Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-GvaDjc2bi5nNSTeQ8od1KpTUKs.cer
File: 1-GvaDjc2bi5nNSTeQ8od1KpTUKs.cer (raw, json)
Hash identifier: h6nm8R723BP5doVUbaR/mVEZNtMAeG3thxT2DdpgMvs=
Subject key identifier: F8:6B:DA:0E:37:36:6E:2E:67:35:24:DE:43:CA:1D:D4:AA:53:50:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 84C4F48011
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/33bdfb-4989-434f-aa53-c53c3c367c90/1/1-GvaDjc2bi5nNSTeQ8od1KpTUKs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/33bdfb-4989-434f-aa53-c53c3c367c90/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 08:00:14 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.146.200.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570240040977 (0x84c4f48011)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:00:14 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=f86bda0e37366e2e673524de43ca1dd4aa5350ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b9:42:8c:4d:13:67:e7:17:63:58:a7:5f:0d:
39:17:d6:db:d1:61:22:87:35:e8:68:7d:27:2d:cc:
90:34:cb:cd:a5:a3:27:7c:1c:41:75:4a:81:e9:33:
92:f4:de:60:fc:8a:a1:1a:b6:82:dd:d0:78:da:98:
be:81:bc:84:7e:70:92:2c:12:b8:73:c3:c9:7a:32:
c4:3a:a7:c4:af:88:4d:0f:35:72:f0:48:4c:20:86:
3f:1e:35:bf:74:ba:19:56:4a:e7:5a:34:65:f0:0d:
ee:02:57:65:9c:6f:94:6b:ee:a5:35:ee:ec:a9:59:
d3:22:43:e7:a0:a4:58:38:b3:f1:db:bb:56:76:35:
18:aa:6b:71:5c:b5:c1:e2:d1:3d:dc:fe:b0:ae:05:
00:6a:94:48:d4:f9:d5:09:f2:c2:70:96:e3:67:19:
f2:70:41:3f:56:9c:9a:a4:83:f7:0b:3c:45:e3:80:
56:47:a5:a2:dc:0c:fc:d3:bd:40:a0:11:8f:cf:a4:
16:c8:a8:0f:e8:34:cf:c6:88:cc:0f:a9:50:13:a8:
b7:b8:5a:06:6a:47:15:aa:d7:47:82:0e:fa:c2:73:
6b:ef:eb:36:9c:36:b4:2e:1c:ba:3b:9a:90:77:aa:
b4:2c:a1:61:68:e2:2a:9a:0a:6d:2c:e3:b3:39:5f:
af:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6B:DA:0E:37:36:6E:2E:67:35:24:DE:43:CA:1D:D4:AA:53:50:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33bdfb-4989-434f-aa53-c53c3c367c90/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33bdfb-4989-434f-aa53-c53c3c367c90/1/1-GvaDjc2bi5nNSTeQ8od1KpTUKs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.200.0/22
Signature Algorithm: sha256WithRSAEncryption
16:35:e3:13:8c:e2:1f:33:ec:8e:e0:4c:88:2c:78:da:94:0c:
7f:42:45:1f:19:fe:f7:b6:da:35:e1:34:79:51:d0:6d:6a:2e:
2a:ff:15:b9:a0:64:60:92:e2:90:e0:c8:79:c5:b4:3a:0c:8f:
a3:cd:33:00:d2:94:a7:8a:3d:96:69:1d:20:19:b5:11:c5:ce:
84:ef:57:9d:f3:e3:f8:30:51:f4:cc:51:6c:d6:3e:2f:47:69:
77:3a:4d:11:9d:2c:dd:a7:67:6d:c1:8e:9f:62:30:f2:2d:58:
64:d0:f2:80:13:82:f2:c3:12:15:f3:9c:c8:2e:a2:15:62:d4:
0b:94:c2:23:ac:48:3b:4d:c7:79:8f:73:17:60:46:ac:1f:12:
5b:50:b8:8d:17:31:d0:c8:ff:01:03:e1:55:fe:39:05:a7:e9:
5f:20:cc:ab:9f:29:70:20:dd:d5:2e:7f:3d:77:7d:7c:79:36:
ce:b6:29:b0:5b:f8:29:ca:92:ea:af:f4:f6:9b:e4:33:da:5c:
2c:e1:5e:3b:94:63:ab:cb:38:c0:a5:a6:09:79:06:ad:20:d8:
08:c1:6c:12:54:20:2e:7e:ed:0b:10:b9:0d:00:44:e1:b4:e7:
3d:49:f6:46:16:3a:8b:f5:c2:aa:5a:b7:d2:5d:63:26:30:db:
20:db:e9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:06 2023 by rpki-client on console-fra.rpki-client.org