Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O5ULAmlxIQSpv0TqhWrckTUDO9A.cer
File: O5ULAmlxIQSpv0TqhWrckTUDO9A.cer (raw, json)
Hash identifier: tF+nCzaAod4g3E7UhuvchuBhvqQt85BOACCZykd+mEM=
Subject key identifier: 3B:95:0B:02:69:71:21:04:A9:BF:44:EA:85:6A:DC:91:35:03:3B:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 752D250244
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://nostromo.heficed.net/repo/1123751/0/3B950B0269712104A9BF44EA856ADC9135033BD0.mft
caRepository: rsync://nostromo.heficed.net/repo/1123751/0/
Notify URL: https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before: Fri 01 Jan 2021 00:01:11 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 5.252.72.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503268573764 (0x752d250244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:01:11 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=3b950b0269712104a9bf44ea856adc9135033bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:6b:9f:fd:8c:d7:cc:0d:6e:e6:a9:e9:8b:
84:08:ef:cf:bb:af:a3:f0:78:b2:9f:1f:dc:5e:e4:
f1:13:38:d7:93:a8:98:a9:9b:ea:91:89:64:fe:b9:
83:71:3c:73:39:d9:6d:fc:fe:ae:19:78:68:60:8c:
b9:02:71:6a:ef:c7:27:1d:e3:84:10:81:1e:9f:ea:
8d:f9:ef:f8:10:4a:da:05:f1:57:3e:71:1a:89:06:
e8:1b:6d:31:25:2a:a9:3d:2d:40:a5:5d:69:a2:78:
dd:06:a7:af:b5:bb:79:47:cf:b5:19:b4:02:66:10:
53:05:55:80:f9:76:d8:ad:92:ca:d6:43:a0:53:f5:
80:19:97:6e:91:91:e1:d3:fc:53:3f:02:cc:56:23:
3f:93:64:26:a8:a0:06:e0:52:30:66:0f:20:5f:0e:
41:a1:b5:c9:a4:24:06:6b:23:1f:c6:06:7c:e0:a6:
18:f4:ee:4f:f3:75:07:e0:e8:77:ac:ae:30:c4:fb:
ef:f2:f0:e4:78:04:31:bb:30:f8:cf:7b:82:08:08:
7c:ca:f9:56:71:6c:ae:c9:74:d7:85:24:e0:ab:0d:
8b:3a:b5:6c:fe:ba:c7:19:c5:9d:1e:ec:b9:eb:03:
d8:6a:99:a3:cf:b1:6a:16:17:7b:03:6c:1f:97:17:
ad:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:95:0B:02:69:71:21:04:A9:BF:44:EA:85:6A:DC:91:35:03:3B:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://nostromo.heficed.net/repo/1123751/0/
RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123751/0/3B950B0269712104A9BF44EA856ADC9135033BD0.mft
RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.72.0/22
Signature Algorithm: sha256WithRSAEncryption
53:f9:2b:bb:f0:0a:1f:c8:ad:9d:e7:fd:3c:b6:52:c3:60:c7:
6e:6a:32:db:50:17:5d:2e:1e:43:7b:d7:12:32:0f:48:4a:a8:
ce:de:21:39:68:5b:69:be:2b:a0:ae:05:ff:d9:02:9f:28:c9:
5f:56:e5:71:19:8b:64:8c:32:24:c0:cb:40:26:92:cd:0d:3c:
7f:60:e9:b2:59:0a:d4:43:9e:8c:aa:55:8f:8c:39:cc:cc:bb:
0b:ef:be:64:39:e6:a8:da:c8:fb:91:a3:a1:da:82:58:7c:ee:
bf:a3:1e:3c:9b:bb:c0:1d:d6:9f:94:9c:ca:44:cc:d8:2f:be:
cc:28:5f:d8:c9:4e:cc:3f:a4:b7:e1:a2:4b:d2:23:3e:ed:02:
66:71:ca:02:fb:28:d4:15:1e:53:17:c3:5c:48:da:7c:e2:0d:
55:77:cd:5c:5d:55:47:cd:52:29:c7:b5:06:69:02:e1:5e:c3:
76:19:c7:c5:79:e6:50:40:7e:f5:14:d3:f2:2b:09:e7:1f:aa:
a7:a5:75:59:be:5f:ee:8e:e9:1f:28:a8:4b:78:4d:48:c6:9b:
55:17:ee:4c:32:87:58:74:21:c1:0e:c1:b3:93:80:db:f0:f0:
1f:da:eb:d0:52:4b:cb:55:79:55:27:0d:0f:1c:93:2f:6e:1c:
67:e7:bd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:51 2023 by rpki-client on console-fra.rpki-client.org