Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-TDEROYQJ9-fTJ53bSNmTwVOYEc.cer
File: 1-TDEROYQJ9-fTJ53bSNmTwVOYEc.cer (raw, json)
Hash identifier: trFaq4fDO7T5RnuMPFI7pdvOvSsO0Sm45Bc96BeJ63o=
Subject key identifier: F9:30:C4:44:E6:10:27:DF:9F:4C:9E:77:6D:23:66:4F:05:4E:60:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7EB721A38F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/4cf4d8-70fe-4f8b-80c7-956b8dfa80bf/1/1-TDEROYQJ9-fTJ53bSNmTwVOYEc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/4cf4d8-70fe-4f8b-80c7-956b8dfa80bf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 03:58:35 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: AS: 208130
IP: 45.155.20.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544238314383 (0x7eb721a38f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:58:35 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=f930c444e61027df9f4c9e776d23664f054e6047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:0d:53:58:d4:66:e7:01:40:3b:3c:72:0c:
c3:88:7e:20:9c:d1:48:0d:f6:0e:5d:67:86:d4:9b:
2b:44:82:0f:d8:c5:4d:ab:f3:5f:4b:3f:0a:a5:08:
98:f1:85:a1:10:05:4b:fe:22:69:8d:04:76:52:e4:
ca:4e:b0:f9:38:c3:6e:7f:54:9a:6e:d5:d1:ec:d2:
a9:43:cd:1e:80:e5:e6:d9:0f:dd:c7:d2:c2:af:c9:
e3:d4:5a:29:2a:f2:05:60:79:05:cf:df:dd:8a:bf:
13:47:5f:47:f0:73:fb:f4:d3:7d:48:72:05:95:ee:
fe:0d:e4:e3:14:b7:6e:00:4f:e5:eb:cc:a3:f0:aa:
8a:4a:84:98:99:1a:f9:18:ea:19:ff:79:c3:55:01:
03:86:05:8a:c9:dc:1e:aa:eb:a5:56:b6:c4:04:74:
b2:6f:28:5a:89:f3:33:a4:02:6a:86:ff:b1:b7:ff:
ad:52:19:81:3f:c7:65:14:42:9b:14:b1:9d:9c:66:
1d:38:98:94:ad:54:94:41:c7:9a:8f:a0:d1:58:8a:
d6:27:d5:37:6c:2e:49:27:be:8c:e6:c4:96:fe:d9:
c4:17:1e:81:e3:04:e6:81:b8:29:7b:d5:bd:6b:aa:
7b:07:12:49:83:96:37:44:ff:3d:0b:dd:e2:b2:cb:
bc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:30:C4:44:E6:10:27:DF:9F:4C:9E:77:6D:23:66:4F:05:4E:60:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4cf4d8-70fe-4f8b-80c7-956b8dfa80bf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4cf4d8-70fe-4f8b-80c7-956b8dfa80bf/1/1-TDEROYQJ9-fTJ53bSNmTwVOYEc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.20.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208130
Signature Algorithm: sha256WithRSAEncryption
38:40:f7:42:6d:20:99:62:2a:32:22:87:fa:f7:5b:e4:0d:6d:
a2:cb:3b:9f:43:7d:19:19:c1:15:65:c6:80:51:0e:23:69:1b:
07:9e:9d:88:d2:2e:e7:5a:4d:39:92:16:ae:1b:11:44:8b:1e:
0f:d0:0c:c3:6c:71:5d:87:98:fb:2b:74:76:ed:5a:ec:f1:35:
64:ee:a9:74:90:eb:9f:0b:10:c1:10:6e:56:d5:37:5c:6e:d8:
56:7f:15:af:8f:0b:63:a2:58:97:c7:2f:67:96:86:ee:66:01:
fc:54:a7:11:90:03:c3:c1:ab:b3:90:33:fd:ac:70:81:e4:54:
83:f8:f0:0c:60:1d:ff:8b:47:4f:24:e8:33:a5:9c:31:ef:3e:
b1:9e:9e:c6:ec:66:a2:4f:b8:8d:aa:75:77:21:53:36:ee:01:
35:42:74:4f:a4:9b:dd:4d:23:90:f8:c6:b3:c4:bc:9e:cd:52:
a1:3d:47:90:67:8f:e9:c6:3c:13:52:29:d4:eb:62:f0:1e:0a:
b8:30:9a:1e:2f:83:7b:f5:50:2c:9a:bc:47:91:87:6d:f0:59:
bd:df:89:f6:2f:dd:a1:02:bb:31:c0:7d:e5:14:ee:27:ad:be:
76:87:79:40:0a:2f:8e:9d:ca:cc:e8:54:35:7c:b3:46:d6:c9:
4b:37:3b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:56 2023 by rpki-client on console-ams.rpki-client.org