Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-649Si5HBICLCtesexSnIJ2clVI.cer
File: 1-649Si5HBICLCtesexSnIJ2clVI.cer (raw, json)
Hash identifier: k7ZizK1i/FxNvzp8ccZfrLi52t2mjrokxdsqLsh3GtE=
Subject key identifier: FB:AE:3D:4A:2E:47:04:80:8B:0A:D7:AC:7B:14:A7:20:9D:9C:95:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7B6C96ED39
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/04f9ce-64a9-467c-94fe-ec036e20a442/1/1-649Si5HBICLCtesexSnIJ2clVI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/04f9ce-64a9-467c-94fe-ec036e20a442/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 02:37:31 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 185.223.164.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530102807865 (0x7b6c96ed39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:37:31 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=fbae3d4a2e4704808b0ad7ac7b14a7209d9c9552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b4:35:ab:fe:dc:e7:7c:16:a9:c3:86:81:cd:
ea:2a:2a:22:6a:23:ab:af:23:5d:7c:41:2b:c6:a9:
25:0c:99:e1:18:7b:aa:95:59:89:11:81:f9:82:20:
a7:2a:d1:57:a4:b3:01:7a:d5:ca:0d:92:d5:6b:03:
18:cc:54:d8:75:98:e1:c4:ef:e0:e7:5a:b9:b7:f2:
ba:d4:d9:b4:c0:aa:07:60:3c:f5:48:08:41:fc:39:
5a:d3:a1:ee:0c:e1:f9:5f:2e:84:15:9d:3c:78:e1:
33:22:3c:c8:a8:7a:ef:62:1d:9f:c2:b1:cc:99:06:
4b:ef:ad:51:47:ff:f4:01:22:4c:1e:08:68:5e:1d:
9c:98:c7:10:c0:cd:38:db:3d:8c:60:c7:e5:69:2b:
e1:23:75:88:b6:7e:5b:25:9b:15:84:f2:5c:73:0d:
e1:97:26:e4:17:97:5a:ca:ff:87:8e:82:27:34:f8:
37:68:e7:e3:a9:bc:01:ef:d9:33:5e:af:1c:43:80:
98:b2:ad:c4:e3:3c:85:b0:f0:57:70:24:eb:85:30:
d3:16:2b:55:60:f4:bd:bc:ef:81:ae:5e:20:c5:f0:
31:9b:d7:68:29:c0:b8:99:38:cf:15:07:ce:21:4f:
19:e5:36:16:42:85:2b:9d:8c:b2:21:cc:20:8a:9a:
9c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AE:3D:4A:2E:47:04:80:8B:0A:D7:AC:7B:14:A7:20:9D:9C:95:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/04f9ce-64a9-467c-94fe-ec036e20a442/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/04f9ce-64a9-467c-94fe-ec036e20a442/1/1-649Si5HBICLCtesexSnIJ2clVI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.164.0/22
Signature Algorithm: sha256WithRSAEncryption
46:69:24:1f:2f:bb:e1:0c:43:bd:76:3c:2d:23:f2:f7:07:d6:
dc:ed:f8:c3:b5:67:4d:47:fc:e0:64:5d:49:2f:a6:85:7d:dd:
6c:83:1e:db:52:94:8f:3c:3d:72:94:4e:9c:dc:2a:df:c9:fa:
be:08:61:22:93:63:2e:bb:68:44:40:96:bd:e8:f4:35:c3:98:
a4:b4:74:a6:96:33:ac:5a:c4:15:1d:4a:a6:38:3f:e1:05:1b:
fa:b5:86:14:69:a8:cb:7c:c6:9e:6d:0e:71:73:44:6e:a4:2d:
db:c8:ef:67:43:91:01:62:0e:9a:34:e8:4a:cf:b2:07:e6:6b:
05:1c:cc:66:c0:5a:c2:e2:db:1b:20:5f:86:2a:db:69:dd:b1:
36:64:c0:dc:40:fe:59:2f:9c:ac:c1:f4:c4:48:25:68:d2:1d:
ed:4d:f8:63:1b:46:43:97:e5:df:ca:79:57:9e:0a:a3:3a:06:
28:5a:60:86:bb:f6:9c:17:7f:8a:0d:ba:14:26:9d:b3:a0:2a:
aa:95:48:07:1e:8c:ea:fe:78:15:18:d3:5b:61:f7:de:91:e1:
9e:a7:43:2e:db:b2:df:d8:1f:0e:14:41:f2:e6:ee:98:65:bc:
73:6b:c8:15:ca:12:5b:f6:d2:73:7d:fb:c7:e4:13:54:b5:49:
09:7e:42:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:54 2023 by rpki-client on console-ams.rpki-client.org