Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-BlLls88ONiIhkY81NQ_hI2VqpQ.cer
File: 1-BlLls88ONiIhkY81NQ_hI2VqpQ.cer (raw, json)
Hash identifier: miiQANwAyZ9Pxk1uAp2TzZABxCjP4U4Y98gF19xoNNs=
Subject key identifier: F8:19:4B:96:CF:3C:38:D8:88:86:46:3C:D4:D4:3F:84:8D:95:AA:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7BEEECB450
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/20a21b-dd18-4722-a392-9786290423c0/1/1-BlLls88ONiIhkY81NQ_hI2VqpQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/20a21b-dd18-4722-a392-9786290423c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 02:49:59 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.153.252.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 532289467472 (0x7beeecb450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:49:59 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=f8194b96cf3c38d88886463cd4d43f848d95aa94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:79:d3:1e:43:86:cb:26:cf:87:9a:d5:81:e3:
63:e2:65:8d:dc:68:13:65:3d:3d:30:a2:8f:3b:55:
ab:48:57:40:f8:2c:e7:13:19:ec:2e:1f:bc:77:43:
03:11:55:1b:a7:4b:ba:d5:38:ad:5a:fe:41:9b:f1:
99:7e:d9:ea:4c:03:9e:e0:02:49:e8:13:38:b7:60:
d6:d1:10:cc:ec:8c:72:57:bb:f8:2d:30:25:fe:2b:
69:bc:17:00:63:f4:ed:de:a7:cf:af:41:3e:c6:6e:
49:0c:92:72:0a:93:5a:6e:42:a0:1a:dd:9e:06:1d:
10:5a:84:96:c1:06:d6:10:f7:2f:58:ca:93:29:63:
81:8f:93:69:be:dd:40:29:a3:d9:51:8e:8c:29:7c:
c6:9e:71:09:87:34:9c:6f:ec:1d:87:56:f7:e8:c0:
b3:3f:f3:c5:56:50:28:6c:ea:78:8f:9a:66:f5:18:
28:20:85:4c:8e:4b:81:85:93:1d:e7:0c:00:91:ae:
1a:0f:d7:9a:d5:b8:9c:61:0e:80:c3:9e:1b:73:42:
db:a3:c4:37:74:e4:59:0a:e3:53:50:db:0f:b3:40:
74:b7:1a:a2:c6:fe:5b:af:16:99:d9:9b:03:99:88:
24:b1:d8:e4:2d:1a:90:1e:7d:f8:73:2a:fe:2c:20:
42:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:19:4B:96:CF:3C:38:D8:88:86:46:3C:D4:D4:3F:84:8D:95:AA:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/20a21b-dd18-4722-a392-9786290423c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/20a21b-dd18-4722-a392-9786290423c0/1/1-BlLls88ONiIhkY81NQ_hI2VqpQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.252.0/22
Signature Algorithm: sha256WithRSAEncryption
91:20:c9:bd:0c:ac:93:ef:b6:cc:55:c3:1e:37:10:af:d4:8c:
a5:b0:a9:50:56:fc:92:3e:cd:a0:61:4f:99:8d:1b:da:9a:9e:
85:ed:49:7d:46:5e:de:01:d1:9f:fd:83:c3:fe:89:c4:71:9e:
df:77:8f:5c:98:d1:da:3f:81:d9:66:c7:c5:4d:96:fb:fc:cb:
49:5b:84:d4:80:52:b6:60:cd:70:0b:7c:a1:cc:cc:65:67:46:
c8:47:51:3b:7e:9e:53:3e:10:c0:ce:45:68:d4:28:4a:1e:5c:
ca:6d:0f:87:ce:da:3a:54:18:2a:b0:e1:fd:11:95:c8:54:89:
ba:0c:48:bc:68:88:fe:a9:f2:cf:1e:57:b4:8d:f5:b7:1d:a1:
27:00:fe:93:98:e2:c0:65:95:d7:50:dd:e2:df:f8:d0:ae:aa:
7c:34:29:99:fc:d8:c0:64:8d:3f:11:53:50:51:bd:fa:07:06:
cd:b0:72:e1:fc:2f:3d:3c:07:dd:84:b5:55:5f:6d:f0:0b:72:
fe:1d:2e:b1:43:8c:2c:7e:35:ef:41:81:88:d8:2c:39:46:47:
a0:3b:63:e4:ff:03:35:43:1c:e5:aa:69:f9:48:c2:80:9a:fe:
a4:24:36:ce:a3:49:0b:be:94:30:70:7a:37:6a:cf:cb:aa:50:
7f:0f:4f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:55 2023 by rpki-client on console-ams.rpki-client.org