Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XmFho06xun1_PWMw3U2ari9ZAp0.cer
File: XmFho06xun1_PWMw3U2ari9ZAp0.cer (raw, json)
Hash identifier: jXyaXcpcXn0nI/Ovy1mGJhchzBJzc4lGQo8u6vJxK3s=
Subject key identifier: 5E:61:61:A3:4E:B1:BA:7D:7F:3D:63:30:DD:4D:9A:AE:2F:59:02:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9F15A2EF36
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/6491f3-f645-490e-a273-72782a4af5ef/1/XmFho06xun1_PWMw3U2ari9ZAp0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/6491f3-f645-490e-a273-72782a4af5ef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:56:27 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.53.86.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 683262799670 (0x9f15a2ef36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:56:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e6161a34eb1ba7d7f3d6330dd4d9aae2f59029d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:19:6a:7c:ee:e8:05:92:bf:b7:4f:aa:cc:35:
a8:79:03:a3:12:c5:fc:32:2f:70:aa:91:01:3c:8e:
d6:e0:9d:0e:fd:33:29:d0:48:14:8f:a2:b8:44:07:
03:46:e2:b9:ff:9c:af:b3:f4:1d:80:7e:05:c8:0b:
9c:49:79:9d:9e:f0:46:43:ba:c6:ff:34:98:3b:ae:
0f:ff:45:24:b5:f1:c5:0c:14:f6:c6:a5:66:51:e3:
66:f3:d8:74:66:37:88:da:f7:98:26:78:03:58:5a:
a7:1b:06:88:6e:66:c0:5c:5b:f7:9d:57:3a:2b:de:
03:36:cf:e4:05:3a:51:d4:2b:14:a5:08:1c:fc:52:
be:e0:b7:35:03:9e:b5:a6:48:4f:9b:74:7d:52:3c:
69:dc:af:ac:c6:17:8e:79:5c:8e:23:94:45:21:41:
7a:11:7f:ad:18:1f:79:5c:58:55:4e:d4:69:1b:1e:
80:20:ee:d6:f5:cd:10:5c:a8:ef:30:b8:7c:b0:ef:
da:4a:b8:c0:a7:25:9c:ae:02:1a:57:5d:0c:e8:3c:
e7:8f:ef:90:6c:3c:16:75:f1:55:43:af:60:ad:28:
32:20:e4:36:db:6f:18:6f:3f:6e:e7:5c:70:c2:cb:
a6:88:ea:30:d0:13:9d:c5:f0:45:9c:49:77:5a:79:
e7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:61:61:A3:4E:B1:BA:7D:7F:3D:63:30:DD:4D:9A:AE:2F:59:02:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6491f3-f645-490e-a273-72782a4af5ef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6491f3-f645-490e-a273-72782a4af5ef/1/XmFho06xun1_PWMw3U2ari9ZAp0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.86.0/24
Signature Algorithm: sha256WithRSAEncryption
06:2f:a0:dd:2f:e3:74:70:c7:28:67:44:fa:53:92:9b:67:d8:
11:91:46:81:55:53:9e:5b:83:1f:8f:6a:0a:0d:07:3c:76:bc:
8b:30:83:21:4f:68:0f:0f:42:d0:c3:b7:88:d7:a7:71:7b:73:
22:0e:e3:a9:ad:af:16:e2:26:76:ad:57:39:0a:73:7e:73:f8:
42:01:40:ae:2d:54:f1:74:ff:d4:77:e2:2d:d0:32:06:ab:b1:
fe:f6:b6:8d:28:dc:5b:a8:dd:a3:35:f9:1c:ba:ea:f3:f6:ea:
b4:6b:d4:44:17:8f:e2:55:7b:bd:8b:a1:de:25:db:55:cc:5e:
62:9e:04:e4:a4:ed:b1:d5:19:05:46:30:6f:59:02:a2:cc:31:
d5:20:a5:74:fe:86:98:1c:07:e7:8a:56:fd:fa:04:19:3f:a9:
2f:f0:26:50:29:6a:3f:32:5d:f4:89:4d:e9:3b:c2:52:e5:ea:
68:c1:81:9f:85:84:e1:bb:3a:82:5d:ae:cf:fc:85:3e:be:bd:
0a:c9:e5:41:65:48:30:f4:3d:b7:84:ac:e9:8a:e0:c0:6e:a9:
f4:d1:0b:0c:49:be:55:9b:94:7b:f1:9b:54:fb:70:57:20:00:
c0:9a:30:87:c8:1c:7a:3d:f0:e1:1a:fc:08:4f:2f:5d:c4:41:
ba:90:89:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:44:12 2023 by rpki-client on console.sobornost.net