Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-kedOzJI67d7P78koAP9Tq5qmqI.cer
File: 1-kedOzJI67d7P78koAP9Tq5qmqI.cer (raw, json)
Hash identifier: dHcwz2fWLYa9faYepzGxW94W0QkQRHQA9ipN0hl3e2g=
Subject key identifier: FA:47:9D:3B:32:48:EB:B7:7B:3F:BF:24:A0:03:FD:4E:AE:6A:9A:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 8412F72899
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/88b8fe-f0e1-4141-bd63-f89aea619c6e/1/1-kedOzJI67d7P78koAP9Tq5qmqI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/88b8fe-f0e1-4141-bd63-f89aea619c6e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 07:37:16 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.139.36.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 567253870745 (0x8412f72899)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:37:16 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=fa479d3b3248ebb77b3fbf24a003fd4eae6a9aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e4:51:23:44:ac:05:68:a0:be:60:c0:e6:44:
61:cb:d3:e6:7c:cf:81:96:cb:ea:61:44:e9:36:6f:
0d:74:8d:d9:ed:3f:8b:61:80:1e:74:cc:18:07:e2:
4c:04:db:6f:01:d1:61:99:46:a4:ee:1b:3a:71:6b:
3d:54:22:fe:27:d6:fb:4b:3e:50:98:5d:1f:ef:c6:
37:9c:ff:25:54:3b:92:5a:0f:e5:bd:25:b2:24:00:
55:db:b4:2b:50:ee:85:1d:85:5f:66:c4:66:ae:4a:
44:30:e0:7b:ea:02:d4:23:e3:49:8a:08:06:2f:bb:
f0:36:97:e5:69:fb:90:e1:b5:b7:0c:61:7c:29:f0:
1e:1b:52:c3:68:ab:3c:36:0f:fb:7a:e1:f6:f6:b0:
25:d8:0b:ba:05:a6:f8:3e:99:d2:7e:a8:02:ff:65:
03:44:52:44:24:44:0c:6b:de:5e:1a:45:ef:09:44:
f6:bb:f0:9b:11:9b:1f:4f:65:72:df:c0:fc:ac:66:
a5:69:be:b3:83:42:e9:f1:79:12:0d:bb:79:3f:f9:
68:f6:62:6d:05:57:29:fe:e1:26:ab:39:ab:63:9c:
e6:54:c3:d8:de:80:af:5d:88:fb:aa:b4:15:7b:ad:
22:3f:8b:f4:16:60:ee:77:b6:0e:ae:91:bb:b0:05:
21:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:47:9D:3B:32:48:EB:B7:7B:3F:BF:24:A0:03:FD:4E:AE:6A:9A:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/88b8fe-f0e1-4141-bd63-f89aea619c6e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/88b8fe-f0e1-4141-bd63-f89aea619c6e/1/1-kedOzJI67d7P78koAP9Tq5qmqI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.36.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:3a:06:c3:a6:39:aa:35:81:85:18:d2:77:46:60:62:9b:42:
5f:09:97:46:b1:a3:d1:4e:ec:4b:39:b4:60:d2:ff:db:56:72:
30:5e:ae:47:e8:36:d3:96:2d:95:dc:80:8b:1a:38:04:78:f3:
af:d8:87:e1:38:af:6a:99:63:53:5f:ab:02:e5:27:fb:7c:a1:
5c:6f:0f:e9:3b:56:28:a4:43:b3:b9:6d:cb:4b:53:5f:94:81:
bd:9b:f7:5a:6e:5c:d8:67:44:75:33:70:89:d2:77:0f:55:f1:
5a:15:26:08:66:a5:d1:80:11:9d:52:cf:f6:9b:6b:f1:e8:a7:
fc:52:e9:d0:4d:11:7f:53:0f:a0:21:ee:95:ae:14:f9:20:7c:
26:9d:cb:65:d4:3b:10:38:21:eb:17:35:7a:81:5b:ac:a3:5d:
5d:82:6b:51:89:6c:ec:90:0c:61:93:5c:41:a6:81:23:2d:18:
82:45:27:65:76:78:a8:89:57:df:65:04:16:2f:cf:10:cc:22:
73:49:b7:72:82:4c:15:18:07:27:9f:42:d2:db:aa:ab:d8:f5:
5b:a1:77:06:97:1e:63:b5:af:df:83:5b:64:fc:1a:63:d1:be:
8c:2d:5b:20:fb:91:45:36:e7:50:f0:71:32:f0:f9:7e:14:04:
88:29:01:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:56 2023 by rpki-client on console-ams.rpki-client.org