Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5NWSBQzWzb0B6s7Iy07WA2MIoEY.cer
File: 5NWSBQzWzb0B6s7Iy07WA2MIoEY.cer (raw, json)
Hash identifier: +ZYEDLG/2aseOC4S7MQu5eGHQSnvlznuaOeGbdGcm/I=
Subject key identifier: E4:D5:92:05:0C:D6:CD:BD:01:EA:CE:C8:CB:4E:D6:03:63:08:A0:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 752D44FB98
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://nostromo.heficed.net/repo/1123571/0/E4D592050CD6CDBD01EACEC8CB4ED6036308A046.mft
caRepository: rsync://nostromo.heficed.net/repo/1123571/0/
Notify URL: https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before: Fri 01 Jan 2021 00:01:12 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.139.180.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503270669208 (0x752d44fb98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:01:12 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=e4d592050cd6cdbd01eacec8cb4ed6036308a046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1a:bb:ca:04:3b:55:94:4c:3c:9c:54:24:57:
ff:d7:ee:a0:10:38:52:03:6d:f9:e0:75:22:4a:28:
3f:bc:78:d2:21:bc:09:5f:5a:bc:6b:b0:21:e8:9d:
6b:a2:bd:88:6a:b9:7a:64:36:d9:91:96:34:5a:b2:
43:32:1b:56:ec:d0:40:a1:3e:0b:44:5d:90:b7:d5:
93:45:e7:6e:eb:f1:a8:87:e6:56:31:9a:e8:d1:9a:
52:43:d9:13:83:5f:9a:a1:20:07:6b:5a:5d:af:95:
5e:de:dc:a3:26:d2:1b:4a:21:49:90:6e:b2:89:0f:
17:4f:ff:82:2b:69:34:45:b9:2d:5f:21:93:b4:27:
2a:a6:bd:05:bc:6d:f6:0d:66:42:e0:cf:b4:3b:fd:
f5:bb:d5:d7:ae:cc:32:d1:eb:61:2f:1c:78:6c:e3:
79:22:83:79:b1:f5:f6:a0:92:20:fc:ce:e0:86:30:
b3:b9:0b:24:5e:35:13:79:b8:ba:17:47:ea:1f:e0:
94:5e:cc:31:60:3c:33:73:ec:e1:bd:03:f3:ea:9d:
30:6b:e4:72:01:3d:ef:55:19:fb:03:36:2a:97:b3:
f1:1c:83:cc:dd:02:06:de:f0:4c:11:0f:1b:62:15:
0f:55:75:d9:24:82:83:3d:3c:d3:14:33:4c:aa:8a:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D5:92:05:0C:D6:CD:BD:01:EA:CE:C8:CB:4E:D6:03:63:08:A0:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://nostromo.heficed.net/repo/1123571/0/
RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123571/0/E4D592050CD6CDBD01EACEC8CB4ED6036308A046.mft
RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.180.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:60:86:a2:ae:8e:b8:0a:6b:3a:27:6c:4c:27:2f:10:e9:ab:
f0:04:c7:bb:af:59:c1:6a:99:30:2a:f1:f3:e3:09:49:73:f7:
ac:f6:91:4f:fb:be:e0:ff:51:80:11:99:28:de:d2:29:82:7b:
d2:e4:39:4a:2a:e8:bc:cf:80:ee:09:73:b9:5b:63:9d:94:75:
b5:4c:c0:5f:d2:24:71:c0:9d:a4:c9:62:db:5d:77:55:27:ad:
01:af:5f:02:6c:9f:0e:90:98:1e:30:09:27:95:74:86:ff:86:
39:08:1b:75:76:b7:9b:30:a6:47:79:5f:c1:3e:e5:dd:fb:4e:
7a:6c:8a:36:72:27:66:16:c8:63:5f:3f:94:19:2e:62:bd:23:
79:01:7c:36:b0:66:c0:93:2f:b3:16:6d:dc:67:48:a1:08:d1:
3e:5d:ca:de:bf:75:2a:30:9b:68:e3:4f:1a:98:b9:c5:0a:a1:
d4:87:74:83:d9:31:95:9d:7b:20:7f:de:b4:ee:26:9e:e9:09:
0f:7d:97:cb:11:e6:e0:62:83:3b:78:b2:57:32:22:ed:83:e3:
f0:91:25:9c:cc:29:40:cf:dc:01:e7:33:90:8a:7e:20:c8:78:
f6:67:11:17:e9:4b:a5:ca:c2:15:ff:17:bf:f7:43:f2:2b:cb:
1e:bc:92:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:49 2023 by rpki-client on console-fra.rpki-client.org