Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oMQDPIrFXuRFlWkxX9jk-tm7XJ0.cer
File: oMQDPIrFXuRFlWkxX9jk-tm7XJ0.cer (raw, json)
Hash identifier: XGfVdpaVkKQ2+F2G0vGE2BBJAFQtDJbXm1oMj+kuR8o=
Subject key identifier: A0:C4:03:3C:8A:C5:5E:E4:45:95:69:31:5F:D8:E4:FA:D9:BB:5C:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A23DB73D17
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/b4744b-4c8a-4e1f-96c7-9473f19c3638/1/oMQDPIrFXuRFlWkxX9jk-tm7XJ0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/b4744b-4c8a-4e1f-96c7-9473f19c3638/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:52:58 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 217.18.208.0/22
IP: 2a04:3e80::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696820120855 (0xa23db73d17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:52:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0c4033c8ac55ee4459569315fd8e4fad9bb5c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:79:0a:b1:53:78:98:ed:dc:ff:ed:33:53:bc:
80:7e:e7:80:6d:0c:85:58:dd:1f:9c:24:15:a2:43:
92:db:b0:b0:b9:c9:cd:99:f5:1e:2c:4e:b2:e5:80:
1d:03:55:99:4b:f4:49:1e:4c:79:2c:ea:a6:b4:00:
10:5e:63:c5:60:f3:54:31:d3:04:8b:b6:5b:c4:4d:
0c:95:51:8d:a0:4b:a5:2a:49:f0:50:2d:6a:8a:c1:
0a:1f:80:65:48:4d:f8:0a:dc:a5:67:ae:40:d1:13:
08:e7:a8:ae:98:c4:1f:25:51:3d:f3:11:e3:c9:0d:
8c:cc:bb:ad:c8:e3:83:63:eb:d8:f0:b0:10:f1:b1:
19:e8:54:61:be:e1:07:03:68:8a:eb:9d:7c:6c:2c:
98:f8:4c:77:9e:81:0f:2f:3a:a9:cb:ef:08:72:fa:
6e:3a:1d:23:58:54:4c:f7:6c:7a:1d:8e:53:67:e0:
2b:4b:42:af:5e:24:44:ab:7c:6b:2e:ec:7c:d2:88:
92:9e:71:26:84:a2:fa:43:d2:e3:08:9f:49:91:a9:
1b:c7:b5:10:ad:9a:c5:f9:62:c6:83:cd:54:0d:ae:
dc:a5:85:8b:58:c5:8f:9d:b2:11:af:87:13:46:2e:
52:0b:40:04:36:98:47:2d:e8:38:8d:05:cd:4f:e7:
ff:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C4:03:3C:8A:C5:5E:E4:45:95:69:31:5F:D8:E4:FA:D9:BB:5C:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b4744b-4c8a-4e1f-96c7-9473f19c3638/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b4744b-4c8a-4e1f-96c7-9473f19c3638/1/oMQDPIrFXuRFlWkxX9jk-tm7XJ0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.208.0/22
IPv6:
2a04:3e80::/29
Signature Algorithm: sha256WithRSAEncryption
96:50:95:78:4b:42:37:53:3d:c9:81:10:cc:78:6a:1e:f1:47:
61:42:7b:80:f0:75:c8:ef:fc:30:c7:76:20:4d:29:dc:9d:e5:
2c:d4:3d:b0:fe:86:17:af:9f:e3:7b:0f:75:ba:a2:7a:8a:e3:
49:73:0a:72:75:7f:e6:95:1f:6c:46:ad:ad:68:9e:b3:3a:3d:
32:35:b7:67:57:82:8b:34:f3:a7:ff:51:49:75:e0:f4:5a:3a:
32:90:fe:e6:91:00:e5:c0:c3:43:31:20:28:a1:cb:0d:10:fc:
d2:c3:4c:8b:58:6d:7c:69:e0:ca:6d:cf:ab:93:f2:02:0e:fa:
6a:65:c0:d4:18:ae:92:fd:12:55:1d:16:89:6f:b6:15:ee:c6:
c9:7e:4d:19:ce:52:5f:b0:1c:e8:6c:5c:f2:83:38:1a:ca:97:
e3:a0:94:70:05:f7:aa:ec:83:9f:b4:ea:4b:11:7e:60:f4:1b:
d7:9b:2a:c2:f5:f7:b4:94:22:aa:28:50:e4:ba:92:82:f3:3d:
91:e9:e5:4a:29:4e:10:10:55:32:3e:b6:5e:18:3c:cc:02:1c:
dd:72:5d:ae:07:43:ed:cd:b1:08:15:66:2d:a2:80:3b:73:44:
b1:5c:fd:e6:ca:71:af:59:68:f2:12:03:ff:22:f3:73:d3:46:
d3:0c:97:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:10 2023 by rpki-client on console.sobornost.net