Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2ueU-9W4FSib80jrOLlmPZxyS3A.cer
File: 2ueU-9W4FSib80jrOLlmPZxyS3A.cer (raw, json)
Hash identifier: yuAulVaXGytuIE+QlUyyl9UYI2TDTtc/sH3AGrTtr1c=
Subject key identifier: DA:E7:94:FB:D5:B8:15:28:9B:F3:48:EB:38:B9:66:3D:9C:72:4B:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B2B4264DE9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/8eb7ea-1f2a-49ae-942e-872f9bad56e2/1/2ueU-9W4FSib80jrOLlmPZxyS3A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/8eb7ea-1f2a-49ae-942e-872f9bad56e2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 03 Jun 2022 09:32:41 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.212.130.0/24
IP: 91.215.116.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 767526587881 (0xb2b4264de9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 3 09:32:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dae794fbd5b815289bf348eb38b9663d9c724b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:a9:b4:70:12:9e:95:52:10:3b:08:26:e3:
33:30:cb:b3:72:b8:05:21:45:e8:ff:b2:3b:63:c7:
0f:53:50:64:21:76:44:55:d2:c7:3c:c4:c1:eb:d3:
86:ea:8c:d4:40:55:2d:07:f7:7d:e6:1c:f8:2e:39:
93:26:f9:55:62:de:56:df:3c:40:2a:47:ab:08:de:
46:f0:72:11:8c:b6:b8:18:df:ed:5d:dd:84:5d:63:
64:e7:c1:61:7f:6c:23:a2:1e:d1:8a:41:fd:ad:0e:
b0:61:eb:f4:11:1b:6f:ae:7f:23:84:df:42:94:9b:
45:3b:63:68:5d:01:21:4b:3a:23:50:76:27:22:e6:
5f:6a:0f:c4:17:89:88:09:d9:c8:c5:98:4c:46:b2:
6c:56:64:6a:f1:b1:e8:ba:42:ad:72:07:20:bc:f1:
d0:76:7c:c8:d8:e5:a7:02:b2:a1:95:fa:51:51:36:
fa:b0:26:04:23:74:80:4c:40:f7:c9:fd:bf:6e:31:
14:b2:3c:f8:12:24:2f:a9:2a:22:25:bb:22:31:f3:
cb:be:dc:17:90:62:14:60:2c:dd:ef:a9:26:d0:7b:
12:81:5a:14:83:92:4f:dc:56:8b:df:98:9c:2e:3a:
94:46:3d:b1:ed:8f:71:9d:56:82:b0:76:5b:b9:ef:
b5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E7:94:FB:D5:B8:15:28:9B:F3:48:EB:38:B9:66:3D:9C:72:4B:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8eb7ea-1f2a-49ae-942e-872f9bad56e2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8eb7ea-1f2a-49ae-942e-872f9bad56e2/1/2ueU-9W4FSib80jrOLlmPZxyS3A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.130.0/24
91.215.116.0/22
Signature Algorithm: sha256WithRSAEncryption
22:1e:95:57:02:e5:16:de:b9:16:7f:c8:79:d3:89:09:07:8b:
ee:e9:84:c2:f5:92:7b:50:da:ef:06:c6:9e:72:0c:dd:8d:3f:
f6:a5:63:cd:1b:d4:1b:96:69:10:40:a3:52:31:e8:68:40:20:
26:81:98:84:5c:4f:f4:85:d8:ba:89:e4:a0:dc:ee:66:72:63:
fe:92:5e:e3:54:d1:0f:52:04:c6:27:89:d8:f7:21:a4:53:6d:
1c:34:f9:7e:ed:ed:30:07:e3:57:7f:d4:6f:3c:24:9c:53:eb:
a7:91:b6:57:58:97:19:a3:6c:b4:1c:f3:d1:74:fb:81:65:a8:
2a:35:37:b7:4d:33:63:13:7c:16:0c:5b:b3:63:be:ea:3e:96:
32:d4:88:e7:64:e0:95:1a:74:d2:a1:2a:5a:31:b5:80:47:e0:
65:af:35:09:57:c6:65:0a:68:80:41:65:2b:f8:09:8f:c7:ca:
51:c3:6d:57:7b:88:29:36:14:2d:f7:39:a4:af:cc:17:2d:6d:
dc:bb:ed:83:39:0f:2e:73:29:2d:cf:67:84:a3:a3:74:3e:dd:
f1:eb:e4:dd:e6:93:b4:a0:d3:b0:93:b2:40:c3:0d:af:28:df:
b1:91:91:f2:d5:8a:52:3c:86:db:5d:f4:e0:72:39:9a:d8:e6:
88:95:23:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:44 2023 by rpki-client on console.sobornost.net