Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HH3fXhOu7OtJm_9K_-3QIee7LYs.cer
File: HH3fXhOu7OtJm_9K_-3QIee7LYs.cer (raw, json)
Hash identifier: NjGBus2MqhuncuHBBuBl7RUztWV2egAzayfMB6RieB0=
Subject key identifier: 1C:7D:DF:5E:13:AE:EC:EB:49:9B:FF:4A:FF:ED:D0:21:E7:BB:2D:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A07AC3FE88
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/3e5ba0-3a7b-4a71-8960-aafe3730a4fe/1/HH3fXhOu7OtJm_9K_-3QIee7LYs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/3e5ba0-3a7b-4a71-8960-aafe3730a4fe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 06:58:14 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.203.214.0/23
IP: 193.218.38.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 689254432392 (0xa07ac3fe88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:58:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c7ddf5e13aeeceb499bff4affedd021e7bb2d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:29:0b:ed:1f:0f:06:07:05:89:0e:59:84:57:
2a:1a:e5:d7:8b:26:c1:44:df:21:d7:5a:83:1a:db:
ab:83:0f:37:96:f7:df:31:79:e1:fb:ba:ed:c1:6a:
9e:4e:15:39:53:49:11:ed:13:8f:2b:28:53:0e:1e:
1c:c5:40:3e:68:a7:f0:53:e4:4b:60:70:55:f9:fb:
b9:fa:86:67:c8:2b:01:3c:b9:a3:3f:28:75:fc:96:
4a:49:3e:08:fc:b0:c7:21:2c:8a:56:bd:aa:e2:8b:
45:8b:da:6d:c3:5d:43:56:6d:97:a9:c6:ca:fc:0d:
dc:dd:25:f5:4e:c5:e9:0d:e2:68:8e:a3:4a:22:86:
69:6c:0f:0a:92:c1:b7:3f:2e:25:9a:2a:13:a3:69:
bd:bd:51:ea:5a:e1:b0:84:b2:cd:cd:ea:19:f3:56:
ab:c8:4b:94:5f:cb:0d:cf:1e:ab:69:82:cc:20:1e:
06:97:43:74:32:04:21:d2:b4:94:07:56:45:1d:f3:
c8:3f:a2:14:b8:5d:9b:97:12:a0:29:23:06:57:bd:
8e:f0:10:0a:8a:a1:9a:a2:71:99:ac:3b:8d:2e:45:
ed:41:21:ce:cc:d3:6d:09:5b:13:2b:c7:fc:34:62:
d1:6d:9d:df:45:66:b9:47:d1:71:02:bf:93:95:89:
2d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7D:DF:5E:13:AE:EC:EB:49:9B:FF:4A:FF:ED:D0:21:E7:BB:2D:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3e5ba0-3a7b-4a71-8960-aafe3730a4fe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3e5ba0-3a7b-4a71-8960-aafe3730a4fe/1/HH3fXhOu7OtJm_9K_-3QIee7LYs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.214.0/23
193.218.38.0/23
Signature Algorithm: sha256WithRSAEncryption
88:82:12:ee:b0:9b:8a:18:ba:26:ad:07:f2:72:72:8a:dd:4d:
d2:c7:ec:8e:58:64:d0:bb:07:e4:50:44:de:31:0f:21:f4:ab:
fd:5e:49:40:4c:10:34:6b:2f:2a:ab:0d:05:eb:d2:f0:0c:e7:
fb:ab:ce:92:ce:c0:bb:0f:60:f3:af:6e:68:de:6a:36:67:1e:
f0:9c:d1:71:85:31:d9:62:a6:a9:0b:f4:8e:16:41:db:9e:e1:
89:47:c4:5d:31:0a:56:ce:52:16:b7:3b:84:3b:14:a8:06:39:
8e:9f:2b:1b:70:0f:c4:1f:a0:7e:9c:b5:e6:82:7a:f7:85:2e:
6a:19:13:15:1d:e5:cb:ae:46:f7:ee:dc:f5:7f:d3:d5:ce:cd:
f9:de:09:1b:a0:f8:b5:f3:8a:8e:83:96:29:e5:24:c3:90:46:
02:57:cd:e3:50:c6:38:23:cd:97:e9:08:0a:17:a9:f4:2f:45:
08:a6:bd:c8:07:1a:00:22:54:0a:0b:55:40:96:cb:35:ec:e6:
b1:1e:06:12:3f:0c:3f:ed:7a:38:5a:a5:3e:99:3c:a3:78:ee:
b0:58:41:88:ae:08:7c:83:73:e2:18:a3:05:da:17:0c:1e:6c:
ff:9e:ec:2a:81:2f:24:45:ab:92:95:f4:90:b9:68:dd:11:26:
f3:93:4a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:25 2023 by rpki-client on console.sobornost.net