Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DH8Yc9_zyb3RFgza4fGFcDN4p4w.cer
File: DH8Yc9_zyb3RFgza4fGFcDN4p4w.cer (raw, json)
Hash identifier: R+fSFWY/feOqxjN7Yc1+DFoUkYLwAT3F9/xO95zKdxU=
Subject key identifier: 0C:7F:18:73:DF:F3:C9:BD:D1:16:0C:DA:E1:F1:85:70:33:78:A7:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 754CC4BBB6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://nostromo.heficed.net/repo/1123931/0/0C7F1873DFF3C9BDD1160CDAE1F185703378A78C.mft
caRepository: rsync://nostromo.heficed.net/repo/1123931/0/
Notify URL: https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before: Fri 01 Jan 2021 00:02:49 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: AS: 213049
IP: 45.137.156.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503799135158 (0x754cc4bbb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:02:49 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=0c7f1873dff3c9bdd1160cdae1f185703378a78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:be:e9:87:1d:3f:ee:7b:5e:f4:92:5c:90:
ee:ad:1e:54:dd:5c:2e:7e:01:54:85:40:ac:48:92:
12:56:9d:3e:e1:ad:79:4a:ba:7e:c0:c4:ff:e2:fe:
ad:55:73:b1:3c:bf:83:a2:fd:fe:f9:3b:b0:0b:4d:
8b:7b:42:84:45:3f:a4:78:e6:91:1f:9f:b8:63:71:
d4:fa:15:47:0e:0d:27:de:45:c8:a4:5c:f4:d8:8c:
96:f8:d6:af:9d:fb:bb:b0:8a:b6:63:b1:38:0c:4d:
39:94:b8:ea:c7:26:97:01:96:ad:c4:6a:f6:fa:7d:
7c:f5:e4:c4:e0:36:70:a5:4e:e4:1d:37:f6:d5:bf:
aa:46:cc:6c:0a:c6:9c:32:60:58:8d:05:62:b8:f2:
ad:49:6e:15:62:06:b0:4f:ac:48:1b:8c:29:da:5d:
8d:9c:ef:10:b4:24:e0:5b:58:75:a7:5c:8c:0f:d8:
5b:b7:6c:5a:ea:af:09:1c:0e:e3:08:c6:f6:b8:c7:
22:e4:f8:4d:d2:32:eb:b1:d1:3a:19:c5:9f:2e:18:
35:d0:32:a0:f9:99:15:97:d0:db:c5:7b:d0:98:94:
a0:aa:1b:c1:de:d9:c5:65:99:d4:2a:2f:73:4e:d9:
13:85:b2:4e:b3:4c:c5:18:72:1f:3c:dc:e7:84:92:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7F:18:73:DF:F3:C9:BD:D1:16:0C:DA:E1:F1:85:70:33:78:A7:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://nostromo.heficed.net/repo/1123931/0/
RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123931/0/0C7F1873DFF3C9BDD1160CDAE1F185703378A78C.mft
RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.156.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213049
Signature Algorithm: sha256WithRSAEncryption
6e:b9:ea:c8:f0:b9:e1:bc:b6:f9:d4:27:e3:67:4e:06:d5:a5:
e1:f1:22:2a:80:17:9d:8b:69:a7:f5:cf:3b:85:a4:75:e6:cb:
46:e8:ba:53:37:e4:fc:b9:54:4b:24:85:17:5c:81:ae:60:70:
8f:1b:98:a2:a8:e7:c9:d6:01:98:3e:67:fa:b6:77:32:1f:15:
a5:41:0e:b8:3f:43:fd:0a:a0:55:ba:20:cd:6a:29:9f:35:91:
22:23:dc:38:9a:c5:e1:c3:64:36:a3:c4:83:db:50:1a:99:b0:
2a:17:70:21:28:9c:da:70:fe:7b:e6:e0:02:03:2b:71:33:6d:
81:92:cc:d7:8d:de:33:e0:2e:2f:17:fc:3f:65:34:9b:f3:76:
f6:6a:c6:df:e9:ae:a8:a1:59:50:6b:79:10:7c:19:1b:2a:53:
0a:26:0a:37:24:02:63:47:30:f7:7d:0b:f9:15:7c:99:25:fd:
a4:ed:d1:32:d4:1b:87:df:b7:15:19:ee:d7:09:f1:00:b0:39:
7c:5d:0a:bc:7e:10:c3:46:06:c7:e6:a9:29:44:c1:a6:51:38:
22:80:82:55:98:e4:df:e8:95:ba:f9:4c:e8:46:c1:16:07:2c:
87:54:d6:20:ad:b2:a1:51:d2:0d:7f:b4:0a:42:5e:b2:f6:6a:
93:ee:83:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:07 2023 by rpki-client on console-ams.rpki-client.org