Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/znibsBTNPIvV8Rn8BGVLAcCyUhc.cer
File: znibsBTNPIvV8Rn8BGVLAcCyUhc.cer (raw, json)
Hash identifier: aK+co5C17csslsgkJVAeqATtaUuvc9rH1S4oEAGPK6w=
Subject key identifier: CE:78:9B:B0:14:CD:3C:8B:D5:F1:19:FC:04:65:4B:01:C0:B2:52:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AA3AB9DDC3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/ac9add-7487-46e4-87d7-66f15f9cd211/1/znibsBTNPIvV8Rn8BGVLAcCyUhc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/ac9add-7487-46e4-87d7-66f15f9cd211/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:06:23 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.37.139.0/24
IP: 2a10:a500::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 731129699779 (0xaa3ab9ddc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:06:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce789bb014cd3c8bd5f119fc04654b01c0b25217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:74:e6:87:b9:81:52:8d:d9:8d:62:75:c3:e7:
2a:03:89:8e:77:32:33:fe:1e:b3:f2:04:99:39:9e:
c8:89:8c:0e:26:6c:9b:80:dc:0a:c4:85:87:a4:77:
b0:e7:e2:82:c0:fd:17:e4:39:a3:d3:7d:35:74:f4:
ed:5e:ca:b1:7b:1a:89:7c:61:78:76:fe:9a:0a:63:
56:3c:e6:a6:83:e6:7c:82:67:52:70:46:29:1b:87:
51:0f:a6:57:60:cd:a8:63:55:1a:b4:8e:f0:53:b7:
8d:39:2e:0f:b3:0f:74:84:44:1e:0a:f7:19:7b:fd:
60:6b:8a:cd:de:30:cb:e3:a2:85:5e:4a:5b:79:12:
29:4b:b7:b1:a4:e6:48:2b:7f:7d:54:5e:f2:ab:aa:
7f:bb:e9:d9:4e:1c:6b:eb:64:6c:96:c3:45:d6:ce:
c6:3f:98:bf:4f:58:46:38:cd:d7:9c:62:d7:1f:f7:
65:9c:81:09:83:0e:c5:b4:54:f7:22:de:10:17:1b:
c9:16:08:30:bc:ec:c5:22:16:ad:0d:72:9e:0a:84:
ac:96:1e:5f:77:56:d4:61:a0:4c:d6:cd:2f:0e:f4:
b3:7a:51:09:b7:35:5c:bc:09:f1:e6:ec:84:0f:5e:
51:04:f3:a4:11:1a:01:3c:c9:d3:f5:10:d4:bd:4a:
69:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:78:9B:B0:14:CD:3C:8B:D5:F1:19:FC:04:65:4B:01:C0:B2:52:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ac9add-7487-46e4-87d7-66f15f9cd211/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ac9add-7487-46e4-87d7-66f15f9cd211/1/znibsBTNPIvV8Rn8BGVLAcCyUhc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.139.0/24
IPv6:
2a10:a500::/29
Signature Algorithm: sha256WithRSAEncryption
6e:2c:b6:ed:fc:48:6e:0c:a0:34:94:ab:db:d3:4e:04:a8:2b:
d7:62:71:c6:44:9f:17:a9:68:3b:49:bc:76:80:95:aa:1a:f1:
c8:45:39:cb:d3:c7:86:94:2d:12:21:32:ba:2a:e1:12:41:9a:
fb:14:09:1f:9d:d9:e2:eb:fd:3b:58:5a:00:17:b4:cb:c2:44:
38:fd:20:ee:e6:39:44:da:90:a1:ca:02:20:68:a7:e3:41:71:
a0:38:02:c7:6c:25:fe:aa:20:8f:53:fb:ff:09:6f:a0:f6:85:
c8:9b:f8:61:03:e3:b3:e5:e4:6d:44:7d:2b:ac:71:8b:8f:68:
a9:57:27:81:c8:63:7d:bc:0d:84:32:f7:d6:c7:71:1d:b2:10:
c1:8c:ba:28:07:2b:75:56:0f:c4:49:f8:88:1e:5e:7d:4d:c6:
bd:20:2d:75:eb:b9:27:47:70:f9:ff:ea:c5:78:b9:c2:30:50:
d5:78:ef:2e:da:64:d2:b5:5c:93:d6:93:69:12:5e:9b:0b:15:
cd:b5:3e:55:00:c6:0b:9b:87:92:38:a6:0a:46:61:85:e9:95:
36:0b:62:a3:3b:d1:cc:1b:e4:d6:f9:f2:67:c9:c6:44:58:52:
04:ac:70:73:93:bd:70:5e:79:60:42:f2:d4:7e:14:3a:5f:0b:
04:2e:79:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-fra.rpki-client.org