Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z1zOWcNpYR4_rRxg1RX1E1WEFKU.cer
File: Z1zOWcNpYR4_rRxg1RX1E1WEFKU.cer (raw, json)
Hash identifier: RLnlhl2lH2u6YxKJ+I1zA4cOj1YfZM6k65q1g+oHuMc=
Subject key identifier: 67:5C:CE:59:C3:69:61:1E:3F:AD:1C:60:D5:15:F5:13:55:84:14:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7BCBBC3E40
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/e9583a-3868-4eb7-b4d4-24eb114b4e4f/1/Z1zOWcNpYR4_rRxg1RX1E1WEFKU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/e9583a-3868-4eb7-b4d4-24eb114b4e4f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 02:46:14 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.14.44.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 531699088960 (0x7bcbbc3e40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:46:14 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=675cce59c369611e3fad1c60d515f513558414a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a5:e8:9f:c7:ae:72:cb:3a:e6:ed:e0:4a:48:
8d:1d:94:93:30:5c:4d:cd:b8:bc:a1:8b:f5:24:ea:
20:6a:44:aa:c2:cb:5a:fb:6e:3d:8b:df:a3:d7:52:
51:53:03:61:e3:0e:3f:ab:98:5f:4a:36:7c:90:51:
59:0c:f2:d4:9c:a5:15:7e:fa:6c:a9:bc:0d:7e:27:
eb:35:cd:57:31:db:e4:bb:9b:81:31:62:b0:71:37:
ee:b1:db:42:31:e0:43:45:49:7a:74:75:06:70:d2:
33:2b:e7:69:a3:1e:d0:17:b5:87:e8:6b:27:0c:a9:
1e:d4:2f:32:f8:6c:4d:0f:63:9e:55:a8:e8:cf:71:
01:af:2e:14:2f:61:4d:b6:66:d7:da:72:45:94:36:
a3:c8:52:63:9b:23:0a:93:af:69:02:e4:5d:9e:87:
d5:5f:0a:90:bb:59:94:26:78:10:ad:b2:8a:d6:47:
c6:10:d6:10:79:d9:c9:0f:c0:9f:12:ba:b3:80:2d:
48:87:c6:ef:97:82:be:50:7b:fc:e0:70:c2:81:0f:
c6:18:49:70:b8:58:e9:5c:13:ef:ca:77:13:46:b0:
9a:15:17:db:e0:b8:22:36:3e:89:b3:fc:31:66:5f:
5d:f6:c9:aa:af:5b:ad:2b:bc:dc:ab:64:25:10:bd:
bc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5C:CE:59:C3:69:61:1E:3F:AD:1C:60:D5:15:F5:13:55:84:14:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e9583a-3868-4eb7-b4d4-24eb114b4e4f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e9583a-3868-4eb7-b4d4-24eb114b4e4f/1/Z1zOWcNpYR4_rRxg1RX1E1WEFKU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.44.0/22
Signature Algorithm: sha256WithRSAEncryption
05:8a:69:2f:08:68:24:50:ea:f7:be:3c:de:c2:8d:f6:f2:f4:
d9:b2:a8:59:c7:51:19:bf:06:30:7f:10:93:3b:cf:b5:9d:56:
3f:a5:e1:2f:89:52:57:e8:cf:6b:2e:da:4f:ca:86:90:ba:39:
e0:45:13:b9:64:0a:b1:fa:e3:f5:ab:f4:0b:a5:85:0b:7f:2e:
f7:e6:c6:8f:40:a5:7d:c0:0f:98:47:22:a6:02:43:90:00:77:
d1:3e:0d:82:90:5a:7e:22:23:d1:99:77:b0:86:7d:83:0b:5f:
71:41:3b:de:69:bb:f3:32:47:1e:93:f8:22:82:84:ec:4f:01:
8c:a2:fa:68:12:42:73:74:67:a1:4a:5d:20:7b:82:73:8b:4a:
02:74:e9:6c:8c:a9:d8:b6:02:9f:23:98:c9:5d:52:02:7a:5c:
c6:4e:8a:0d:85:58:b8:45:fb:83:55:d3:18:b8:ad:d1:4f:78:
c7:9d:17:1a:db:bd:cd:fb:58:d2:4d:4b:39:4f:ef:01:52:0e:
1a:18:d7:6e:af:7c:87:a4:d3:26:d6:86:79:7a:3d:cc:b4:b4:
66:49:79:cc:dc:b5:18:af:ad:c1:01:7f:69:06:15:ca:90:6d:
c2:3e:eb:63:91:32:3c:c3:e6:1a:98:98:c8:c0:5d:85:4c:cb:
79:5c:85:09
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:25 2023 by rpki-client on console-fra.rpki-client.org