPcYU=
Subject key identifier: CD:AE:D1:3F:30:A6:DC:9D:4D:27:70:D3:23:23:6D:1F:D2:04:53:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9A2B814464
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/ff3efd-d6da-4110-ae1b-484dc87e386c/1/za7RPzCm3J1NJ3DTIyNtH9IEU5A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/ff3efd-d6da-4110-ae1b-484dc87e386c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:52:36 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 92.119.196.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662154855524 (0x9a2b814464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:52:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdaed13f30a6dc9d4d2770d323236d1fd2045390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c7:8f:7c:6d:ef:53:90:37:31:72:fb:e0:66:
3a:54:e6:17:cd:3a:8b:29:c3:2f:2b:98:14:e3:cb:
b3:a0:4d:50:ec:f8:38:de:a1:30:b3:23:08:ed:e0:
cd:9e:d1:72:e4:b0:49:90:27:7f:ca:f4:a2:bf:da:
b5:43:8b:42:dd:f1:56:8b:76:fa:8d:6f:69:da:06:
c1:16:62:dd:02:b7:0b:b6:21:e6:eb:0d:c2:ef:bc:
1a:d1:34:38:d2:1c:e0:50:86:00:14:1e:b4:54:7f:
dd:13:cb:97:03:5e:97:fb:78:8b:eb:68:5e:1c:ae:
91:64:3c:11:91:0e:94:38:d3:6a:f8:1e:85:19:b3:
fc:42:1a:58:86:8b:1a:22:5b:53:25:b0:8b:7e:ce:
24:f7:d8:84:86:02:0d:20:4d:dd:7b:84:05:d1:0c:
50:16:63:c2:d9:f0:13:18:bc:3b:ea:f7:9f:3e:21:
31:85:bb:c4:e5:e4:49:d9:56:d1:31:49:fb:e4:ba:
52:5d:45:20:b9:03:d4:4a:a1:28:f6:67:88:c9:b9:
9c:f0:79:0a:44:48:4e:2b:8a:4b:dc:34:40:75:d6:
fe:01:7a:d0:36:f6:6c:0e:da:93:54:24:c4:db:13:
80:9d:59:df:a0:d8:b0:38:cf:af:9a:6f:26:40:4e:
43:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AE:D1:3F:30:A6:DC:9D:4D:27:70:D3:23:23:6D:1F:D2:04:53:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ff3efd-d6da-4110-ae1b-484dc87e386c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ff3efd-d6da-4110-ae1b-484dc87e386c/1/za7RPzCm3J1NJ3DTIyNtH9IEU5A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.196.0/22
Signature Algorithm: sha256WithRSAEncryption
44:fc:64:dc:87:46:5c:c5:12:95:5d:36:ec:21:11:51:b8:a0:
fd:a9:05:f7:f3:bc:a8:54:3f:08:ba:c8:49:72:5c:ae:68:44:
52:4a:a0:6b:4c:cd:61:11:4d:ad:f1:71:cb:05:50:e3:be:aa:
99:83:5a:72:0a:2f:95:ad:10:af:3a:88:d1:5b:b3:98:a6:ce:
25:da:43:b6:ff:8e:b3:3a:e0:95:b0:e8:e3:0d:59:32:f6:62:
c3:98:f1:a3:01:63:76:9b:f5:60:a3:5b:89:12:2b:24:04:8b:
68:67:74:03:61:7a:b7:ad:fc:c3:74:66:22:7a:a8:94:65:91:
5a:f0:3d:02:38:d4:9d:47:8b:f7:62:d1:24:1a:8b:d1:71:93:
8b:43:92:9c:2d:3e:04:ee:3c:1f:3c:91:96:ce:43:f3:3a:20:
ae:20:90:aa:e6:74:b4:3c:bc:37:d8:6a:a5:26:98:56:66:b1:
ea:28:0f:69:ac:fc:46:51:7f:65:97:07:07:a6:8e:da:39:a3:
a4:ff:16:b4:b6:38:91:05:4a:5e:88:d1:04:af:7c:00:6c:63:
2e:a2:00:ef:7f:1e:4a:a8:9a:45:e4:80:59:5b:f2:c6:65:a6:
0f:27:56:b7:2c:42:13:c9:99:04:9b:bb:09:7e:4b:11:1e:6e:
bf:46:64:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:19 2024 by rpki-client on console-fra.rpki-client.org