Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0ubqUsPckh3wO4s76oTWqWK3r0Y.cer
File: 0ubqUsPckh3wO4s76oTWqWK3r0Y.cer (raw, json)
Hash identifier: QLYlFp1Afa46YHIHG/xTEyc497j6MJEHBf1ZxoMuEvU=
Subject key identifier: D2:E6:EA:52:C3:DC:92:1D:F0:3B:8B:3B:EA:84:D6:A9:62:B7:AF:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 82BCE99860
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/97218a-1bb8-482d-995c-53dc8335e771/1/0ubqUsPckh3wO4s76oTWqWK3r0Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/97218a-1bb8-482d-995c-53dc8335e771/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 06:46:03 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.155.120.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 561515173984 (0x82bce99860)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:46:03 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=d2e6ea52c3dc921df03b8b3bea84d6a962b7af46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:20:e1:50:5e:a1:01:25:48:4a:60:34:7b:72:
b3:77:4d:cd:1d:38:dc:43:42:86:2c:6a:bd:ae:85:
6e:01:c0:ff:90:f3:ec:14:3a:bf:1f:36:7e:e8:f5:
e1:a1:60:37:85:ca:45:c2:30:ac:a8:84:85:66:f8:
e7:2a:0c:c5:a8:29:17:1c:92:d4:98:26:d4:af:a5:
41:a1:e1:3d:de:c3:6a:7e:bb:c6:a3:df:31:a2:fe:
63:8d:db:21:0d:4d:9b:01:94:5b:db:77:ce:c8:7f:
9f:8d:f7:b2:96:2c:ed:11:bf:3d:4a:a0:07:55:4c:
dc:6f:6e:e4:63:71:ee:9b:aa:3e:15:09:dd:2e:80:
6d:01:6c:6c:7b:e4:b3:6a:28:d2:e9:85:0c:70:c3:
17:02:0d:31:f9:5b:cb:bc:52:64:45:0b:76:c7:62:
37:83:eb:1b:f7:4e:11:0f:88:c8:44:ff:f4:41:e6:
99:c3:ee:ee:27:d5:1c:fa:fd:40:ec:79:2f:74:d5:
84:e5:95:8a:23:7c:bb:2b:3b:c0:65:66:29:04:ce:
1e:a2:cd:45:98:1d:82:eb:7f:42:c8:40:bd:83:c6:
de:7c:76:6b:3f:04:5a:30:fe:88:9a:ef:7a:fb:a3:
17:a7:23:e3:82:ac:6e:16:7f:b5:74:27:08:95:95:
91:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E6:EA:52:C3:DC:92:1D:F0:3B:8B:3B:EA:84:D6:A9:62:B7:AF:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/97218a-1bb8-482d-995c-53dc8335e771/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/97218a-1bb8-482d-995c-53dc8335e771/1/0ubqUsPckh3wO4s76oTWqWK3r0Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.120.0/22
Signature Algorithm: sha256WithRSAEncryption
14:eb:4a:52:10:d6:db:24:6c:ff:e7:14:e8:3c:73:a3:12:cc:
12:b2:ca:b1:85:43:8f:e4:b0:44:04:1e:d1:1a:6e:73:b6:e0:
f5:0e:56:df:8c:fa:77:50:ca:88:06:ed:eb:ac:d2:02:1b:25:
d0:ae:91:ac:46:eb:65:1f:e6:f4:8b:8d:03:17:0a:64:ac:38:
e2:b0:db:14:d0:a3:87:0e:df:1d:75:79:70:68:10:92:3b:e9:
e2:53:fa:b9:3c:0d:74:32:5e:82:a7:3a:4e:9f:9b:03:08:8a:
e7:69:e8:8c:21:18:15:39:36:92:e0:a4:f7:6d:d1:5a:1f:e7:
02:3e:fb:11:aa:2e:b8:62:b3:6d:02:80:e0:02:1e:8a:67:c7:
0f:f8:5a:1f:e5:fd:11:77:c7:3c:ba:9b:3b:a9:05:8a:a6:81:
6f:9d:86:ae:ae:5a:8e:5d:e9:df:30:7a:e4:dd:71:52:46:bf:
0f:db:63:58:99:1b:62:6b:f7:d0:1d:68:f7:cb:8b:ee:f4:59:
1a:8c:59:16:6b:0d:95:ef:0a:81:8a:1d:56:fd:75:94:b0:6c:
fd:cc:0f:70:48:53:0d:01:ec:a0:ae:d1:82:ff:58:ae:87:9e:
34:74:0d:ce:49:36:e4:40:1c:c4:72:4c:a4:fb:d5:ea:65:56:
8b:fa:42:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:54 2023 by rpki-client on console-ams.rpki-client.org