Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0rX5zb-YOO2HBfUzq3sjqyW1pW8.cer
File: 0rX5zb-YOO2HBfUzq3sjqyW1pW8.cer (raw, json)
Hash identifier: Jd0BxpgrUMV+aMGCZiBQcJnyoxSlQ0mR9TjoDdMf7Zo=
Subject key identifier: D2:B5:F9:CD:BF:98:38:ED:87:05:F5:33:AB:7B:23:AB:25:B5:A5:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A2A44E2132
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/57e624-db04-4ee4-a3d3-7df68541d9b8/1/0rX5zb-YOO2HBfUzq3sjqyW1pW8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/57e624-db04-4ee4-a3d3-7df68541d9b8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:57:04 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.157.248.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 698541285682 (0xa2a44e2132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:57:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2b5f9cdbf9838ed8705f533ab7b23ab25b5a56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:c8:02:76:f7:f5:4d:7c:f6:7e:25:b6:78:
8e:95:d9:94:25:54:f1:e6:ba:08:e3:0e:c8:89:dd:
00:18:c2:8a:7d:dd:a3:34:7b:a1:b3:12:f5:ae:ea:
8a:5e:f7:09:85:01:e8:e2:d2:ec:7b:8a:52:0b:ff:
61:87:b5:e2:9e:49:de:df:02:89:ef:33:01:70:ff:
fe:f7:b1:6b:bd:a1:f6:6b:2c:91:97:2d:89:51:a8:
0e:1c:c4:ad:8b:e0:47:27:23:d4:76:99:ad:07:96:
55:d6:d9:a2:93:fe:ef:85:38:1d:fe:4c:83:86:1d:
ba:1e:dd:11:4a:99:ef:8d:e6:4d:70:1f:ca:76:a8:
38:93:d7:64:7e:f1:8c:48:5d:d0:49:2f:58:c1:05:
b9:2b:05:f5:86:f5:90:89:77:a2:6a:38:82:d9:ea:
52:76:8b:98:ad:19:77:b0:b4:e4:e7:c9:1c:f7:2e:
6c:9a:2b:34:0a:06:bd:5e:98:af:a1:76:39:ff:8c:
9d:ee:e9:2c:c6:f8:aa:bd:3f:17:20:10:29:49:73:
31:74:6b:a4:b7:bc:f2:ca:23:7d:c5:16:45:d1:a1:
18:a0:e5:87:35:72:15:f1:5c:8b:73:71:9c:69:3c:
61:7e:d5:c1:60:f8:66:4e:e6:26:66:03:04:aa:01:
78:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B5:F9:CD:BF:98:38:ED:87:05:F5:33:AB:7B:23:AB:25:B5:A5:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/57e624-db04-4ee4-a3d3-7df68541d9b8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/57e624-db04-4ee4-a3d3-7df68541d9b8/1/0rX5zb-YOO2HBfUzq3sjqyW1pW8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.248.0/22
Signature Algorithm: sha256WithRSAEncryption
04:2b:43:f9:2b:d0:db:79:2f:40:6c:f4:9d:0b:a9:29:ca:17:
d2:93:64:70:de:10:d3:45:7c:bf:3d:ab:07:d3:e4:6c:1b:79:
7a:a5:5d:ef:5e:dd:83:14:35:cd:bd:44:1d:14:85:67:c5:86:
4c:dc:98:9b:68:de:94:9e:ce:a6:d6:6e:11:67:7f:f6:66:ac:
8e:95:66:9a:4e:e0:20:01:b4:b3:77:a8:ed:00:cb:c8:91:5f:
b9:cb:53:08:7d:b5:ab:42:7d:89:a4:4a:3a:e1:2c:69:97:3f:
30:93:50:5a:25:cb:ce:0d:63:23:65:ad:d3:e3:0c:50:6d:a7:
d6:72:43:ea:86:cc:08:80:49:b1:2f:8a:63:f8:6e:ad:2c:bb:
28:aa:13:39:d2:5d:e4:02:91:c2:3f:af:4b:5b:a4:ef:38:97:
c6:d8:44:9a:da:e9:f6:1c:c7:31:88:7a:91:65:3f:ed:74:3e:
3b:28:59:c9:99:3b:e7:c8:23:5e:ac:71:23:74:7e:6f:2f:ef:
dd:66:7f:aa:ed:cd:48:2c:78:0b:98:ec:03:fb:23:63:5d:da:
56:36:ab:dd:34:99:a8:bc:1e:47:3f:a4:2d:6d:f6:d4:ef:8f:
2f:36:f4:98:77:0e:d3:f5:4a:0c:47:d6:6f:0b:e8:03:20:85:
a6:9b:ed:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:54 2023 by rpki-client on console-ams.rpki-client.org