Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4B7a-GA6NEYq0Vicwcbz1ccN2W4.cer
File: 4B7a-GA6NEYq0Vicwcbz1ccN2W4.cer (raw, json)
Hash identifier: zNluTtbz7sfmZfc2Iu3clVWO3TbPTB6bC/qlVossVuY=
Subject key identifier: E0:1E:DA:F8:60:3A:34:46:2A:D1:58:9C:C1:C6:F3:D5:C7:0D:D9:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7539B469E0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://nostromo.heficed.net/repo/635375/0/E01EDAF8603A34462AD1589CC1C6F3D5C70DD96E.mft
caRepository: rsync://nostromo.heficed.net/repo/635375/0/
Notify URL: https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before: Fri 01 Jan 2021 00:01:54 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 5.181.132.0/22
IP: 2a0e:1c00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503479298528 (0x7539b469e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:01:54 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=e01edaf8603a34462ad1589cc1c6f3d5c70dd96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:32:7e:c0:1f:3e:b1:1f:bd:ee:4e:94:f6:ed:
59:ed:9f:0c:db:a9:de:84:eb:86:c2:b1:97:8d:43:
78:92:e2:b3:54:92:81:67:31:19:9d:89:dc:2b:d1:
15:73:01:aa:7b:a3:f8:9f:46:cb:46:c5:bc:81:26:
d0:ed:54:e6:7e:27:1e:04:ab:c6:a5:0c:a5:57:25:
5e:a3:29:4e:a2:25:bb:25:bb:46:ba:6c:ce:17:56:
c5:73:dd:e5:65:53:eb:2e:be:c5:50:9c:b4:83:f5:
cb:42:67:df:bf:51:69:e9:88:62:8c:f1:ac:a7:9a:
bd:e6:0a:eb:48:a1:ae:1c:86:b0:59:e2:fb:e7:cd:
92:f0:53:3a:06:e8:13:dc:f6:27:f1:5a:84:6f:0e:
68:a2:ef:8c:be:2e:3c:cf:04:7e:f2:e3:0e:76:9c:
9c:d5:14:45:ad:ed:d3:65:0f:f2:bc:75:b9:3f:ef:
10:a8:a5:78:03:a7:e2:b3:68:b2:d3:a0:c0:df:a5:
42:0b:c7:e0:70:54:99:7d:ea:1e:3a:d9:91:31:3e:
20:3c:0c:af:52:53:43:5d:00:7a:ee:06:fe:25:db:
04:79:7f:c9:be:37:b3:98:92:db:4c:92:e6:4d:91:
45:1f:95:7b:e7:c1:de:54:fa:6a:31:16:7c:88:d2:
61:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1E:DA:F8:60:3A:34:46:2A:D1:58:9C:C1:C6:F3:D5:C7:0D:D9:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://nostromo.heficed.net/repo/635375/0/
RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/635375/0/E01EDAF8603A34462AD1589CC1C6F3D5C70DD96E.mft
RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.132.0/22
IPv6:
2a0e:1c00::/29
Signature Algorithm: sha256WithRSAEncryption
00:8b:10:30:fc:62:f1:8c:57:c1:a0:60:1a:53:39:f4:29:13:
83:af:73:80:15:a1:e5:ee:04:51:7d:3d:99:11:c8:3f:17:2b:
30:32:64:05:97:70:0f:95:78:4f:d5:96:36:f5:af:df:a3:c5:
d9:98:71:4e:fe:1a:bf:dc:19:7f:49:77:41:b9:c4:00:b4:47:
24:d4:51:de:35:da:ba:70:7b:95:78:53:43:1b:72:a7:56:96:
34:f5:29:fe:9d:8f:e6:cc:7b:b9:ab:fa:3f:d3:8e:22:fb:52:
af:29:fc:46:f4:8e:d7:a7:de:df:69:6b:c7:4d:bb:0a:cd:a3:
7c:f6:9b:48:fd:73:98:d4:d0:e7:b3:ec:e4:7b:0e:63:ca:e2:
2d:68:36:e1:01:98:9b:3d:e9:89:a2:43:13:22:91:a1:8f:f3:
ae:06:d9:f2:b9:94:d3:2d:37:bc:a3:7d:54:c1:ad:86:f0:0d:
4d:9a:8a:68:29:e2:bf:c9:38:83:96:24:8f:54:47:b4:bc:72:
b4:05:92:a8:e0:f2:bf:85:94:48:60:b9:c1:d6:9c:2a:a4:a3:
a4:6e:43:f8:c8:69:25:52:7f:1d:87:8c:2a:37:c4:39:ca:63:
63:4f:a9:2d:28:ec:fe:c7:16:1e:1b:4e:86:62:df:c9:b8:29:
56:14:75:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:33 2023 by rpki-client on console-fra.rpki-client.org