Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0Wl9rK7vCLcQyhDasWUGjGxZrhM.cer
File: 0Wl9rK7vCLcQyhDasWUGjGxZrhM.cer (raw, json)
Hash identifier: wu6oOl06JfO+gpuOdSGHIhJ6FrGfSDu9H/ag2wsuSKk=
Subject key identifier: D1:69:7D:AC:AE:EF:08:B7:10:CA:10:DA:B1:65:06:8C:6C:59:AE:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7D5E8283D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/4e6a0d-8760-4e65-8d1a-24bcbc64dabf/1/0Wl9rK7vCLcQyhDasWUGjGxZrhM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/4e6a0d-8760-4e65-8d1a-24bcbc64dabf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 03:25:29 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.156.116.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538456523736 (0x7d5e8283d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:25:29 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=d1697dacaeef08b710ca10dab165068c6c59ae13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:f0:44:eb:de:fc:1b:d7:d3:b9:66:6c:b6:
3c:e5:fb:62:1c:4b:47:ee:53:aa:d5:7c:e5:38:dd:
e5:6f:40:62:c5:2c:43:cd:1a:0b:87:59:71:77:a1:
0d:44:2b:4c:3e:29:3e:c4:9f:96:04:90:55:d4:4f:
33:b8:6e:94:b2:06:45:2d:e5:2d:c0:6f:10:29:5c:
37:25:d1:fb:d4:bd:23:78:79:49:17:0b:78:16:a2:
17:11:80:a8:b6:39:fa:7d:97:dd:0c:cd:8a:08:81:
1d:08:8d:11:8d:78:3a:c9:69:93:63:5d:2e:10:55:
20:48:0e:e5:d3:a7:8b:e1:28:4b:f3:6a:94:fc:e6:
d2:d0:b2:43:4a:d2:f8:3e:60:af:04:7c:4b:7d:48:
72:22:2d:61:8d:22:23:68:2c:86:0f:5a:f6:f9:0f:
fe:32:57:f0:e9:a4:fc:e2:25:b1:91:27:08:13:dd:
a9:81:c3:c5:2a:73:0f:02:6d:d3:d6:7a:85:26:8d:
50:78:8d:16:11:bf:3c:25:60:8e:c2:90:59:75:07:
e4:93:7f:09:aa:3c:ae:06:95:ac:b7:cf:be:b8:0e:
d0:64:ba:d1:29:10:02:c2:00:e2:f0:66:a4:58:ab:
c7:c7:10:11:ab:69:d5:d2:03:27:43:9f:d9:44:44:
44:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:69:7D:AC:AE:EF:08:B7:10:CA:10:DA:B1:65:06:8C:6C:59:AE:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4e6a0d-8760-4e65-8d1a-24bcbc64dabf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4e6a0d-8760-4e65-8d1a-24bcbc64dabf/1/0Wl9rK7vCLcQyhDasWUGjGxZrhM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.116.0/22
Signature Algorithm: sha256WithRSAEncryption
72:9a:3e:68:bf:85:32:15:cc:88:85:95:d8:74:8a:00:b4:e1:
be:b7:51:ce:2e:41:b7:2c:e4:87:05:8e:a7:c9:fd:e8:eb:30:
17:65:50:b5:e6:8f:5d:a5:05:a7:6f:a6:9c:ec:95:ce:fe:39:
0f:8a:0e:60:0d:45:6f:1e:f2:b9:cd:5f:ee:af:ee:5d:d9:08:
b4:4c:1e:b8:71:76:db:b5:5c:14:dd:f5:27:a4:0f:0c:e3:19:
1d:8a:be:69:94:5c:c4:01:d4:63:36:52:ef:2a:69:fc:24:2e:
19:c5:d4:39:ac:8c:dc:33:4f:1c:02:9c:90:f9:02:bb:b6:1f:
ec:e1:b6:f5:38:3b:d8:25:ec:86:15:03:cd:e8:88:69:45:ea:
46:db:2b:92:7a:ec:78:a8:ba:eb:e3:af:30:2a:e7:51:93:3a:
1c:6c:5e:8f:c5:df:9f:d3:12:1b:42:20:dc:bd:88:37:35:ba:
f0:7b:21:b9:11:cb:12:79:e7:87:9f:ae:d7:76:db:79:a5:04:
2e:0f:de:7b:49:16:bf:c7:d2:5d:22:47:d5:3c:7b:bd:a2:e9:
b3:66:f7:c3:a6:73:4a:85:97:c5:e2:8c:40:38:38:bc:f6:42:
32:b4:9d:00:e4:c9:34:55:21:d3:fe:d2:2e:8f:78:06:8c:60:
02:3a:9d:c0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:26 2023 by rpki-client on console-fra.rpki-client.org