Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V6v9Qka8W6YDetVGhmgJeqb1Ht8.cer
File: V6v9Qka8W6YDetVGhmgJeqb1Ht8.cer (raw, json)
Hash identifier: oIsrtSdjv5OjD65eHOdjONHQQRGEJD+Ri1m5P6maLk4=
Subject key identifier: 57:AB:FD:42:46:BC:5B:A6:03:7A:D5:46:86:68:09:7A:A6:F5:1E:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9C8CF1D1F8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/614424-13f3-4a8c-bb57-428f8c4b9753/1/V6v9Qka8W6YDetVGhmgJeqb1Ht8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/614424-13f3-4a8c-bb57-428f8c4b9753/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:52:48 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 5.180.64.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672379556344 (0x9c8cf1d1f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:52:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57abfd4246bc5ba6037ad5468668097aa6f51edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2f:7b:09:91:c3:7b:c5:90:dc:8d:c6:9e:df:
b9:66:d6:85:6f:01:6e:ef:62:46:16:1c:6c:41:e6:
a9:69:20:d2:fd:48:7b:18:27:40:c3:61:29:a1:46:
c7:29:bb:5b:3a:53:a3:1e:5b:23:49:7d:ec:b0:82:
1f:8d:ac:e5:2a:59:24:46:ed:ac:af:0a:91:9e:99:
1b:4e:00:25:4e:59:62:3a:a6:64:30:5c:4c:7a:37:
fa:30:1f:2f:33:6a:af:81:01:07:01:30:45:3a:78:
32:6f:c0:e7:f8:cd:dc:a1:f1:29:ac:f5:49:4a:b4:
c7:98:11:a9:83:92:56:25:b2:30:48:e8:0b:dd:55:
46:17:9b:e7:34:74:c8:cf:e4:8e:8c:05:22:40:e6:
c4:7d:49:41:f4:3d:c0:bd:d1:e6:e3:4d:04:ab:d4:
35:b6:6d:90:61:67:46:cc:ec:63:ad:ec:70:53:6b:
b8:02:97:81:53:c4:e9:f5:01:c2:e2:2f:c8:aa:a7:
10:93:91:8e:13:38:98:cf:2c:c3:8e:11:d5:3e:96:
0b:e0:9a:ca:84:0a:3f:0b:e1:f7:be:53:77:b7:c9:
db:a3:a7:e9:d9:41:96:75:6c:d6:b0:84:b4:a5:0f:
9d:1f:4b:bb:c1:d1:20:09:40:dc:79:69:8b:0e:bf:
b0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AB:FD:42:46:BC:5B:A6:03:7A:D5:46:86:68:09:7A:A6:F5:1E:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/614424-13f3-4a8c-bb57-428f8c4b9753/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/614424-13f3-4a8c-bb57-428f8c4b9753/1/V6v9Qka8W6YDetVGhmgJeqb1Ht8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.64.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:b5:81:c5:9a:63:83:21:02:2c:1e:d0:10:67:f4:a0:38:91:
9b:93:7b:cd:13:cb:37:46:22:b8:3a:53:33:61:64:58:65:0a:
c5:3d:b5:f5:27:0b:92:57:37:8f:b2:8c:1e:ab:26:17:81:34:
5c:05:e5:ad:98:f6:39:bf:45:20:44:6d:96:f3:0d:b8:52:26:
56:7e:f4:28:a6:ff:c7:43:19:5f:d0:44:1e:c4:8c:40:7d:7e:
a1:48:8d:75:42:3b:e1:d8:f2:09:7f:14:a4:2e:74:1f:14:94:
84:a9:e3:af:6c:22:41:f0:e2:ef:18:25:6c:31:01:64:82:1c:
48:78:6b:49:38:fc:6f:bd:18:55:03:b3:4a:0f:7f:92:a2:07:
90:e6:8d:26:d9:ab:3e:36:ea:6c:74:4e:5c:50:be:78:4d:de:
6c:fa:b0:a6:72:ed:7c:d8:d5:ec:a3:bf:0e:9c:25:17:a5:43:
52:37:72:af:aa:03:54:34:77:7b:14:86:aa:c2:50:7b:ae:dd:
66:e9:05:6f:cc:ff:67:d1:9c:81:2f:ce:14:30:0e:ac:1d:53:
ea:3c:4b:c4:de:e3:a2:a5:1a:00:50:54:29:6d:30:c4:a8:17:
9d:3f:6b:37:2a:98:74:f9:24:ef:11:0d:59:43:c9:51:a9:af:
87:51:41:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:54 2023 by rpki-client on console.sobornost.net