Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XRKIUNNVqT2pm16TZA_9dJr6ZNQ.cer
File: XRKIUNNVqT2pm16TZA_9dJr6ZNQ.cer (raw, json)
Hash identifier: 8HrgJXJX3km5zB8iNysB84qABmtXbm3o8Ed9VEGzlTs=
Subject key identifier: 5D:12:88:50:D3:55:A9:3D:A9:9B:5E:93:64:0F:FD:74:9A:FA:64:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7540172A01
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://nostromo.heficed.net/repo/635152/0/5D128850D355A93DA99B5E93640FFD749AFA64D4.mft
caRepository: rsync://nostromo.heficed.net/repo/635152/0/
Notify URL: https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before: Fri 01 Jan 2021 00:02:14 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 92.242.184.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503586433537 (0x7540172a01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:02:14 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=5d128850d355a93da99b5e93640ffd749afa64d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e0:74:9e:6e:c6:7c:7f:be:6d:09:c4:5e:d6:
b2:f2:ae:c6:0b:00:01:84:31:6f:db:c4:af:95:f8:
21:cd:22:6f:b7:87:ce:53:f4:4d:5c:1d:ae:b8:b3:
cb:14:0c:24:29:13:ad:0b:be:d5:a2:f8:c6:e8:35:
63:51:46:0a:03:07:45:d2:77:6f:86:62:44:13:26:
3b:cb:2b:95:c0:27:d8:3c:0f:b3:69:e1:fd:f7:e9:
a4:11:4b:7e:02:67:75:75:58:cd:61:59:86:7c:f4:
ec:6e:cb:09:c5:0c:53:f2:dc:84:3c:08:a6:89:10:
2f:cd:9e:87:26:60:84:b2:ce:e3:3f:df:02:90:87:
cd:93:9e:67:36:2a:11:ae:06:f0:39:71:56:5b:c2:
60:50:60:51:a9:3f:44:1a:85:43:e9:18:09:a4:fd:
6a:7a:9a:ca:83:04:f1:bb:c3:72:f3:26:a3:9c:18:
c7:8d:4f:77:4d:e6:15:5e:f5:a7:2e:75:b5:48:9c:
77:60:7d:b9:02:e2:7e:03:4e:4f:f4:d9:58:f7:78:
7c:30:b9:1e:8e:b3:0c:05:d4:48:9b:41:54:f5:16:
14:19:2e:22:d9:ca:df:70:6c:e3:5a:86:47:c4:67:
0b:d1:5a:89:f2:b0:37:63:a1:57:a9:fb:8f:4a:59:
8f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:12:88:50:D3:55:A9:3D:A9:9B:5E:93:64:0F:FD:74:9A:FA:64:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://nostromo.heficed.net/repo/635152/0/
RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/635152/0/5D128850D355A93DA99B5E93640FFD749AFA64D4.mft
RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.184.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:bb:34:3e:d1:53:0a:ea:50:06:73:c0:57:56:c2:13:15:d2:
31:22:16:d8:17:f1:d5:d0:0d:c9:0a:02:42:48:ed:59:3c:6b:
4f:32:db:c3:41:95:ea:19:3d:c9:a4:bc:cf:63:98:ad:fc:41:
22:d3:e2:a5:9a:56:db:46:94:d6:1c:79:8c:53:3d:2c:d5:31:
94:98:7f:48:61:bc:e6:bf:87:05:fa:4f:41:2d:3e:7a:3c:e5:
73:7b:55:91:08:e2:68:73:4d:d7:5d:75:5a:2e:83:47:e2:6d:
90:9b:37:74:6a:0a:6d:90:d9:b1:f0:f2:b1:28:75:c6:a4:8e:
cf:22:5a:6d:37:c9:7e:da:f2:97:7f:bc:bb:82:20:a6:f8:8d:
55:74:83:e1:96:3b:e6:0a:10:62:c0:d2:ce:9a:3e:33:cd:f4:
60:a2:3f:1e:64:4f:10:43:63:87:af:41:4d:12:b9:6a:20:cd:
c3:41:21:c5:67:98:35:bb:9b:e7:11:ee:2e:ae:c6:20:76:ac:
ea:d7:ff:b1:7f:63:ec:67:0e:df:97:99:db:a2:63:9b:df:d5:
a4:dd:e8:e9:bf:2e:8f:eb:9d:7f:29:7c:70:ba:13:3e:4e:8c:
c2:4b:82:d2:24:de:5a:c9:40:25:da:9a:d2:d2:75:8d:77:3c:
6d:18:9e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:11 2023 by rpki-client on console-ams.rpki-client.org