Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/ED7E642F8C5FB6C6E897FE906D788ADA542E8EED.cer
File: ED7E642F8C5FB6C6E897FE906D788ADA542E8EED.cer (raw, json)
Hash identifier: g//XYCzaDz3f423tjI7UArjDOYSUeoqvwZ/FsOLhffM=
Subject key identifier: ED:7E:64:2F:8C:5F:B6:C6:E8:97:FE:90:6D:78:8A:DA:54:2E:8E:ED
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial: 66F094CF2CE280F504C5B5F448109A987EFC28EF
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/2/ED7E642F8C5FB6C6E897FE906D788ADA542E8EED.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 14 Oct 2023 04:37:07 +0000
Certificate not after: Sat 12 Oct 2024 04:42:07 +0000
Subordinate resources: IP: 2a07:54c7:3000::/36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f0:94:cf:2c:e2:80:f5:04:c5:b5:f4:48:10:9a:98:7e:fc:28:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Validity
Not Before: Oct 14 04:37:07 2023 GMT
Not After : Oct 12 04:42:07 2024 GMT
Subject: CN=ED7E642F8C5FB6C6E897FE906D788ADA542E8EED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ed:86:9e:42:b2:13:04:cc:de:40:d6:23:60:
6d:69:24:f0:96:0d:05:cb:3a:aa:1d:40:51:f3:65:
c7:93:af:85:e3:c7:5c:47:e1:75:91:a9:0a:e1:17:
54:90:29:b4:a8:11:07:b2:c8:9b:4c:e3:66:52:92:
53:d3:7b:9d:fc:01:04:3c:f3:29:3d:58:70:eb:96:
2d:d2:d9:23:2f:8f:68:62:c0:a4:9a:30:5f:27:c0:
cf:45:ec:92:8b:29:8f:e4:08:81:6d:54:7f:27:3d:
ae:cc:e3:9d:94:a5:6a:3e:fb:b3:1e:93:35:2f:60:
3e:97:8c:59:4a:ad:12:ff:28:c9:34:e5:bd:6f:6b:
8f:7f:5a:cd:d1:b0:a1:33:ec:42:24:7a:bc:36:05:
62:d2:b4:ba:3c:20:0a:97:4a:1b:ad:0f:63:96:f0:
b6:eb:2b:6b:13:4c:f4:31:ff:ee:ce:a0:31:03:8a:
0a:ab:74:e5:29:d6:c9:8a:5b:4a:8d:9e:d8:e1:d5:
83:e9:d3:4c:38:98:f9:70:8f:dc:b9:a7:1a:da:41:
d1:81:cc:17:61:3d:db:08:f2:5e:81:15:c7:14:84:
90:d7:71:99:4c:f1:e2:a2:c8:38:29:1e:41:59:b8:
e2:cc:a9:98:9c:59:9f:f1:ea:db:1c:ab:ad:d5:de:
9a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
ED:7E:64:2F:8C:5F:B6:C6:E8:97:FE:90:6D:78:8A:DA:54:2E:8E:ED
X509v3 Authority Key Identifier:
keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/2/ED7E642F8C5FB6C6E897FE906D788ADA542E8EED.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c7:3000::/36
Signature Algorithm: sha256WithRSAEncryption
0a:f9:d2:e1:d2:35:bf:32:0c:04:f3:da:59:5f:0e:1a:7e:f0:
28:59:03:2a:d0:88:d2:96:c0:86:64:ec:09:3a:5d:a1:d8:22:
5a:dc:36:69:78:dd:15:b1:fd:ec:96:62:72:ec:3c:72:88:4e:
ff:33:54:2c:eb:cf:b6:51:35:81:87:c8:a3:09:28:18:01:ac:
39:be:04:d9:7c:01:3a:12:65:06:e2:55:9e:ef:1b:20:fb:59:
14:da:ed:c5:ea:d5:14:81:dc:92:a8:ff:81:d4:f9:40:14:22:
d8:31:3a:c6:fb:b8:99:ae:45:10:df:7c:7a:fb:e2:22:47:cb:
70:ed:77:1d:3e:b8:61:6c:95:8a:8e:d8:5d:c5:df:d7:1f:da:
a4:23:e2:09:1d:75:ba:61:74:40:d3:2b:0b:70:0c:0a:ce:96:
e1:97:50:f8:5e:70:23:28:a8:79:75:9f:08:20:53:8b:40:26:
a8:7e:38:08:d2:44:3a:fd:c5:78:bf:c6:29:50:c7:a9:6e:1b:
e5:b7:ba:34:e6:5f:58:f9:95:61:70:46:ee:fa:b1:8c:8a:99:
f4:c6:0a:7c:5b:29:6e:25:e4:10:a5:18:62:41:0c:bf:59:38:
62:ed:fa:4a:da:de:78:46:65:38:0c:4a:8b:2c:ef:02:c6:9f:
7c:f3:f9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:18:36 2024 by rpki-client on console-ams.rpki-client.org