Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3apBXoaim7ybS2c2jE2DlxCWK6c.cer
File: 3apBXoaim7ybS2c2jE2DlxCWK6c.cer (raw, json)
Hash identifier: w5FE3cU+Gf+N8ojK4jQfU6loRHN/hMoy7KtKNfdZ3YM=
Subject key identifier: DD:AA:41:5E:86:A2:9B:BC:9B:4B:67:36:8C:4D:83:97:10:96:2B:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 753768B2AF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://nostromo.heficed.net/repo/1047643/0/DDAA415E86A29BBC9B4B67368C4D839710962BA7.mft
caRepository: rsync://nostromo.heficed.net/repo/1047643/0/
Notify URL: https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before: Fri 01 Jan 2021 00:01:44 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.89.248.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503440781999 (0x753768b2af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:01:44 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=ddaa415e86a29bbc9b4b67368c4d839710962ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:82:26:9d:f7:c3:f0:f5:53:5c:80:30:73:60:
ff:e8:38:4d:1d:18:6a:a1:4b:9e:57:96:39:33:6f:
be:71:79:59:b9:17:6a:f2:b5:28:ac:39:ee:b6:a4:
80:bb:2c:25:63:45:3c:18:62:eb:a5:49:37:73:bf:
34:39:97:cf:60:97:c4:ac:18:ea:93:0e:08:9f:5f:
82:4c:0c:86:36:d4:21:2d:be:65:b2:60:39:8f:89:
73:93:07:e3:da:5b:c0:2c:b9:45:be:3e:37:00:61:
62:19:e1:00:74:8d:dc:45:fa:9c:2d:96:2d:6b:34:
7e:ad:bb:5c:18:ac:a9:3e:bf:bf:1f:20:e1:05:99:
da:13:6f:89:3f:82:a6:a7:d2:b5:57:03:2d:fd:35:
ef:a1:52:a2:64:a9:49:29:50:29:c6:70:ee:d7:4e:
6f:fb:84:a6:fc:58:b6:90:cd:92:0a:ca:29:6d:f2:
50:c9:a2:f1:15:fc:31:af:6f:dc:90:0a:dc:5e:2c:
fc:1d:81:85:3e:c2:d2:d5:7b:8a:d8:2d:f6:e4:fc:
b6:46:97:f6:91:42:84:81:f6:fd:ec:ba:40:0e:01:
51:56:76:4e:69:73:e9:ad:ef:70:e1:d0:b4:2b:59:
56:c8:cd:97:a4:fc:f8:9d:22:0f:0c:60:72:62:5c:
59:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AA:41:5E:86:A2:9B:BC:9B:4B:67:36:8C:4D:83:97:10:96:2B:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://nostromo.heficed.net/repo/1047643/0/
RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1047643/0/DDAA415E86A29BBC9B4B67368C4D839710962BA7.mft
RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.248.0/22
Signature Algorithm: sha256WithRSAEncryption
22:d7:b5:31:6a:a4:ee:6a:b8:64:cb:55:f9:1d:eb:ca:0f:eb:
81:b9:f6:1d:52:c0:28:20:59:e1:e3:6b:85:15:83:58:cd:f2:
1a:cd:c5:46:c1:85:b6:c6:a5:77:56:e7:a6:d9:dc:2a:e1:6c:
42:82:d5:a2:68:f1:7c:a5:e3:56:33:27:5f:18:a7:d8:29:60:
5a:21:45:e7:99:7f:c1:bc:48:17:83:f1:91:91:1e:0f:f1:1e:
e4:f6:0a:91:df:aa:f3:a8:9f:ce:05:d3:68:dc:02:cb:b2:9e:
7f:d8:44:dc:b2:18:c3:35:c9:28:bf:ea:92:dd:5a:16:57:d6:
72:1b:1f:38:ac:95:fa:ce:b3:8b:5c:29:44:b3:c5:14:e3:d9:
d4:0a:0d:40:cd:cb:b1:f3:ce:bf:7a:e1:81:fa:1b:1a:9f:16:
13:cb:44:bb:f0:56:f3:96:07:70:14:04:fa:9e:8e:97:10:93:
78:cf:20:6f:5d:91:c4:e5:05:46:59:6b:7c:55:9a:8e:7f:b8:
04:50:72:a5:06:2e:c3:fc:96:05:14:6a:01:94:f8:1d:3a:8f:
f4:c9:49:d0:61:2d:04:3d:09:87:2b:d2:9e:49:bc:93:23:cc:
a6:11:a9:c7:2c:8f:ed:a3:82:26:09:7c:ad:15:d5:82:66:e3:
5f:5c:20:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:32 2023 by rpki-client on console-ams.rpki-client.org