Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0TG6AfnRoc-beArWrjSuilbWyBY.cer
File: 0TG6AfnRoc-beArWrjSuilbWyBY.cer (raw, json)
Hash identifier: xCWv6w/lCqsNPCI4uCqx+uO4saRTVgMVZvSPMj1jQNQ=
Subject key identifier: D1:31:BA:01:F9:D1:A1:CF:9B:78:0A:D6:AE:34:AE:8A:56:D6:C8:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 83684D0E35
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/7180b8-b1e7-40e5-9d54-eb7226b72a5e/1/0TG6AfnRoc-beArWrjSuilbWyBY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/7180b8-b1e7-40e5-9d54-eb7226b72a5e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 07:09:54 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.143.76.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564390596149 (0x83684d0e35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:09:54 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=d131ba01f9d1a1cf9b780ad6ae34ae8a56d6c816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6e:3b:7c:4d:52:d9:98:41:fb:9b:c5:f9:75:
54:35:ec:e6:ca:de:2b:d1:e9:28:f9:be:5c:2b:88:
a1:17:22:02:19:ac:0f:2a:1a:c4:83:eb:bd:f4:92:
94:fd:67:83:b2:7a:5e:38:f6:5d:5d:30:b7:a6:15:
ee:52:81:b5:87:f4:5b:1a:74:49:dd:af:8c:02:99:
34:e5:0d:16:ac:ac:3c:14:53:04:74:c0:84:4f:50:
64:1e:16:06:6f:88:95:80:76:f2:dc:c1:7c:3b:ed:
dc:5c:75:d7:c2:ed:03:1d:23:45:c9:f0:d4:a7:7a:
3a:00:79:10:19:aa:07:d4:8a:32:08:09:af:d5:99:
10:54:93:a7:fa:c0:18:01:8f:54:99:1d:43:27:93:
5f:f6:ff:15:31:97:4f:bc:2e:2c:96:b3:20:41:0e:
c6:11:85:dd:fc:7c:8a:c8:ba:65:51:46:4c:47:af:
f3:4f:2a:d1:74:2c:5c:f8:8f:c8:55:f3:e4:0d:b8:
b2:6e:ae:29:5a:bb:ce:ca:66:aa:3a:76:f2:17:42:
fc:4e:89:43:9a:ec:03:ed:26:3c:d8:bf:1e:db:2e:
a8:f0:89:c7:dd:da:4d:a0:d7:01:cf:5e:c7:fd:b4:
b6:8e:7e:51:f5:56:8b:cb:91:12:12:b5:98:e4:ff:
80:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:31:BA:01:F9:D1:A1:CF:9B:78:0A:D6:AE:34:AE:8A:56:D6:C8:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7180b8-b1e7-40e5-9d54-eb7226b72a5e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7180b8-b1e7-40e5-9d54-eb7226b72a5e/1/0TG6AfnRoc-beArWrjSuilbWyBY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.76.0/22
Signature Algorithm: sha256WithRSAEncryption
94:2d:21:14:a7:fd:44:ef:32:74:a6:14:fd:d8:f4:ae:56:16:
6e:50:b1:39:c0:7d:38:c4:8b:e1:94:bc:02:fc:60:1b:37:e8:
64:c9:33:c5:25:9e:f6:24:8d:de:cb:bb:2d:aa:8c:d4:7c:9a:
cb:dd:20:6e:2c:57:ed:29:e2:58:8f:cb:7e:61:53:80:63:fc:
93:15:51:3b:b6:df:39:05:90:49:5a:b6:b5:05:3f:02:d5:88:
32:92:ac:53:13:81:23:9a:84:22:82:f9:fd:40:57:27:e1:55:
b5:97:ad:45:02:ed:63:e5:b3:59:89:6b:26:84:8a:bd:c3:69:
65:62:d1:1a:c5:3b:96:97:2a:15:7f:97:60:8e:8d:bc:ea:df:
98:1e:71:be:20:9c:1b:76:09:15:fb:fd:95:3a:41:f9:8b:c1:
a8:55:e2:dd:e4:7e:1a:f6:67:cb:47:bc:fe:f8:6c:9d:b2:7f:
2b:fe:5e:1f:55:82:e5:28:84:07:99:d9:3d:c2:26:cf:38:db:
94:ff:02:2c:ee:98:6a:d2:c8:4f:bd:e1:7b:05:90:59:6d:07:
6e:de:e1:6a:d4:12:20:68:45:c2:f1:fc:47:f4:b6:70:78:61:
e2:19:42:2c:5a:a6:89:17:04:d5:66:ae:cb:ef:6f:c1:ba:0c:
b8:65:16:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:26 2023 by rpki-client on console-fra.rpki-client.org