Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t-9sN6lfuycMeQI6nLSPkAQ2Rfo.cer
File: t-9sN6lfuycMeQI6nLSPkAQ2Rfo.cer (raw, json)
Hash identifier: vUgr/ap8Viy9X2BbgB0P9ZMZXgcwVc+N9U/pviCdS/g=
Subject key identifier: B7:EF:6C:37:A9:5F:BB:27:0C:79:02:3A:9C:B4:8F:90:04:36:45:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B0D92E0640
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/fad45c-72ee-402f-abf2-af0e35fb0512/1/t-9sN6lfuycMeQI6nLSPkAQ2Rfo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/fad45c-72ee-402f-abf2-af0e35fb0512/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 28 Apr 2022 07:56:42 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 195.47.245.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 759557916224 (0xb0d92e0640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 28 07:56:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7ef6c37a95fbb270c79023a9cb48f90043645fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:b3:cb:bc:5b:48:af:18:46:8a:3a:95:ab:
72:f6:03:41:96:e3:3b:71:a3:8f:ef:52:b9:65:04:
8b:0b:fd:7a:86:c6:44:f2:8e:b6:51:2a:14:36:b0:
32:d2:92:cf:59:4c:eb:f1:2c:b2:de:21:c7:05:a8:
b4:67:9f:e2:d6:94:ee:78:ff:d3:c9:8b:9d:ce:f4:
5a:36:52:cc:5a:f5:80:22:fd:2f:73:5a:61:2a:b2:
b0:05:7a:df:92:37:b5:11:88:d5:34:1d:ab:69:ff:
31:3c:8f:6f:ae:11:ae:f8:aa:c3:0c:cb:56:db:bc:
15:8d:79:a3:db:0b:99:5c:b1:eb:de:49:72:81:8b:
81:79:29:d1:2d:d5:ea:9a:40:d5:bd:12:7c:0b:55:
a3:4a:af:e1:3a:54:9b:25:dd:bb:1e:e1:e1:e0:22:
5c:7b:24:2d:a4:75:79:16:40:9c:68:b7:7f:e9:d1:
4c:cb:a6:bb:6c:39:12:b8:f7:3b:05:2a:d8:42:d0:
a2:cf:fa:e2:75:ed:63:07:7b:d5:4a:87:2a:c6:ee:
61:fc:e4:2d:7b:f6:dd:61:65:a6:42:91:24:58:8f:
16:a5:8c:18:54:8d:2d:3a:6a:38:90:02:7a:fd:34:
5b:93:70:05:e4:ad:88:93:51:37:ef:c4:3c:e7:b4:
6f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EF:6C:37:A9:5F:BB:27:0C:79:02:3A:9C:B4:8F:90:04:36:45:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fad45c-72ee-402f-abf2-af0e35fb0512/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fad45c-72ee-402f-abf2-af0e35fb0512/1/t-9sN6lfuycMeQI6nLSPkAQ2Rfo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.245.0/24
Signature Algorithm: sha256WithRSAEncryption
96:b9:08:01:3f:22:aa:8b:15:56:06:e5:8a:29:c0:1f:9d:c1:
3b:b4:4a:3e:80:52:38:02:73:eb:d4:80:55:8f:44:f2:09:4b:
70:73:3d:67:91:13:73:95:52:c9:72:dd:22:ba:e7:94:52:b1:
8e:e0:99:03:a1:90:da:b5:bc:69:ea:e7:30:79:0c:9c:03:76:
13:f4:c4:31:cd:66:d9:b1:98:e7:ce:f1:f7:aa:de:bd:77:91:
1e:f3:27:00:b1:a2:60:c0:a7:47:0d:67:be:bf:ce:96:e4:71:
53:e3:0f:ff:3a:9b:c5:f3:c7:1b:d1:eb:95:6e:0a:03:ff:b3:
f3:dd:e5:81:8a:43:85:dc:bf:94:cd:80:38:0d:c0:7b:9c:1a:
25:b1:e5:df:28:fd:58:0f:50:84:e6:f1:3b:3e:fc:cb:94:d5:
c8:56:12:01:d4:7d:6b:53:f1:33:f5:dc:2a:dc:a3:e8:12:e1:
97:8d:aa:65:23:3e:d9:c9:73:8d:ac:51:a0:e6:57:45:17:4f:
0d:43:2e:14:68:d5:89:63:d7:53:17:0a:4f:08:8d:8a:22:ac:
1e:cf:87:db:56:84:0e:75:78:1a:59:96:21:e0:3b:2a:56:4e:
3e:84:52:87:d2:2a:1a:2e:7c:73:73:c0:35:44:90:76:0e:32:
42:77:a0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:28 2023 by rpki-client on console.sobornost.net