Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0z5Ltp75GJueS7y1_olshLvgLtQ.cer
File: 0z5Ltp75GJueS7y1_olshLvgLtQ.cer (raw, json)
Hash identifier: XWmsckGRGN1000/r/qqMyWw/e6uGj3+39mqdmepiHIU=
Subject key identifier: D3:3E:4B:B6:9E:F9:18:9B:9E:4B:BC:B5:FE:89:6C:84:BB:E0:2E:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9DCA53CB9C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/0z5Ltp75GJueS7y1_olshLvgLtQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 04:55:39 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.88.88.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677704354716 (0x9dca53cb9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:55:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d33e4bb69ef9189b9e4bbcb5fe896c84bbe02ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:61:92:79:5a:f3:d5:60:ec:f6:24:0c:dd:d9:
cf:9a:50:3e:13:ef:9b:a8:89:d3:96:b8:39:67:e6:
d1:54:96:7d:70:00:62:95:cc:64:a6:d7:c6:90:10:
ca:ef:8a:2c:8f:7c:c8:01:7f:70:80:8f:1d:fe:8b:
00:64:06:d4:d8:3c:92:e7:55:49:27:ab:ea:ff:d9:
dd:47:cc:16:14:3f:d2:4c:73:38:5f:0a:79:c2:45:
de:29:8a:93:f9:85:8d:7c:98:40:55:22:b4:54:8b:
b8:95:53:3d:42:ec:52:e5:b6:7f:af:91:79:09:b0:
14:05:20:8f:41:f5:44:4d:aa:a9:59:98:bf:4f:bd:
18:6a:9d:43:b4:1b:bf:7a:45:f6:9c:bc:bb:47:c6:
d7:4a:f0:b8:a9:8d:7a:5c:3d:5f:ef:67:c3:66:7e:
f4:35:b3:28:60:f5:e8:4b:41:6b:3d:d2:ac:32:b5:
2d:a1:21:22:56:7e:6e:0c:43:1f:d8:6c:4f:ce:f0:
c9:ea:34:fc:2d:0a:2d:d8:27:b6:1b:65:7e:25:5d:
b2:fb:ad:bd:f6:18:86:21:ff:b9:dd:ee:c0:78:83:
b8:51:ed:b6:16:0a:1a:dd:b1:fd:e0:c6:41:c4:d6:
31:7f:05:a6:b8:65:07:dd:c9:70:29:d7:93:a5:e4:
c0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3E:4B:B6:9E:F9:18:9B:9E:4B:BC:B5:FE:89:6C:84:BB:E0:2E:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/0z5Ltp75GJueS7y1_olshLvgLtQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.88.0/22
Signature Algorithm: sha256WithRSAEncryption
62:c6:30:9d:ee:c4:48:a2:b5:e8:0a:cc:1a:56:dd:1b:d1:07:
aa:ec:c2:6e:83:50:42:e8:8e:f7:e2:ce:2f:28:02:27:b4:36:
80:fd:4d:09:71:34:f3:9a:6e:bc:c3:88:ac:f8:7b:5f:1f:0f:
3d:2c:bb:f3:0e:ee:c4:6a:67:e8:3a:4a:97:b6:dd:b4:9a:55:
2d:e6:b7:d8:fc:ec:5a:f3:fc:ec:65:af:a6:cc:b4:39:30:98:
2d:82:61:ed:08:3b:1d:b8:a3:a8:54:f5:c0:0d:d4:98:3c:75:
d8:7b:0e:1c:ab:79:83:b3:4d:a2:82:92:17:c6:fc:2d:52:04:
7a:f8:85:13:cc:bf:e5:1e:8b:2f:af:1f:41:b4:0a:5b:fe:f7:
9a:5b:4f:47:01:7b:83:bd:bb:84:41:29:b9:70:eb:a8:80:b7:
54:3c:b6:37:be:b5:7e:41:d5:eb:74:9f:c3:37:fd:9a:f6:90:
3a:25:d5:5c:47:bd:4c:29:49:6a:96:c8:f8:f6:ac:fa:8e:e6:
b0:c1:47:bb:e8:c5:0f:15:f1:93:11:d0:80:bc:ce:a1:8c:16:
e9:b6:b9:c9:6c:ae:eb:73:bd:1e:85:5c:49:36:d5:5c:e9:7b:
e3:fe:0b:cb:ad:0b:df:86:40:31:8b:06:03:f4:4d:d2:4d:e8:
2c:25:7b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:12 2024 by rpki-client on console-fra.rpki-client.org