Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0YPe4obyd5dW28SOxkE-b-sjZVY.cer
File: 0YPe4obyd5dW28SOxkE-b-sjZVY.cer (raw, json)
Hash identifier: TEwCXmyhb4tE/+JbiVWN1iVrSIA/fIYo0/y12nnvAmM=
Subject key identifier: D1:83:DE:E2:86:F2:77:97:56:DB:C4:8E:C6:41:3E:6F:EB:23:65:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 846DEB94A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/b78c3a-3ce7-4b1c-b5ce-9197d64b74db/1/0YPe4obyd5dW28SOxkE-b-sjZVY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/b78c3a-3ce7-4b1c-b5ce-9197d64b74db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 07:47:55 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.155.24.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568779838627 (0x846deb94a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:55 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=d183dee286f2779756dbc48ec6413e6feb236556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:92:f3:ad:b7:44:2d:44:d3:89:e3:34:e0:
3e:0a:d0:b0:62:bf:95:5e:48:a6:f4:37:0d:a5:53:
62:1a:9d:52:86:6d:61:75:0a:aa:a1:bb:3a:2c:fb:
21:79:f3:df:98:1b:00:4b:f7:cf:4f:b5:a7:aa:84:
8b:d4:0f:61:49:9a:93:b2:b4:0c:f1:51:b4:62:b0:
16:77:0a:b5:0e:16:56:63:b9:0b:5a:67:26:69:fd:
8e:df:f4:a8:41:48:2d:64:28:22:2f:45:51:a8:92:
9a:fa:18:b4:1d:cf:2c:f2:81:cf:a6:d4:e7:90:af:
3c:4b:a2:f7:0a:56:b6:8b:9c:0d:8c:70:98:57:b7:
7b:2a:c4:5c:da:ce:5a:54:7d:23:16:87:ae:98:af:
ca:b4:01:8a:69:1d:99:a0:13:4e:4b:1c:2d:48:4a:
17:84:83:11:4d:a9:a7:93:4b:d6:9e:50:e2:99:5a:
ac:4f:84:66:b0:af:f5:33:65:48:2f:58:fa:bb:ac:
ae:fb:76:f8:39:d4:51:53:46:15:97:ab:28:21:aa:
8a:63:e8:cf:28:2a:38:c6:60:44:c6:31:18:b4:74:
8a:af:a9:4f:55:de:11:1a:d2:8b:c5:e7:36:79:ec:
32:11:09:86:b1:c6:9a:3a:b7:e6:a5:11:aa:30:bd:
15:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:83:DE:E2:86:F2:77:97:56:DB:C4:8E:C6:41:3E:6F:EB:23:65:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b78c3a-3ce7-4b1c-b5ce-9197d64b74db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b78c3a-3ce7-4b1c-b5ce-9197d64b74db/1/0YPe4obyd5dW28SOxkE-b-sjZVY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.24.0/22
Signature Algorithm: sha256WithRSAEncryption
89:c3:96:64:d1:f9:df:05:f9:0c:8e:1a:af:8a:53:38:48:eb:
2e:bf:02:8d:c9:87:df:28:e6:61:c8:61:e2:74:f8:31:71:3d:
f7:46:bc:3e:dc:e2:5f:71:e2:b2:6d:f5:65:98:0d:fe:b5:ef:
42:e2:54:20:52:68:0a:ec:24:ce:59:da:e8:05:2d:50:c7:66:
18:61:fb:8d:f0:d1:3c:c5:2e:84:3f:84:f2:f2:3c:c5:2b:fe:
46:c9:77:9d:d4:e5:12:79:43:a2:4a:06:ef:06:46:0f:c8:fe:
ad:8c:2f:36:11:2a:d9:4d:e3:66:45:19:89:ad:6b:24:91:5a:
8d:af:68:7e:b2:1d:75:1a:1e:d1:b3:a4:a9:8d:bd:4b:ee:2e:
73:40:4a:b9:dd:b1:c3:f3:52:c2:fd:5e:e2:5a:62:06:3d:c3:
6b:27:32:41:0d:01:72:d0:3b:71:48:88:1b:8f:91:33:0a:45:
47:79:c7:92:b3:a5:af:1d:33:5f:2c:43:68:ab:77:b3:fc:20:
d7:06:89:df:97:ec:06:61:5a:1d:49:cb:98:aa:91:58:68:af:
19:60:88:b5:02:50:8b:3f:25:94:d1:7c:a3:0f:58:ac:77:9a:
f1:3b:da:f5:91:97:27:de:cb:32:88:ac:d5:a5:d7:e2:9f:e1:
e6:8b:2b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:26 2023 by rpki-client on console-fra.rpki-client.org