Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OtQQ2vsjw42m6H8GB10tp5ImNPM.cer
File: OtQQ2vsjw42m6H8GB10tp5ImNPM.cer (raw, json)
Hash identifier: u4Aj0KblfH7CMYjjgjoAT+p+WN5OMXDOfMcMh4cDLno=
Subject key identifier: 3A:D4:10:DA:FB:23:C3:8D:A6:E8:7F:06:07:5D:2D:A7:92:26:34:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 752AF0D067
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://nostromo.heficed.net/repo/1123901/0/3AD410DAFB23C38DA6E87F06075D2DA7922634F3.mft
caRepository: rsync://nostromo.heficed.net/repo/1123901/0/
Notify URL: https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before: Fri 01 Jan 2021 00:01:01 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: AS: 48578
IP: 45.137.132.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503231598695 (0x752af0d067)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:01:01 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=3ad410dafb23c38da6e87f06075d2da7922634f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fb:82:aa:d1:71:f3:f9:9f:8b:4a:67:e8:d5:
01:1a:71:a5:90:83:81:d8:b2:6a:72:f8:e8:f1:2c:
db:87:85:00:96:05:ef:83:03:2c:28:8a:3c:3c:27:
1c:53:f9:9d:70:1f:93:da:4e:23:00:74:e6:54:4e:
bf:66:78:a3:fb:be:e6:9b:bb:56:c9:05:3b:92:b3:
48:61:64:f6:96:1f:e5:bf:0f:10:1c:48:b3:83:98:
3b:fa:6d:01:28:d3:38:91:53:e0:4b:d2:09:8e:c4:
38:1a:03:47:b6:ff:39:e1:91:cb:77:35:4f:f5:d7:
8f:cf:23:7d:99:3c:aa:ee:c3:ff:be:58:67:e2:fe:
1d:b6:24:a3:5c:92:8f:48:7e:56:d4:1c:60:d1:51:
cf:c4:b2:d4:b7:2c:c7:3e:71:0a:09:d4:6f:9e:21:
d5:fe:f4:ac:25:04:29:da:61:b2:6a:1c:29:5b:a3:
4e:78:bb:a8:9e:b4:07:3c:74:45:da:08:76:e8:39:
85:c5:fd:fe:2e:24:c6:49:0f:ce:36:7d:da:62:2a:
db:f9:89:74:a0:ee:c2:88:91:a0:4a:5f:fe:22:d0:
63:21:2c:b7:48:f6:78:d5:a4:96:47:9b:fb:36:a6:
e2:f3:62:a8:93:c5:47:a6:1c:bf:f5:06:60:04:dc:
e5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D4:10:DA:FB:23:C3:8D:A6:E8:7F:06:07:5D:2D:A7:92:26:34:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://nostromo.heficed.net/repo/1123901/0/
RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123901/0/3AD410DAFB23C38DA6E87F06075D2DA7922634F3.mft
RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.132.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48578
Signature Algorithm: sha256WithRSAEncryption
96:6a:56:4b:b2:f7:cd:94:fc:c2:f7:67:81:37:b5:98:f6:ae:
2d:66:27:b1:39:da:40:70:f1:5c:23:d0:ff:16:ec:01:95:de:
5f:64:f6:17:7b:a4:23:9b:f6:9a:48:58:a0:fb:1c:5b:c0:50:
e7:3f:96:4b:cc:c1:95:4a:89:04:66:01:67:b0:90:30:a2:72:
ec:5d:a2:fa:f7:89:0f:a8:e6:56:1c:eb:44:c6:68:c0:eb:3c:
9e:01:e9:a1:10:7a:a6:38:42:63:32:5f:b9:98:9b:5e:70:18:
2b:82:b2:e3:92:5b:57:74:fd:bf:4e:61:b8:67:17:5a:13:72:
6d:5d:b4:1f:87:76:43:29:91:de:a6:c6:f3:19:38:54:60:96:
3d:90:17:df:50:a3:d1:03:87:ea:b5:5d:07:a6:86:5f:6c:16:
19:10:a4:5f:c9:44:3d:1c:02:99:7e:13:7d:9a:9a:91:ec:e7:
29:d3:23:9d:32:20:ef:25:34:88:9a:67:75:c4:da:23:ae:d2:
80:12:03:95:18:d7:1b:40:f7:58:89:dc:88:42:e7:6f:0d:05:
f4:86:b1:19:a9:a2:20:dd:0e:ad:e3:1c:c3:06:b9:3a:8b:01:
81:fd:74:72:dd:c7:38:a5:e9:51:f0:b1:6c:42:44:8d:72:3f:
93:ae:c5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:54 2023 by rpki-client on console-fra.rpki-client.org