Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GZmniDjiWZziFcOnYuG1hu9jA7E.cer
File: GZmniDjiWZziFcOnYuG1hu9jA7E.cer (raw, json)
Hash identifier: 3Vr6H9J0zxB8zQo3JAkL3R8iIUKLjE7HW00IimBQWck=
Subject key identifier: 19:99:A7:88:38:E2:59:9C:E2:15:C3:A7:62:E1:B5:86:EF:63:03:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 752EC1233F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://nostromo.heficed.net/repo/1123672/0/1999A78838E2599CE215C3A762E1B586EF6303B1.mft
caRepository: rsync://nostromo.heficed.net/repo/1123672/0/
Notify URL: https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before: Fri 01 Jan 2021 00:01:18 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 5.182.108.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503295583039 (0x752ec1233f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:01:18 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=1999a78838e2599ce215c3a762e1b586ef6303b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ea:59:c8:07:4d:c2:18:58:b1:0a:f4:57:26:
75:72:85:a1:d7:eb:ba:e2:f3:10:53:78:e8:a6:79:
6b:14:c0:ec:c1:f3:ec:c3:a8:56:55:94:14:62:dc:
97:31:34:12:9b:96:aa:b9:9b:08:03:88:55:10:bd:
c9:26:de:61:e0:b3:a4:59:38:5b:95:d3:ee:fa:56:
2a:e0:74:1b:45:87:5d:b7:d8:5b:61:5b:b6:9b:94:
1f:07:59:f8:6b:7e:6a:e6:b9:23:81:13:05:9d:19:
5f:f5:dc:55:a8:0f:16:f8:63:ec:55:0b:a0:1a:18:
ac:b2:e5:6d:f2:69:ed:07:67:4b:9e:64:06:63:ff:
b0:79:cf:2d:32:38:43:c9:71:6e:59:b0:7b:2a:c7:
3f:e6:be:9c:23:88:be:61:36:6c:a5:bc:7c:96:da:
2b:6c:d1:9f:0c:f9:00:96:e8:c5:23:72:7c:60:15:
1f:a5:bd:f3:cd:aa:b2:67:02:f4:78:59:a2:c0:2b:
4c:a6:88:62:18:58:9c:0f:e9:96:6e:b7:bf:f4:e4:
bd:42:63:ea:6e:77:fe:c3:0a:12:7e:b3:dc:78:05:
89:d9:33:d3:c9:26:53:2b:02:56:21:c9:54:a3:80:
fc:0c:b6:76:92:d6:84:25:e7:f3:25:38:2a:53:fb:
6e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:99:A7:88:38:E2:59:9C:E2:15:C3:A7:62:E1:B5:86:EF:63:03:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://nostromo.heficed.net/repo/1123672/0/
RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123672/0/1999A78838E2599CE215C3A762E1B586EF6303B1.mft
RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.108.0/22
Signature Algorithm: sha256WithRSAEncryption
02:07:e1:82:66:97:90:53:71:bf:f0:1b:88:bf:52:0a:11:d6:
5c:17:e6:c4:59:0f:08:f5:1a:7a:d5:1a:3c:57:8d:0d:a6:34:
6f:7a:e6:53:3a:f4:46:ae:bc:c9:e3:c4:62:00:4f:37:ee:32:
de:d2:e8:0a:1d:30:9d:8f:ca:5c:57:1e:85:af:8c:f4:04:41:
5d:95:54:e9:f9:6a:a1:65:70:c9:2b:88:2a:6f:3c:9b:83:d2:
02:c3:76:22:c3:af:0d:a3:da:8c:df:e3:18:27:c2:3a:3d:38:
0f:34:98:7b:2d:45:3a:4c:3b:d0:93:3d:39:a8:21:ab:b5:ad:
cc:5d:89:5b:50:ec:c1:f0:e1:bd:05:dd:76:72:85:70:94:c7:
3a:12:02:9d:30:43:29:c3:6c:3c:00:1c:64:6a:e9:bd:e1:4a:
6b:f9:36:73:3f:7c:68:24:05:94:4d:08:71:95:da:6b:58:17:
d3:d7:0b:ff:df:c5:76:77:d7:f8:17:d0:4e:09:d2:5e:4b:8f:
b4:3f:81:40:1a:3d:47:04:5e:03:29:7e:1c:a5:79:96:a3:0d:
c3:91:0b:91:a7:00:e9:39:5c:41:a5:9f:e1:e2:7e:35:e1:f5:
bd:19:0b:15:02:8d:bb:51:76:0b:d2:b4:17:3b:60:9f:ec:d0:
b8:a3:dc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:29 2023 by rpki-client on console-fra.rpki-client.org