Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L4oC2eNHFEmN1qZSpQD-wiluhXU.cer
File: L4oC2eNHFEmN1qZSpQD-wiluhXU.cer (raw, json)
Hash identifier: mrY4PYIDVaS0rN4oa0M3NMd7erzuF7GSzznUn9gluno=
Subject key identifier: 2F:8A:02:D9:E3:47:14:49:8D:D6:A6:52:A5:00:FE:C2:29:6E:85:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 75477146EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://nostromo.heficed.net/repo/1124971/0/2F8A02D9E34714498DD6A652A500FEC2296E8575.mft
caRepository: rsync://nostromo.heficed.net/repo/1124971/0/
Notify URL: https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before: Fri 01 Jan 2021 00:02:31 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: AS: 206164
IP: 185.170.40.0/22
IP: 2a0a:9f00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503709779695 (0x75477146ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:02:31 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=2f8a02d9e34714498dd6a652a500fec2296e8575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f8:6e:38:61:c2:fe:59:23:8e:b3:d6:0c:a9:
64:d3:f5:ea:66:93:c9:d4:a2:1b:d2:51:ab:55:a0:
5b:93:e1:c3:77:1c:39:03:18:cb:fa:3a:b2:21:e7:
15:96:42:63:ce:c8:6e:c1:d5:cd:04:84:3e:82:e4:
03:0e:24:6d:3c:f3:d9:63:99:cf:ac:68:9d:91:9d:
85:b1:ad:fe:88:68:9e:9e:5b:b2:37:72:23:60:77:
b5:93:e2:af:26:86:74:66:8e:03:ec:3d:02:d1:89:
ff:64:d6:06:d7:2d:48:3e:46:f5:0d:44:d4:83:59:
e9:1f:83:14:cf:7b:77:ac:c3:40:af:4a:a7:aa:18:
77:5a:b6:19:ec:68:1b:38:8d:5f:40:3b:1c:cf:b9:
29:2c:6c:2a:fa:33:01:4a:f7:53:d7:60:fe:f4:71:
a7:06:91:f6:d4:b9:0d:a6:a0:d8:3f:68:11:78:76:
51:49:49:95:a7:28:22:ba:19:a4:d8:6b:87:82:2f:
f5:58:2d:91:48:12:67:95:8b:9c:45:13:2c:7b:df:
30:fa:a1:19:a2:e8:d0:22:47:56:c9:74:79:0c:aa:
c5:60:15:e2:08:f3:86:5d:e8:d8:ca:3d:f1:87:49:
1c:d6:77:71:c0:76:f2:91:99:9e:13:77:bd:48:f3:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8A:02:D9:E3:47:14:49:8D:D6:A6:52:A5:00:FE:C2:29:6E:85:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://nostromo.heficed.net/repo/1124971/0/
RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1124971/0/2F8A02D9E34714498DD6A652A500FEC2296E8575.mft
RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.40.0/22
IPv6:
2a0a:9f00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206164
Signature Algorithm: sha256WithRSAEncryption
61:31:a9:58:82:65:6a:f5:cc:e1:13:37:0d:fc:b8:7e:8c:4e:
30:19:58:92:0b:dd:47:4f:8e:72:a0:2e:60:94:28:15:90:32:
53:65:e5:38:ea:30:53:72:88:89:04:47:3d:3e:b1:3a:72:5b:
da:d3:9a:cb:1b:89:1b:f9:a5:2f:55:b7:05:78:ec:6c:ec:5d:
55:71:b2:ba:6f:45:81:03:48:ba:b9:cb:43:4f:8b:fd:23:e7:
42:da:0e:38:7c:42:ef:2c:b2:8f:28:a1:40:ad:31:d1:52:07:
cf:33:5e:1f:6d:15:2b:46:9b:39:16:98:95:3b:05:5f:d8:c7:
c3:70:8d:f6:1e:2b:2f:ac:1a:62:4f:bf:8f:e2:22:2a:99:af:
f8:8c:e1:06:84:d2:20:35:09:60:7d:a9:18:4b:da:b8:26:80:
05:e2:43:6e:58:b9:d2:3f:eb:d3:7b:cf:2a:1b:b2:dd:ba:1e:
78:fb:61:6c:ca:9a:45:f9:26:6e:6d:c5:0e:4e:27:d1:d2:e4:
79:75:ca:e7:4f:a2:07:21:bf:4f:2e:d5:f8:59:f6:c9:7c:db:
9e:c3:0f:0c:8e:13:15:aa:6f:73:4f:d8:03:e9:b3:00:40:65:
33:7e:3e:a0:e2:92:8e:5b:44:b8:60:98:fa:c5:51:1d:11:a7:
7f:a4:06:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:42 2023 by rpki-client on console-fra.rpki-client.org