Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YZxI_tt3ApH4dutuGAMSke20FJs.cer
File: YZxI_tt3ApH4dutuGAMSke20FJs.cer (raw, json)
Hash identifier: JANTXVlROIbKGBDy44FB0krFFDwp8Ve7z5ijDkNxyBk=
Subject key identifier: 61:9C:48:FE:DB:77:02:91:F8:76:EB:6E:18:03:12:91:ED:B4:14:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9E8A746EE3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/31af9c-e791-4553-8495-15b8a6b1fec2/1/YZxI_tt3ApH4dutuGAMSke20FJs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/31af9c-e791-4553-8495-15b8a6b1fec2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:04:24 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.238.36.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680927719139 (0x9e8a746ee3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:04:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=619c48fedb770291f876eb6e18031291edb4149b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dc:88:3e:53:53:ec:b7:68:71:e2:02:43:76:
b7:9e:72:f8:68:61:d3:36:ab:a8:60:1a:92:af:c4:
bf:fc:d5:f1:14:43:f1:a8:e0:e7:97:9d:88:4f:3d:
81:45:f9:81:0c:b6:38:ed:a8:89:12:ed:7c:4b:6c:
72:f3:83:e0:b7:16:aa:f2:75:e8:b0:dc:5f:29:5c:
ab:13:73:2e:67:25:35:04:d2:0a:d0:ac:6f:e7:e5:
97:21:cf:2d:c9:54:31:69:e0:25:60:79:31:94:10:
c0:a4:66:ff:96:dc:12:85:82:6a:d8:e9:5d:a9:c9:
95:67:ac:34:c9:ae:94:e3:e8:83:08:04:29:2c:5f:
d6:aa:48:5b:e2:ae:07:ce:08:56:bb:ab:92:11:27:
22:7a:f3:5e:f0:53:f7:5c:3d:66:29:98:58:05:80:
04:9e:50:b7:40:79:91:ef:72:b3:71:9c:71:87:ee:
cb:38:ee:f9:80:a5:86:7c:bd:fb:9a:06:a7:40:38:
6c:b3:a7:07:07:14:1d:2f:47:5e:a1:0e:9a:4e:7b:
ff:29:2b:6b:c9:98:f9:fd:92:7d:a3:7a:97:29:9c:
5c:a7:34:9d:73:11:9f:d2:b0:7d:6a:38:11:5e:fc:
22:b5:be:e8:dc:06:01:5b:9a:01:15:03:d5:fd:c1:
1f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9C:48:FE:DB:77:02:91:F8:76:EB:6E:18:03:12:91:ED:B4:14:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/31af9c-e791-4553-8495-15b8a6b1fec2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/31af9c-e791-4553-8495-15b8a6b1fec2/1/YZxI_tt3ApH4dutuGAMSke20FJs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.36.0/22
Signature Algorithm: sha256WithRSAEncryption
92:4f:8a:d4:7a:97:ef:df:19:41:b1:f6:40:77:35:fe:81:72:
02:9c:3e:8c:12:3d:66:58:23:e8:65:bb:80:ec:7c:cd:ef:7b:
88:cf:f9:0a:77:48:62:69:59:77:07:64:06:b0:b0:a9:ae:47:
fa:ec:a3:87:1a:32:80:c8:7b:c4:e5:76:b4:09:2b:c0:8e:88:
2b:f7:70:e9:19:7b:f2:df:cf:50:02:95:50:42:d4:2a:1b:32:
64:09:6b:72:16:f5:df:c9:a2:09:01:47:b8:cb:45:41:9c:db:
14:b6:1a:0a:fc:88:84:19:35:ba:84:e7:1e:a7:0a:0a:93:31:
01:a2:1c:b0:1b:21:19:c2:98:78:f7:55:ac:ed:6c:ca:29:00:
47:c9:a3:3e:73:1e:51:12:35:ec:a2:73:b4:97:a2:91:da:cc:
e4:a7:56:57:17:b6:00:d5:01:a0:d5:c4:65:6c:ec:94:d2:f8:
97:a2:41:7b:b0:d1:b9:87:0a:76:33:ca:f9:b6:72:8f:93:41:
99:dc:1c:f9:09:15:27:ab:12:29:44:6e:b2:7d:80:ed:2e:48:
94:aa:ff:34:d8:67:48:d5:07:26:40:6b:c7:cf:65:00:34:70:
50:80:ee:2b:88:c2:41:99:96:1a:f7:c8:9d:63:b6:3c:c7:40:
09:b5:55:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:44:17 2023 by rpki-client on console.sobornost.net