Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gMAqEF8fyJSkirMHlwd0it4GnE8.cer
File: gMAqEF8fyJSkirMHlwd0it4GnE8.cer (raw, json)
Hash identifier: KRir35BMAVgn27qcRGO/hohmwvrA5fbSn4yCPAEkNQk=
Subject key identifier: 80:C0:2A:10:5F:1F:C8:94:A4:8A:B3:07:97:07:74:8A:DE:06:9C:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9AA8BAF3A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/9d8836-1c82-4cee-a57d-40cdd9a37892/1/gMAqEF8fyJSkirMHlwd0it4GnE8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/9d8836-1c82-4cee-a57d-40cdd9a37892/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:57:12 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 141.98.220.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664255787940 (0x9aa8baf3a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:57:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80c02a105f1fc894a48ab3079707748ade069c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d0:62:1a:3f:ca:c7:66:88:b5:7a:d3:62:ce:
e5:a5:70:58:c8:0e:11:b7:8a:b0:7b:71:c4:bb:30:
52:03:03:bc:34:6b:2a:27:78:06:af:5e:6e:0a:4e:
1e:9d:42:20:3b:e5:46:bd:c6:f3:fc:5a:ba:93:ee:
4a:74:3c:ab:75:f4:ee:60:c5:8c:c8:e5:d4:4e:70:
c9:93:8f:32:9d:b0:dd:a8:cf:ef:ff:cb:27:d9:34:
9c:c8:86:c7:c2:4c:75:ae:01:5f:a4:47:c5:54:a5:
66:79:7b:8e:43:ae:11:1e:c0:dd:3b:de:58:ba:3d:
3f:f0:dd:33:e5:fa:3d:2f:c1:77:5f:fe:3a:9b:8a:
4a:93:4b:53:a9:f3:17:f0:4f:fc:f8:d7:13:73:ef:
6f:f7:c4:cb:9c:e9:61:a9:db:37:b6:54:91:05:fb:
bb:d7:66:3e:18:f8:9b:c5:08:cd:6d:be:d9:30:cb:
9e:9e:68:f7:8f:8f:06:17:b1:38:da:66:14:0d:44:
3f:75:5f:29:15:1c:9b:ee:78:d2:73:39:f9:df:4b:
b3:28:fa:85:ca:1a:4e:09:02:78:4d:11:32:35:72:
47:dc:f3:67:49:a8:cc:be:2e:35:ae:45:66:0a:fb:
01:d0:c1:5c:95:aa:f0:84:ef:be:9d:5e:fc:d4:24:
90:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C0:2A:10:5F:1F:C8:94:A4:8A:B3:07:97:07:74:8A:DE:06:9C:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9d8836-1c82-4cee-a57d-40cdd9a37892/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9d8836-1c82-4cee-a57d-40cdd9a37892/1/gMAqEF8fyJSkirMHlwd0it4GnE8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.220.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:e5:e6:90:aa:a7:05:fd:29:e2:24:a6:dd:60:f9:dc:c5:e9:
f8:59:95:44:f9:28:6e:67:62:8e:2f:b9:c5:b7:49:4e:38:52:
1d:32:68:6f:2a:45:17:8e:98:90:80:f2:fa:33:43:4b:f6:4d:
04:20:59:eb:0e:62:13:fe:0c:b4:63:f4:e8:4c:6b:e0:f5:61:
59:3d:cc:cb:3d:03:b8:0f:9a:21:fe:12:8a:14:95:50:f3:5b:
8d:ce:ea:e6:c4:13:91:a4:0a:b0:db:08:e8:89:d3:56:01:4a:
90:87:6d:d0:ae:7c:01:8d:c7:bc:3d:5a:b0:17:f1:30:ce:5b:
0d:d2:43:3e:ba:51:52:18:2a:80:0d:f4:59:aa:b9:b6:75:cc:
00:6e:28:eb:f7:99:de:75:6b:70:ec:14:83:f2:06:1c:05:03:
84:33:bf:33:45:f0:e4:0d:01:a1:cf:df:a6:19:9e:d1:40:96:
71:9a:cd:95:fe:19:53:ca:a8:92:bf:b6:e8:a7:99:13:51:12:
1e:ef:8c:e3:d5:f5:51:a3:1c:fb:87:b2:6e:73:f9:c0:42:63:
53:40:a6:08:86:b0:fc:f6:6b:72:f7:51:2b:ff:1c:a0:88:85:
f9:90:bc:e3:01:cf:3e:9e:7c:24:1a:56:27:c9:78:a3:9d:05:
98:d6:3b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:10 2023 by rpki-client on console.sobornost.net