Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RSIRAPIoSTVlzCy2reiSJSyxd84.cer
File: RSIRAPIoSTVlzCy2reiSJSyxd84.cer (raw, json)
Hash identifier: nEZuL8JMHpfc7HrCgVj0YMsFme/lWmOA9OJd53HXVPE=
Subject key identifier: 45:22:11:00:F2:28:49:35:65:CC:2C:B6:AD:E8:92:25:2C:B1:77:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 752F94EBA9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://nostromo.heficed.net/repo/1123762/0/45221100F228493565CC2CB6ADE892252CB177CE.mft
caRepository: rsync://nostromo.heficed.net/repo/1123762/0/
Notify URL: https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before: Fri 01 Jan 2021 00:01:20 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 85.208.72.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503309462441 (0x752f94eba9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:01:20 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=45221100f228493565cc2cb6ade892252cb177ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:80:31:63:a8:6a:16:4c:d9:08:da:64:e5:eb:
e5:08:5f:e8:aa:0d:c7:49:1d:e9:1f:73:3b:1b:5f:
70:a0:81:ff:76:9a:14:f1:19:59:31:56:e4:5d:ce:
d2:7b:49:32:e3:fc:5c:cb:71:20:48:72:1e:99:d1:
04:eb:33:82:c9:75:87:d2:b4:b1:45:50:88:75:41:
8c:97:08:a9:2c:44:23:ea:73:9e:57:ea:ba:e6:50:
3e:8c:40:bd:d7:98:2e:3b:db:a6:d2:5f:d7:4a:99:
40:29:16:a3:90:48:94:41:1f:4f:42:d4:fe:86:e1:
3c:f9:5d:28:e1:a6:3f:5e:77:7c:57:ed:03:07:b2:
fc:c2:42:e9:74:23:71:a5:ee:12:cf:92:9d:c1:03:
b5:02:87:ab:6d:16:44:fe:d0:50:a7:17:71:22:c8:
af:28:81:91:0b:3c:2e:d7:d3:fb:12:66:0a:e8:cf:
4c:51:db:e5:b7:c2:59:6c:fd:7e:bd:86:22:84:9f:
f3:e0:92:b5:35:86:de:78:7d:78:f0:e6:6c:d3:c3:
ef:fd:21:ef:82:5f:d9:19:e0:46:5d:36:df:40:a4:
9b:8b:f1:f5:08:5f:f7:e5:42:54:9d:a6:dd:f4:5d:
7d:5e:df:c9:f3:8f:fd:f9:32:6c:15:4c:53:b1:08:
66:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:22:11:00:F2:28:49:35:65:CC:2C:B6:AD:E8:92:25:2C:B1:77:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://nostromo.heficed.net/repo/1123762/0/
RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123762/0/45221100F228493565CC2CB6ADE892252CB177CE.mft
RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.72.0/22
Signature Algorithm: sha256WithRSAEncryption
54:97:de:c5:15:c9:b4:65:5a:6a:e2:1c:e1:35:93:65:0d:2f:
40:0b:48:f3:8f:f8:bc:59:fa:fa:71:21:cd:cc:95:65:85:17:
76:8b:25:6c:59:6b:ac:51:a9:d2:da:27:e2:2e:f4:40:fa:29:
7c:70:5f:5f:c0:94:a8:9b:bd:c6:79:a7:f4:22:96:a9:f9:19:
ca:61:5f:b8:14:b9:78:d5:77:c5:d6:8f:17:49:50:a8:07:a6:
1e:ed:4c:cf:40:8c:d4:7c:7e:1d:2d:e1:d0:11:f6:5c:07:87:
2f:4b:36:42:5a:e8:a4:74:ab:14:37:71:a7:40:11:ef:68:b2:
6e:8b:65:aa:9f:99:86:6f:de:a1:85:06:ba:1f:6b:c7:f3:d8:
dc:23:3c:b7:64:3f:c9:fe:d6:bd:38:90:6d:07:1b:db:9c:29:
8f:41:bb:2e:49:54:b5:84:1f:e0:1a:45:96:9d:32:7a:f7:03:
87:53:4e:d7:7b:a2:9a:88:cf:5c:42:70:d2:47:3c:1a:da:c4:
43:c6:f5:bd:4a:b8:4c:af:e2:90:04:f3:75:1b:39:a2:d3:e9:
30:5d:28:47:12:5b:3f:21:9f:9b:15:ae:56:c9:f9:32:1d:7a:
f0:5d:6c:8a:2c:9b:15:20:b5:d3:62:0c:51:c7:7e:41:d8:be:
f0:ea:6d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:54 2023 by rpki-client on console-ams.rpki-client.org