Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sk-vmB9bijdktgmrT0nJuXGJIqI.cer
File: Sk-vmB9bijdktgmrT0nJuXGJIqI.cer (raw, json)
Hash identifier: K3CNQUbuKSh4c7COS+M2vYtfv3ynmnPQJ+IKaKnatyY=
Subject key identifier: 4A:4F:AF:98:1F:5B:8A:37:64:B6:09:AB:4F:49:C9:B9:71:89:22:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9D3EB0544F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/3f19b8-f830-4141-8784-96b6bfffa61f/1/Sk-vmB9bijdktgmrT0nJuXGJIqI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/3f19b8-f830-4141-8784-96b6bfffa61f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 04:01:08 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 176.53.156.0/22
IP: 2a09:d500::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675361608783 (0x9d3eb0544f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:01:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a4faf981f5b8a3764b609ab4f49c9b9718922a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b5:e3:2d:02:52:5f:5b:96:54:d4:c0:8c:fb:
eb:df:36:2b:8c:61:f4:23:8a:45:7c:0a:18:d0:94:
09:66:97:5f:2e:be:9a:bc:a0:88:6f:54:3c:d8:ee:
e7:4a:92:5b:2c:80:04:ad:4c:88:b7:f3:aa:36:82:
e8:8d:66:d4:56:44:49:7b:f9:4f:ea:ec:a3:16:05:
ea:a1:ed:8c:11:a6:b0:cb:14:0a:4f:eb:33:c7:fa:
18:9b:8f:fa:85:a3:4b:b4:d3:c4:56:c9:81:30:d3:
cc:1a:1a:44:6a:7b:e7:e3:53:18:db:a8:e2:26:e2:
88:c7:4a:d7:84:7b:50:e0:94:f6:08:43:c8:cb:71:
45:fe:0a:bd:87:de:e8:09:f7:d8:56:6b:45:f3:8d:
39:33:71:64:d3:a8:d5:7d:8f:4d:d0:4b:db:fe:7f:
b9:f4:db:ef:2b:55:2f:5e:88:cf:af:38:f3:83:27:
61:0e:fd:17:69:a2:ab:8b:80:03:3c:98:8e:67:b1:
31:84:18:de:0c:38:7e:a7:a3:d1:83:f1:50:f1:61:
7b:c2:a6:b0:ae:b4:78:86:cc:06:54:40:fa:6e:af:
02:f6:bd:3a:9d:84:8b:75:fa:8e:46:40:c5:0a:4a:
8a:75:18:df:43:e4:14:76:b0:c4:31:37:a3:ae:db:
6b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4F:AF:98:1F:5B:8A:37:64:B6:09:AB:4F:49:C9:B9:71:89:22:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3f19b8-f830-4141-8784-96b6bfffa61f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3f19b8-f830-4141-8784-96b6bfffa61f/1/Sk-vmB9bijdktgmrT0nJuXGJIqI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.156.0/22
IPv6:
2a09:d500::/29
Signature Algorithm: sha256WithRSAEncryption
2d:0d:fe:e7:88:f8:30:c4:b5:b6:8b:c7:ed:44:5d:30:04:d6:
a6:e4:38:89:3c:1f:b9:f6:b0:9c:cb:c3:5b:f5:c7:33:3c:68:
bc:ff:82:77:c2:1c:79:4a:a6:38:8e:43:11:ae:7b:5f:29:5a:
cc:d6:ae:a4:8c:2d:73:ff:96:b3:a3:d4:47:70:0f:cc:dc:3c:
1c:58:6e:cf:27:a6:2f:ef:93:e8:b1:00:eb:46:bc:4e:7b:e1:
a6:76:e3:6b:8c:b2:61:d9:3a:5c:83:cb:28:99:4e:b9:ce:45:
b2:c3:e6:7b:12:57:d8:92:e6:16:72:cc:17:65:3b:64:a0:4a:
78:8d:f1:8d:1b:55:d2:f7:00:97:05:14:e3:56:92:88:0c:08:
44:0a:d3:44:dc:4e:c0:95:32:88:61:6e:73:d9:74:30:af:90:
f4:e2:d7:f0:5f:d5:e6:81:c2:69:82:51:89:b1:3f:4c:93:04:
51:ac:5c:e6:16:45:15:25:de:cf:c7:19:39:ac:1c:2b:73:37:
4f:6f:1b:68:05:7c:95:0d:60:5b:b6:a1:79:d2:2d:83:7a:43:
d2:64:e4:6b:68:30:26:70:87:5f:ae:c3:28:37:b5:89:2e:1d:
a3:a5:72:cc:cc:1a:82:33:f5:06:0e:ec:0e:2d:29:3e:01:ea:
7a:40:94:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:39 2023 by rpki-client on console.sobornost.net