Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-Tlj99OopL6SYp8j5Erl1X54HaU.cer
File: 1-Tlj99OopL6SYp8j5Erl1X54HaU.cer (raw, json)
Hash identifier: viG/1KrbrjmCSNt33mmVBVDFOKRAoMhlgAMB3wa5Aas=
Subject key identifier: F9:39:63:F7:D3:A8:A4:BE:92:62:9F:23:E4:4A:E5:D5:7E:78:1D:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7548CC2B6C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://nostromo.heficed.net/repo/1123911/0/F93963F7D3A8A4BE92629F23E44AE5D57E781DA5.mft
caRepository: rsync://nostromo.heficed.net/repo/1123911/0/
Notify URL: https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before: Fri 01 Jan 2021 00:02:35 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: AS: 213044
IP: 45.133.172.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503732513644 (0x7548cc2b6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:02:35 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=f93963f7d3a8a4be92629f23e44ae5d57e781da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:db:32:0d:a9:94:f0:13:61:9a:02:1f:05:cd:
f1:c0:00:d7:5f:fd:94:4b:be:62:80:9f:40:41:5d:
ba:3e:82:bd:0f:de:11:6a:e6:fc:f6:13:ca:de:1a:
cd:ad:62:b5:98:48:e2:59:79:cf:3f:b2:a2:6a:a6:
c4:ba:38:d8:af:b7:31:a6:9a:13:a1:72:99:e2:61:
d1:10:37:e0:31:d3:17:71:c7:da:44:fa:69:79:aa:
de:22:d7:e7:ed:c7:57:51:52:e1:ca:e3:b0:5b:5a:
be:eb:b2:8a:e0:7b:6b:2c:c1:d5:de:39:e2:44:69:
66:5d:72:31:b7:db:7d:16:d6:89:16:36:f0:07:c3:
de:3f:00:b6:20:ca:06:6b:8d:c4:2b:e2:b3:54:53:
f7:a3:05:13:1d:c4:d2:a6:21:fc:86:7c:f3:ac:cb:
6e:0b:24:bb:68:89:d8:ba:6d:f7:d7:37:7c:c4:f0:
c8:dd:4d:38:74:60:59:ab:53:4f:f8:bd:4a:32:43:
6f:8c:7c:bd:19:bb:4d:3e:b2:fd:83:10:64:99:77:
d6:3a:8f:98:8b:5b:76:fd:3c:b3:46:a7:27:6d:37:
c2:af:b4:e6:b2:d6:ab:ef:f4:a8:b3:37:91:5b:f6:
68:c5:4a:37:0c:59:91:ab:dd:af:28:41:77:1d:dd:
4e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:39:63:F7:D3:A8:A4:BE:92:62:9F:23:E4:4A:E5:D5:7E:78:1D:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://nostromo.heficed.net/repo/1123911/0/
RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123911/0/F93963F7D3A8A4BE92629F23E44AE5D57E781DA5.mft
RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.172.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213044
Signature Algorithm: sha256WithRSAEncryption
0b:bc:b7:e8:a7:6b:ae:ca:d1:8e:33:ce:3d:a7:2d:6c:86:fb:
19:d2:d0:3d:3b:fa:7c:87:74:b8:52:5e:ae:68:78:99:ea:9b:
92:18:df:93:eb:a0:0b:89:e4:e1:b5:31:6f:c5:41:2e:be:40:
8a:14:81:87:fc:7a:e9:41:90:29:4e:f6:89:b8:bb:67:98:a5:
22:ad:c1:e1:9c:e3:91:26:c4:79:c5:f1:40:f2:e1:08:58:d7:
82:bf:2e:02:04:b3:17:9d:75:4f:25:11:85:8a:ab:de:c4:fa:
69:b9:da:60:33:e7:17:a7:63:cd:6a:c3:22:44:42:25:a0:64:
1d:33:c8:7d:5f:4d:8a:49:65:e9:00:c9:bd:08:10:00:55:d7:
fd:02:ba:a7:9a:a7:ce:bc:9c:a0:db:75:a0:24:91:47:00:28:
71:bb:3c:90:ab:dc:61:6c:b9:90:10:43:37:0e:c2:99:03:ba:
d5:3b:6e:2a:65:df:ec:ed:a0:d3:93:9c:53:80:40:1d:b6:37:
54:21:22:22:0a:18:99:9f:c8:5b:ff:dc:40:31:f7:22:13:0c:
34:2f:03:a3:04:a5:88:f2:47:70:64:81:2e:05:53:ae:60:c6:
e0:01:4a:de:64:a4:49:99:9f:ec:17:eb:a3:41:fb:81:2f:9e:
e4:30:ef:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:56 2023 by rpki-client on console-ams.rpki-client.org