Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-GQxTczW1D29fzVDFgdB53I7F94.cer
File: 1-GQxTczW1D29fzVDFgdB53I7F94.cer (raw, json)
Hash identifier: jNkKab8snThh99Q9UIDrsvTCEOSdr53EzTse33tmkW8=
Subject key identifier: F8:64:31:4D:CC:D6:D4:3D:BD:7F:35:43:16:07:41:E7:72:3B:17:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0183EB528F6B4AB4B89704B5BE1E8D5594F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/58f59e-a8bf-42f3-855b-c50d2de860f4/1/1-GQxTczW1D29fzVDFgdB53I7F94.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/58f59e-a8bf-42f3-855b-c50d2de860f4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 18 Oct 2022 13:39:59 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.128.64.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:eb:52:8f:6b:4a:b4:b8:97:04:b5:be:1e:8d:55:94:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 18 13:39:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f864314dccd6d43dbd7f3543160741e7723b17de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3a:80:d3:15:d6:b1:77:ce:4d:bf:f6:c2:a0:
b2:fa:ec:0b:e8:3a:e4:08:5d:20:ad:12:ba:e1:b1:
c8:00:88:cb:54:4b:be:f3:d0:12:85:20:cd:71:52:
af:92:5c:e3:c9:61:d2:12:32:aa:62:bb:03:50:cb:
ea:d4:78:ca:d1:2d:06:76:ee:d0:5f:13:26:e0:4c:
7a:21:a2:2d:22:91:bc:c9:bc:27:b5:65:89:85:1c:
9f:61:56:92:8d:e3:c2:1e:d6:fa:8f:9b:2f:13:19:
f1:c9:66:1e:fd:52:1e:16:dc:48:0a:6f:d4:3a:65:
75:20:e6:89:63:23:cd:f3:46:7d:2c:a9:b0:a3:8a:
9f:87:db:80:37:d5:9d:ba:41:78:89:86:13:dd:48:
4e:32:f6:ed:e2:1d:1d:bf:f4:13:2f:47:77:02:fd:
b3:e3:44:6d:74:5c:88:b9:65:ff:fb:90:7a:45:a8:
84:a5:df:35:33:2e:01:dc:53:57:88:5b:1b:a2:61:
69:8b:59:d2:ed:20:70:d7:27:ce:c4:74:28:ce:b8:
9a:16:eb:c7:26:52:8b:2d:ba:3b:cc:dc:70:21:19:
c7:f8:df:06:c3:0c:3d:14:bc:5a:1a:23:ab:be:e6:
fe:29:49:37:8d:f4:62:4a:75:a0:83:38:6f:8f:b2:
db:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:64:31:4D:CC:D6:D4:3D:BD:7F:35:43:16:07:41:E7:72:3B:17:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/58f59e-a8bf-42f3-855b-c50d2de860f4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/58f59e-a8bf-42f3-855b-c50d2de860f4/1/1-GQxTczW1D29fzVDFgdB53I7F94.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.64.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:21:67:9e:78:fa:ca:87:c9:d4:f3:a8:b4:86:52:3a:32:80:
dc:e5:7c:7d:c5:ce:db:27:72:f6:52:73:b9:61:69:09:94:80:
01:40:a0:ee:27:ce:fa:75:94:94:46:b8:10:f5:a4:ec:5e:4e:
c7:c5:64:1b:e6:20:bd:21:b1:4f:cc:f3:08:dd:3e:81:37:8e:
47:c8:78:db:9d:fa:c6:9d:99:48:4b:7d:48:f4:a4:af:ea:e0:
85:c6:ef:6a:82:bd:df:15:ca:00:1e:ec:bb:a3:d6:60:c7:c6:
7a:76:fa:fe:03:87:1a:6e:c0:c0:73:34:9b:47:83:61:fa:ef:
b5:9c:24:cd:46:03:fa:3c:b8:11:f9:c8:ce:77:99:ed:b1:fa:
87:42:d6:82:59:c4:0a:ff:a5:69:c0:96:4f:a8:eb:18:ec:d7:
a2:8c:dc:02:60:59:9c:07:1b:0b:e5:d2:72:dd:39:44:ae:04:
44:28:30:45:d9:b8:64:bd:2b:0d:c0:e3:7e:ce:3d:36:f7:2e:
d3:23:e5:65:60:cb:ad:92:9c:bf:0c:25:d5:a8:12:56:1e:a0:
16:86:f0:e6:e5:9a:08:33:1a:b6:d9:b1:b3:6a:b5:93:f2:23:
11:2b:c6:cf:ed:88:46:21:6f:e1:10:84:cb:81:cb:93:87:b3:
c3:f0:3b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:35 2024 by rpki-client on console-ams.rpki-client.org