Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FIRhCnTL__FGHkisL9yH7hVwsKs.cer
File: FIRhCnTL__FGHkisL9yH7hVwsKs.cer (raw, json)
Hash identifier: DcAh1XspQCu2VnlJ9Abaw8Wz2FKjOkxwagycpddLM4c=
Subject key identifier: 14:84:61:0A:74:CB:FF:F1:46:1E:48:AC:2F:DC:87:EE:15:70:B0:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 754FECA656
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://nostromo.heficed.net/repo/1123612/0/1484610A74CBFFF1461E48AC2FDC87EE1570B0AB.mft
caRepository: rsync://nostromo.heficed.net/repo/1123612/0/
Notify URL: https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before: Fri 01 Jan 2021 00:02:58 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 92.118.160.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503852082774 (0x754feca656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:02:58 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=1484610a74cbfff1461e48ac2fdc87ee1570b0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:c8:15:65:2e:d4:51:46:72:33:2d:9b:6c:
52:a9:0c:0a:9f:a0:ea:ae:14:a5:60:55:2e:f7:ab:
4f:04:27:1d:03:46:d7:52:cd:2e:e9:8c:c9:94:e3:
38:e7:ba:f2:b7:04:a0:2d:4b:d4:64:aa:7d:28:ef:
3f:ec:a6:3d:92:84:84:15:b9:7c:ff:c1:c8:7a:1f:
b1:ea:c3:17:09:63:b2:01:33:94:42:f2:e8:db:c9:
d8:01:3d:c3:a7:ea:8a:9f:c3:86:19:77:49:fb:7c:
6a:dd:10:a7:83:d5:ba:0c:cc:20:28:ff:db:4a:a5:
c2:07:b9:2a:bb:b7:c7:51:0e:4e:fd:b3:20:e1:d8:
b7:9d:df:19:1d:2e:96:f3:22:f1:ab:17:88:66:57:
16:c6:94:fc:ec:72:2d:31:2f:a3:d4:a4:e6:51:7c:
cd:03:e9:fa:0d:8d:d8:14:ab:0e:d9:b7:55:30:6f:
76:2f:b1:83:56:0e:bf:0b:da:c7:03:dc:f6:09:30:
89:87:eb:84:a3:71:ac:0c:7b:4b:37:82:86:40:24:
18:ac:38:78:0e:bf:cc:af:5a:84:02:54:66:7b:59:
ca:ee:63:f0:51:46:8c:ad:6d:e0:3d:d2:68:d9:03:
de:24:76:93:1e:d0:b5:c8:92:a9:2a:db:25:61:37:
91:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:84:61:0A:74:CB:FF:F1:46:1E:48:AC:2F:DC:87:EE:15:70:B0:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://nostromo.heficed.net/repo/1123612/0/
RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123612/0/1484610A74CBFFF1461E48AC2FDC87EE1570B0AB.mft
RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.160.0/22
Signature Algorithm: sha256WithRSAEncryption
63:ca:aa:af:6c:e9:79:20:ae:fe:c9:61:76:fd:5b:13:df:75:
61:d2:dc:1c:12:10:e8:75:4e:c0:11:e8:50:85:ad:09:f8:ca:
cf:0e:0a:7e:58:9a:90:07:d5:67:d1:6f:85:f7:0a:0d:2c:eb:
71:37:89:c0:f6:85:86:17:10:01:56:52:4c:45:8d:90:96:8b:
4b:1d:f7:cc:a7:e5:5a:d6:d0:b3:2d:84:3a:98:f7:04:96:00:
d3:a0:3e:a5:03:1a:f5:fb:90:f0:d7:9e:c6:b0:e3:43:b8:ec:
da:46:a4:b3:da:03:ef:3b:6f:5d:41:7e:b0:cd:a6:0d:41:ff:
2c:1c:ef:bb:ed:c3:77:34:50:16:ad:96:80:34:32:b0:14:0d:
41:67:66:a0:1c:28:85:78:f9:32:3f:bb:c5:b6:30:61:10:12:
78:7a:34:3a:17:ec:aa:7c:78:82:81:c3:1c:4b:44:18:d1:85:
c9:0f:a8:0f:fc:11:80:00:f1:c9:d6:ed:13:3e:b8:8f:6d:9b:
60:b1:e5:51:84:9c:41:69:57:8c:9e:bc:96:ed:17:96:52:63:
43:b6:73:05:58:9d:ef:fb:83:2a:74:d5:c1:ec:b5:3d:54:0d:
dd:6d:27:64:cb:22:5b:0f:98:61:3a:3b:f8:d8:50:a4:4f:0f:
8a:64:1f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:13 2023 by rpki-client on console-ams.rpki-client.org