Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3JsPwPrhyzvSi50Bqvw1Y_2pUdo.cer
File: 3JsPwPrhyzvSi50Bqvw1Y_2pUdo.cer (raw, json)
Hash identifier: l7x9e1dkJ94Y5uJ/oRZknQ98dgluvLSY7HySbXXGqdk=
Subject key identifier: DC:9B:0F:C0:FA:E1:CB:3B:D2:8B:9D:01:AA:FC:35:63:FD:A9:51:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 751C13927E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/1/DC9B0FC0FAE1CB3BD28B9D01AAFC3563FDA951DA.mft
caRepository: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/1/
Notify URL: https://rpki.admin.freerangecloud.com/rrdp/notification.xml
Certificate not before: Fri 01 Jan 2021 00:00:05 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: AS: 59893
IP: 45.148.76.0/22
IP: 2a0f:9400::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 502982218366 (0x751c13927e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:00:05 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=dc9b0fc0fae1cb3bd28b9d01aafc3563fda951da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1c:ea:96:7d:e4:03:96:4b:8d:e2:ce:77:37:
85:6a:03:89:42:82:e4:c5:f3:1a:ec:0b:f7:48:60:
4c:2c:62:13:18:e5:b0:a4:03:45:2c:8e:94:90:90:
31:7d:f5:df:37:61:8d:98:42:49:22:e6:b9:08:f6:
3e:22:24:45:f8:39:ab:8a:16:f0:28:f3:50:8e:49:
a2:96:7f:90:7d:0f:23:2e:20:85:fa:4f:42:8d:e1:
a6:42:e3:b0:83:5d:a4:57:fd:4f:74:5c:53:d0:42:
c3:0e:72:68:cc:a4:fb:10:35:64:8b:b5:0d:a1:15:
62:a2:df:0c:24:e8:00:6f:4a:0c:c4:42:c3:8a:23:
22:34:16:a5:bf:f2:7e:79:2d:0f:5e:fb:a1:8e:44:
e3:47:94:33:40:24:fa:db:ef:51:07:ea:f0:c7:cf:
6d:1a:4a:e2:f9:b7:63:d8:f9:da:54:62:26:31:6d:
b2:4c:c2:b7:43:12:81:bc:5a:7d:5f:72:2b:03:5e:
2d:ee:fc:d9:34:b5:67:88:d3:62:44:cc:09:34:fc:
cf:66:68:4a:82:b8:eb:8d:29:d8:51:89:52:db:79:
73:b0:59:14:79:c5:bd:ef:1a:d5:c8:8e:87:fb:fd:
ae:fe:da:4d:73:bc:72:b7:f4:f5:2b:68:35:0c:65:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9B:0F:C0:FA:E1:CB:3B:D2:8B:9D:01:AA:FC:35:63:FD:A9:51:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/1/
RPKI Manifest - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/1/DC9B0FC0FAE1CB3BD28B9D01AAFC3563FDA951DA.mft
RPKI Notify - URI:https://rpki.admin.freerangecloud.com/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.76.0/22
IPv6:
2a0f:9400::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59893
Signature Algorithm: sha256WithRSAEncryption
a1:ff:b1:f6:0a:1c:b9:7e:ef:39:a9:5d:37:57:b9:95:c5:bc:
17:f5:e7:8c:23:33:2a:0a:d1:c3:4d:7b:18:13:fe:27:9f:b1:
78:8c:d4:5b:d4:90:94:98:4f:74:f3:8c:ef:86:01:12:39:d4:
de:f2:f4:78:01:8e:af:88:27:77:e0:75:10:aa:6b:1c:ab:d8:
89:24:a4:7d:63:7b:1d:a8:66:bf:28:10:55:32:05:66:32:fc:
d6:bb:0a:30:94:d1:11:e1:6e:9a:8e:9e:47:9e:79:06:23:7a:
a6:c5:2f:d0:16:ea:76:f8:47:e2:50:de:0d:5c:9d:e2:f9:2a:
79:4c:e3:51:e8:09:b4:a2:9a:84:42:ca:38:5f:d8:23:1b:41:
0f:b9:48:10:b6:2c:12:9f:7d:c1:83:b7:15:07:7c:1c:a8:f8:
57:9b:80:ee:98:b9:8c:d2:e2:ef:49:37:7a:dc:a7:6e:94:42:
6d:63:2b:da:74:af:fc:9e:94:71:a3:3a:cb:6d:a9:94:d6:b9:
9a:f8:60:b0:42:84:18:1d:a8:70:8a:d3:89:d1:d3:fd:48:ab:
11:ea:60:4d:1a:69:31:33:f4:0c:4f:d5:c8:50:7e:65:30:1b:
b2:b8:be:21:cf:a1:4a:4a:f1:80:99:57:02:8e:52:9e:66:68:
95:4e:49:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:45 2023 by rpki-client on console-fra.rpki-client.org