Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YJM83pExNqduqiSAH_5v2cdaN58.cer
File: YJM83pExNqduqiSAH_5v2cdaN58.cer (raw, json)
Hash identifier: drVsSSoYsDsavJV5jI9CijE5VpGFhichHskMCwjzUyQ=
Subject key identifier: 60:93:3C:DE:91:31:36:A7:6E:AA:24:80:1F:FE:6F:D9:C7:5A:37:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D3C34DFADB709A2C20F392099473EBF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-3/0/60933CDE913136A76EAA24801FFE6FD9C75A379F.mft
caRepository: rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-3/0/
Notify URL: https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 12:09:00 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.194.201.0/24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:3c:34:df:ad:b7:09:a2:c2:0f:39:20:99:47:3e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:09:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60933cde913136a76eaa24801ffe6fd9c75a379f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ed:be:dd:20:e1:c5:8c:0e:79:84:27:a0:cf:
1a:47:e4:a0:36:2b:7e:3b:46:03:f3:64:5d:c3:0a:
90:c3:96:40:02:ea:44:94:b8:5a:97:56:0f:62:a8:
c5:1f:4b:8c:85:d0:05:eb:a3:e8:74:55:5e:7d:53:
ec:32:1e:a4:0d:92:df:69:bc:de:00:16:6a:46:cc:
dd:c4:81:6a:6e:57:90:4c:b8:dc:7f:f1:32:78:b8:
5a:a9:31:76:ab:c8:07:70:7c:90:a9:78:98:d7:8a:
48:81:99:55:51:a9:c3:8c:a7:66:95:eb:ae:ca:f3:
15:ac:8d:1e:9c:c9:e5:f3:df:cb:13:18:ee:5c:21:
fe:2d:34:fe:88:37:54:9e:4b:e1:b4:e9:be:a0:d6:
e1:d9:49:33:e5:39:0a:0f:57:40:a0:cf:78:3c:36:
df:1a:55:48:64:e5:d9:57:e6:30:a4:30:cf:a0:92:
d7:1f:ef:fc:b4:a1:fb:c4:cf:0b:4e:a1:70:fc:d5:
1b:06:06:f9:a4:04:81:9a:86:7d:45:44:ea:84:45:
1a:ac:85:9b:a8:7d:6b:ad:2a:69:7c:f3:74:d7:32:
2f:59:d4:f4:0a:32:c2:61:6e:72:75:f1:f1:a4:f3:
ec:35:e6:f2:b2:92:22:3c:2a:27:70:a7:61:86:57:
05:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:93:3C:DE:91:31:36:A7:6E:AA:24:80:1F:FE:6F:D9:C7:5A:37:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-3/0
RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-3/0/60933CDE913136A76EAA24801FFE6FD9C75A379F.mft
RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.201.0/24
Signature Algorithm: sha256WithRSAEncryption
02:a8:36:5d:ed:21:fc:8d:20:5a:ad:69:c0:6c:13:98:f1:f9:
c7:fe:4f:de:9f:67:61:af:7b:c4:d1:41:75:3d:d5:15:72:0b:
63:0d:84:db:89:35:24:8b:e6:90:e1:46:c6:d7:05:06:18:6d:
ac:c7:9d:f9:33:b0:da:56:b0:08:4f:a5:f7:09:4c:a7:e0:ff:
51:6d:74:f4:51:81:1d:0c:7e:84:89:98:0f:68:d2:53:85:f8:
92:b4:e5:1f:8f:60:41:4c:71:58:90:f5:ad:8d:0c:0c:24:e0:
9e:f0:f7:55:83:cd:06:35:ed:22:89:2b:69:f2:67:64:a5:11:
81:55:ae:b4:55:21:9d:12:39:4f:12:6f:b6:bc:68:04:ef:69:
dc:e3:90:01:c4:55:ca:9c:25:cf:9b:71:bd:1c:21:12:86:d1:
94:35:ed:67:c4:55:5a:52:e1:83:09:d8:6c:6f:82:99:db:0d:
a3:44:f6:4d:53:2a:08:e2:64:aa:3f:49:30:d9:18:d4:b3:f7:
17:ca:2d:f4:2c:32:00:dc:91:8a:ca:35:f4:4d:09:28:35:30:
80:4c:e4:f7:a1:7e:d1:b0:f8:92:da:50:04:24:83:ae:10:87:
ee:58:57:45:31:e7:34:38:d6:ef:40:4a:6f:67:e4:5a:cc:86:
84:d0:5c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:11:44 2025 by rpki-client