Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NK6UrG-KIEvp01mIrsJzBIs1wpA.cer
File: NK6UrG-KIEvp01mIrsJzBIs1wpA.cer (raw, json)
Hash identifier: KUUO2PRnV8dtO5pgml8WOKY4dv1H8Zhw/vLlWy4MGqQ=
Subject key identifier: 34:AE:94:AC:6F:8A:20:4B:E9:D3:59:88:AE:C2:73:04:8B:35:C2:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9F3972EC19
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/d7a1b0-f4bc-43ae-a66c-e5d56874457c/1/NK6UrG-KIEvp01mIrsJzBIs1wpA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/d7a1b0-f4bc-43ae-a66c-e5d56874457c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:57:56 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.217.143.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 683863632921 (0x9f3972ec19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:57:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34ae94ac6f8a204be9d35988aec273048b35c290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:76:5f:ca:63:72:a8:73:bb:26:72:b7:d7:5d:
66:4b:e0:02:40:60:06:64:34:9a:2f:00:8c:03:21:
e0:51:1f:2f:df:c3:a7:79:4d:d6:1e:97:eb:c7:e8:
11:cb:4f:04:57:ba:a7:82:56:ed:90:c7:14:d4:64:
a3:2c:e1:3a:63:09:0c:aa:15:bc:02:4f:77:0f:06:
3c:76:6f:c5:09:fa:a1:28:ab:b9:b0:a6:be:c4:f3:
9c:fa:42:cc:00:22:df:c3:d8:5c:cc:9d:1c:c8:1b:
29:3d:fd:5f:99:87:11:90:8b:8d:a1:14:9a:1b:2f:
01:8b:ea:4c:c8:5b:17:d2:a9:52:fd:d8:e3:5a:8c:
ed:d4:f8:34:a0:cd:e5:58:63:f9:cc:d1:95:aa:a9:
35:b3:d8:1b:cf:06:81:de:74:cc:18:ea:b8:ec:5a:
4d:97:7c:4b:53:99:43:7e:a2:6a:95:13:0f:29:28:
52:db:f7:ef:4c:97:04:8e:a7:5e:9c:31:34:00:4d:
49:17:e5:e6:b7:a9:f1:f3:c4:47:b4:c5:d9:bc:a7:
ac:58:2e:18:01:7c:ff:38:0c:33:c9:c1:5d:fb:d1:
e0:52:bf:83:78:ff:0a:d4:a7:1a:b3:67:87:df:85:
b5:5c:4c:a0:92:20:2d:e6:cf:19:e6:13:d6:8d:16:
1f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AE:94:AC:6F:8A:20:4B:E9:D3:59:88:AE:C2:73:04:8B:35:C2:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d7a1b0-f4bc-43ae-a66c-e5d56874457c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d7a1b0-f4bc-43ae-a66c-e5d56874457c/1/NK6UrG-KIEvp01mIrsJzBIs1wpA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.143.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:83:b7:b6:5d:10:76:f8:fa:11:15:5e:44:57:c3:72:9c:6c:
9f:0a:47:19:a4:10:01:e9:be:26:f2:c2:2b:b0:aa:0a:19:7a:
13:92:8b:e7:b0:2b:70:4f:64:91:bb:af:78:e7:2c:ba:9c:d2:
13:8c:0e:e8:98:98:79:9a:4e:f0:cc:b5:f4:58:51:3e:05:5f:
3b:96:c7:ae:d0:1c:39:f9:f5:58:81:4e:36:90:22:4a:e5:cf:
19:c3:17:f0:71:c9:ae:44:e1:40:29:51:43:fa:b5:43:36:3c:
37:34:06:d2:36:58:9b:cb:7c:07:f0:f1:8c:80:ed:f9:b9:39:
ed:d0:47:b6:5c:56:6c:af:a4:db:45:8c:ee:f1:54:13:39:d4:
b0:18:8f:3f:8f:fa:88:2c:9f:5c:dc:c5:ed:7a:24:f3:61:5c:
f6:b1:d5:32:6f:3d:b5:4f:fd:f7:a7:f3:9b:51:35:60:af:5f:
c7:cd:ee:ec:1f:21:05:65:bd:1f:76:d2:40:e8:01:f5:d0:91:
bb:f7:dc:5f:33:3e:bb:82:be:5c:1e:96:36:bb:6a:71:21:7a:
c1:58:f2:6e:ff:a4:c1:29:16:47:6b:44:34:a4:95:11:36:52:
ff:05:19:d1:ce:54:1a:6e:c9:92:d8:4f:a7:a3:04:83:f0:9f:
0d:07:48:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:04 2023 by rpki-client on console.sobornost.net