Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0oPCLmovCJXyw83utPIPMMIklz0.cer
File: 0oPCLmovCJXyw83utPIPMMIklz0.cer (raw, json)
Hash identifier: 51p0GLDWTXbTzmPvMohQde9EzbolUEP7OwVaagRzx/Q=
Subject key identifier: D2:83:C2:2E:6A:2F:08:95:F2:C3:CD:EE:B4:F2:0F:30:C2:24:97:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 83B85A3A2B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/9a84a2-97f8-471b-a421-c9e85bab04ca/1/0oPCLmovCJXyw83utPIPMMIklz0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/9a84a2-97f8-471b-a421-c9e85bab04ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 07:24:43 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: AS: 50467
AS: 197377
IP: 46.151.16.0/21
IP: 91.221.88.0/23
IP: 109.95.144.0/21
IP: 193.200.133.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565733636651 (0x83b85a3a2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:24:43 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=d283c22e6a2f0895f2c3cdeeb4f20f30c224973d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:95:40:a3:44:08:af:49:60:71:b8:2a:63:
b7:d7:11:b2:fe:cc:70:fc:27:7a:6c:3f:ca:c9:28:
c0:26:48:c9:17:ff:5b:6a:0e:a2:86:30:e8:0e:46:
f8:16:f1:8e:63:7b:ec:ee:68:5a:bd:bc:f3:2e:fe:
e6:be:cc:a3:eb:96:44:f2:b5:bf:3c:8b:d0:c5:05:
0a:aa:16:bf:9b:b7:f6:6e:d5:e1:55:d9:45:9f:fd:
10:20:6d:14:42:a1:22:40:e3:89:f1:98:ce:c8:aa:
a1:d2:e1:ed:d9:00:68:fa:35:73:68:69:e8:a6:f0:
4a:45:f1:d8:af:7d:43:64:86:7d:69:cc:ac:49:b6:
cf:0a:e8:97:bd:c3:b7:fa:9e:7b:1e:39:dd:ed:1a:
c8:b8:2a:c4:c5:31:50:36:11:d2:8f:fa:5d:c1:a1:
4a:65:9c:cf:61:48:31:ee:f8:ac:ee:77:f6:d3:77:
88:61:10:c1:5e:aa:fb:c3:71:dc:62:eb:6e:26:e0:
7b:cc:aa:8c:13:8f:cc:5f:36:2f:6e:a2:3e:46:3c:
4f:a9:27:ff:a8:05:ed:7d:d8:1c:27:2c:38:ff:32:
80:e9:f9:d1:5a:f0:e7:e2:29:1e:af:90:6f:46:26:
99:36:82:3d:d0:5a:bb:1b:1e:0f:19:63:fe:56:87:
19:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:83:C2:2E:6A:2F:08:95:F2:C3:CD:EE:B4:F2:0F:30:C2:24:97:3D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9a84a2-97f8-471b-a421-c9e85bab04ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9a84a2-97f8-471b-a421-c9e85bab04ca/1/0oPCLmovCJXyw83utPIPMMIklz0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.16.0/21
91.221.88.0/23
109.95.144.0/21
193.200.133.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50467
197377
Signature Algorithm: sha256WithRSAEncryption
21:3e:d8:56:2b:4a:d8:dd:b5:1e:81:c7:53:02:16:70:77:de:
b7:c8:6a:76:99:0a:40:d3:6b:c9:0c:e5:25:82:11:52:c2:3e:
96:82:71:38:31:9f:6a:ea:8b:27:dd:e5:49:32:9e:22:20:e3:
f6:c9:8a:b9:61:01:ca:04:58:54:3e:38:fa:4e:85:db:c6:b4:
17:54:b8:9f:c3:e0:f5:f9:fe:f1:4d:4b:ed:bf:2b:f7:e0:4a:
39:f0:5c:05:43:62:4f:e6:35:23:f6:aa:47:6b:e6:4e:ff:02:
27:cf:54:d9:31:7a:c3:7f:95:5f:a2:0e:4a:7f:68:9e:0b:29:
6d:51:58:80:4c:d6:22:74:53:7e:20:1f:23:a8:0c:4f:6d:f6:
f4:32:eb:06:d7:05:8f:70:61:ca:92:77:66:e8:b8:45:52:5f:
9c:87:e8:ef:60:d9:94:93:6b:f0:8e:35:8d:26:6c:2a:7c:94:
ce:95:ee:85:d6:c5:57:49:c7:9d:9d:5b:a1:c8:70:14:e7:2a:
78:33:36:94:b6:cc:65:0b:f4:e1:fe:98:f9:f0:58:76:f2:fb:
2b:87:1a:1f:cb:04:21:a1:bf:b4:48:e4:4b:aa:3c:1a:64:77:
43:21:38:cc:b2:f5:48:6a:a7:ef:11:6e:97:42:b2:b9:39:49:
95:1f:51:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:56 2023 by rpki-client on console-fra.rpki-client.org