Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0HwSjydyr44MS6enVc6pcuUhU4M.cer
File: 0HwSjydyr44MS6enVc6pcuUhU4M.cer (raw, json)
Hash identifier: 3bPYc9hMykk655btq2meUr4m74Ic944bqewd+JXwS8I=
Subject key identifier: D0:7C:12:8F:27:72:AF:8E:0C:4B:A7:A7:55:CE:A9:72:E5:21:53:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 6E270D65CB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/d953a6-cd7a-4c15-99e8-3779b4801715/1/0HwSjydyr44MS6enVc6pcuUhU4M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/d953a6-cd7a-4c15-99e8-3779b4801715/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 15 Aug 2020 16:19:19 +0000
Certificate not after: Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources: IP: 85.202.80.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473101592011 (0x6e270d65cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 15 16:19:19 2020 GMT
Not After : Jul 1 00:00:00 2021 GMT
Subject: CN=d07c128f2772af8e0c4ba7a755cea972e5215383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:92:a3:7a:80:d0:4c:6c:ce:b5:76:6e:df:6c:
f2:7d:1b:ed:b6:c4:4f:d6:51:01:91:db:87:c1:63:
23:fd:b6:d1:3e:a1:c6:cb:08:a7:79:e3:98:bb:a7:
ce:e4:19:23:48:25:cc:3a:eb:80:9c:97:68:a4:9f:
87:d4:5a:57:35:62:3b:5c:5e:4b:bc:eb:f7:c8:72:
9b:26:b1:00:28:06:74:45:5a:a3:1b:4a:e8:0b:18:
c0:7f:d9:51:82:ba:0b:c7:ab:45:50:6a:0a:0e:e4:
1f:30:23:73:c4:dd:66:ae:fd:03:ff:c7:05:d7:6c:
64:a9:68:dc:6c:31:a3:7d:10:a2:80:93:fb:21:2d:
da:31:85:de:bd:46:c2:de:0a:35:ae:ce:55:b5:16:
58:bd:29:c5:fd:2e:00:1f:f7:7c:da:9e:66:8d:4f:
04:8c:2c:d7:98:1a:cb:d7:ae:19:88:46:1c:d9:67:
88:d9:78:dd:78:3c:3a:4e:13:1e:35:8e:0e:49:fb:
2e:1e:d0:d1:c5:b9:5b:5e:63:44:5d:88:63:c8:bf:
4b:4e:27:80:95:9e:e8:c2:36:8f:64:38:66:78:88:
ee:e0:aa:2d:bb:78:27:89:90:cb:1a:e0:2b:c5:52:
f1:96:ca:1a:0a:82:6a:eb:02:d2:f5:8b:96:30:f3:
40:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7C:12:8F:27:72:AF:8E:0C:4B:A7:A7:55:CE:A9:72:E5:21:53:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d953a6-cd7a-4c15-99e8-3779b4801715/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d953a6-cd7a-4c15-99e8-3779b4801715/1/0HwSjydyr44MS6enVc6pcuUhU4M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.80.0/22
Signature Algorithm: sha256WithRSAEncryption
44:f2:08:c8:d0:be:bd:e6:7d:20:0a:bf:ba:de:22:53:2c:44:
d5:fb:0c:35:3c:13:58:7c:6b:4b:e5:5a:63:ab:0f:2e:c9:d4:
5c:af:76:97:88:58:8c:c5:b2:1b:e2:6b:c4:be:a3:91:66:dd:
28:10:34:5c:7e:5b:f6:60:ee:be:9c:5c:cc:22:16:a0:27:0f:
bf:08:b4:44:a9:c4:be:dd:5f:7d:78:46:06:da:36:a2:de:5a:
e7:80:2d:d9:62:68:fe:65:fb:30:a8:0d:05:9c:cf:18:ae:df:
e3:7e:7e:cd:92:da:5f:f1:d3:5a:32:d0:fe:7e:54:4c:4d:26:
2a:ea:95:21:56:e5:29:1f:60:49:5a:c5:82:89:e3:26:fe:f8:
58:fa:2a:3d:26:4c:77:56:56:1b:4f:d0:71:83:10:7d:a1:67:
04:86:2d:8f:ae:2f:40:3c:ff:c9:d0:bf:fc:0e:c0:8a:e5:b6:
72:1f:de:44:ad:51:1f:ea:45:4b:ae:c8:12:f5:0f:ae:62:be:
ca:90:ab:c0:de:fe:bb:b0:a4:e1:70:7d:b1:4e:b0:55:b6:f0:
cf:7f:04:de:fe:b0:cc:50:14:a0:42:75:73:27:63:99:1d:4f:
34:70:e5:d1:ab:1e:9d:7b:ef:64:3b:8b:24:56:63:99:26:3d:
ec:69:85:e9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:25 2023 by rpki-client on console-fra.rpki-client.org