Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zfYOvhqz7xkP0XswjvCKk9uvHNQ.cer
File: zfYOvhqz7xkP0XswjvCKk9uvHNQ.cer (raw, json)
Hash identifier: //Upwgrosy83+w9uXLBJ5FYAf+ErVbJRUpUWxMcXgd8=
Subject key identifier: CD:F6:0E:BE:1A:B3:EF:19:0F:D1:7B:30:8E:F0:8A:93:DB:AF:1C:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9BADF11442
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/c71dd4-27ce-4925-9f8a-08ffa7c5ae03/1/zfYOvhqz7xkP0XswjvCKk9uvHNQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/c71dd4-27ce-4925-9f8a-08ffa7c5ae03/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:56:01 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.188.8.0/22
IP: 2a0b:b180::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 668638188610 (0x9badf11442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:56:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdf60ebe1ab3ef190fd17b308ef08a93dbaf1cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:13:bb:b1:91:fd:74:26:27:c2:d2:c8:39:93:
26:4d:84:56:0d:4f:53:bb:8f:6b:84:1b:b9:3f:37:
5c:17:86:f3:00:e7:08:09:6c:1c:a3:10:27:ce:3b:
a4:11:62:5e:fd:40:ce:75:7d:d1:66:45:63:4b:c9:
5a:e5:d8:cf:53:34:7d:88:15:4b:d3:50:7f:f1:85:
0d:b7:b1:57:5a:e2:c8:59:d9:b9:9f:02:47:27:98:
b4:11:3b:9c:59:7e:22:0a:03:b8:7c:ba:41:7e:06:
7f:68:7b:3f:48:7e:5a:e9:64:0a:a2:75:45:c8:8f:
c0:80:dc:ee:41:0e:06:c3:dc:66:76:70:eb:1a:cd:
2c:18:43:cb:50:f6:14:8f:bd:13:53:6d:46:44:1e:
e2:a4:b8:9b:a8:88:ed:e9:28:3b:b7:ba:e5:00:ab:
3f:8d:c0:b5:68:2c:16:4c:b7:a7:0e:51:1f:e3:b9:
38:34:c1:14:a8:8a:27:f2:32:d9:ba:92:30:db:6b:
c3:b1:3d:35:ae:6a:68:8e:08:24:fc:b6:8e:f9:8d:
79:b9:26:5b:e5:94:f6:ba:84:79:15:49:7f:6f:0a:
b1:01:0c:07:91:50:80:1e:5b:6e:cb:31:f3:82:75:
1f:c6:f7:b3:91:fb:3b:8f:7e:e3:4e:7c:23:64:18:
34:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F6:0E:BE:1A:B3:EF:19:0F:D1:7B:30:8E:F0:8A:93:DB:AF:1C:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c71dd4-27ce-4925-9f8a-08ffa7c5ae03/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c71dd4-27ce-4925-9f8a-08ffa7c5ae03/1/zfYOvhqz7xkP0XswjvCKk9uvHNQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.8.0/22
IPv6:
2a0b:b180::/29
Signature Algorithm: sha256WithRSAEncryption
31:02:18:18:55:18:20:a5:13:85:a2:9c:1a:24:88:58:aa:f8:
c9:6c:cb:3a:ef:6a:39:18:f4:6e:89:dd:ff:1c:d6:cc:e3:1f:
61:7a:de:b4:09:2b:9c:01:db:59:56:6f:2a:8e:94:0f:23:67:
cd:3a:5c:46:e1:5c:5f:99:45:ff:a8:e5:08:73:ce:34:c9:58:
d8:26:99:e6:b1:80:d9:84:d6:3e:45:50:00:dd:0c:95:9e:72:
b9:95:3f:e2:d3:62:34:21:67:61:0a:a7:90:6b:1e:0b:88:d2:
d5:25:a5:19:8f:c2:88:6e:e5:db:b9:e5:51:45:a9:89:5f:d4:
96:78:56:a1:0a:5f:ab:c6:3e:37:da:cf:bd:d9:ef:70:e8:72:
59:c0:4b:f3:ad:a4:03:f5:b9:1c:b9:1c:12:d1:f2:ec:f5:dc:
ee:52:90:1b:45:bf:d1:d4:c4:8b:12:3e:39:f7:6d:b1:29:64:
79:1d:c0:9d:f3:1f:0b:e9:88:06:66:3d:da:fa:3d:80:fb:11:
14:b4:56:8f:06:36:c7:d2:67:7d:a9:ca:b0:f3:57:b6:64:1e:
f7:a9:99:98:16:b3:f8:f5:18:fd:ef:cc:8a:5e:0b:35:f1:02:
bf:8a:67:3d:f9:73:64:9d:a5:02:05:1b:56:a3:cf:72:62:df:
bc:4f:f7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:20 2024 by rpki-client on console-fra.rpki-client.org