Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v-XZvPaOXaZ2wfBvgLCX1-MSkIE.cer
File: v-XZvPaOXaZ2wfBvgLCX1-MSkIE.cer (raw, json)
Hash identifier: 9JR72RCsJ6lmsuETrbPcj9gUjI105S3ExWNkMiaXQvE=
Subject key identifier: BF:E5:D9:BC:F6:8E:5D:A6:76:C1:F0:6F:80:B0:97:D7:E3:12:90:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A90B003FFC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/ed3ae3-7bdd-4fdb-b0e9-61243a4d4c81/1/v-XZvPaOXaZ2wfBvgLCX1-MSkIE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/ed3ae3-7bdd-4fdb-b0e9-61243a4d4c81/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:07:20 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 213.109.172.0/22
IP: 2a09:fc00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 726034038780 (0xa90b003ffc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:07:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfe5d9bcf68e5da676c1f06f80b097d7e3129081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0f:4d:42:bc:36:6d:9b:f4:45:d5:45:69:ff:
90:96:54:43:12:bb:8a:6c:fb:aa:d8:ce:55:80:cb:
11:51:d5:c7:07:c0:e4:e0:bb:2e:fa:5f:50:37:26:
67:2e:fa:55:99:6f:e0:91:8b:0f:77:26:2b:7c:c5:
f7:27:49:c0:0f:21:29:78:c8:11:91:1d:b3:39:be:
2a:00:fb:7f:cb:26:d5:b0:e3:b3:bc:0f:bd:76:f9:
5a:31:5b:95:af:28:5c:c7:68:a8:af:08:ab:ad:7f:
1a:15:a8:ce:b2:81:45:dc:9c:12:20:8c:a9:b6:f6:
0a:d9:f0:56:4b:b1:94:23:f8:2a:df:ee:15:84:04:
7e:a3:b0:68:17:63:05:b2:f6:2e:0d:53:0c:51:c0:
40:5e:1d:81:be:6f:fd:68:5b:f9:7f:cf:87:f2:1e:
8f:89:ef:a3:d1:17:79:e2:4d:fd:d1:04:f6:18:08:
c3:95:f1:5d:c9:c0:5c:a9:65:d7:86:b4:fe:ee:af:
27:7f:bf:56:ec:9c:be:83:db:b2:ff:8c:08:6f:dc:
4c:3b:42:41:7f:03:43:1f:b2:29:8d:fc:bb:74:08:
8b:87:a4:7c:5b:b5:94:df:f3:c0:26:29:b0:d4:07:
bd:a7:54:52:d3:40:a4:40:ef:b5:47:72:e4:af:38:
84:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E5:D9:BC:F6:8E:5D:A6:76:C1:F0:6F:80:B0:97:D7:E3:12:90:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ed3ae3-7bdd-4fdb-b0e9-61243a4d4c81/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ed3ae3-7bdd-4fdb-b0e9-61243a4d4c81/1/v-XZvPaOXaZ2wfBvgLCX1-MSkIE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.172.0/22
IPv6:
2a09:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
02:27:9d:39:2b:7c:4e:d9:52:0a:ec:b6:a6:d7:01:55:90:85:
1f:47:2c:66:10:f4:51:b2:4b:f6:1b:57:ae:6e:c9:a4:96:7a:
b4:1c:8a:42:28:ac:ca:ac:36:01:c6:eb:2d:1a:65:a0:e5:09:
29:96:0e:fb:99:2b:56:6a:ca:23:ae:f7:45:9b:5e:52:75:33:
f6:4a:ab:45:d8:83:ea:3f:ac:b1:af:b7:d4:38:df:cc:9d:42:
95:cc:78:ae:24:d4:93:76:f8:e8:45:d5:71:3d:b9:5f:9e:2d:
b5:d5:d6:b3:62:b9:22:b8:c1:f7:df:56:a7:07:2d:92:e7:3f:
b6:61:09:df:9a:31:3b:8d:01:a8:8d:93:7f:69:21:30:48:58:
8d:03:91:f2:12:57:d5:ca:82:06:07:6e:1e:29:b5:a7:23:24:
52:22:86:88:cb:83:ce:6b:db:26:7e:d5:d5:2c:3d:f5:53:ec:
ed:f0:42:c1:70:7c:75:87:bb:ad:f8:b9:1a:36:40:4d:72:54:
a5:f7:76:aa:98:35:b0:d6:4a:5f:23:ec:b7:56:df:d6:d5:f1:
3f:f9:b9:e1:84:34:85:59:86:3d:b3:0d:28:3b:aa:36:b9:57:
cb:15:96:5f:b7:2f:6a:1c:a7:28:8b:ec:19:1f:0c:72:38:67:
4d:f3:79:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:34 2023 by rpki-client on console.sobornost.net