Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-scPZQRFrZ_0oKL_hl04SNsFvXU.cer
File: 1-scPZQRFrZ_0oKL_hl04SNsFvXU.cer (raw, json)
Hash identifier: FtE4rEXouDFkEPdBj8ubXej/x33rTx+aZVuM1HQQ8FI=
Subject key identifier: FA:C7:0F:65:04:45:AD:9F:F4:A0:A2:FF:86:5D:38:48:DB:05:BD:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7BE8922595
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/5eccde-d854-4738-a283-33e138d6ca3a/1/1-scPZQRFrZ_0oKL_hl04SNsFvXU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/5eccde-d854-4738-a283-33e138d6ca3a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 02:48:51 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 2.56.108.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 532182869397 (0x7be8922595)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:48:51 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=fac70f650445ad9ff4a0a2ff865d3848db05bd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:70:93:86:8d:d3:eb:8b:49:01:3d:69:59:
78:db:ce:4d:e7:3e:32:96:4a:73:57:1d:f2:21:cb:
de:d0:42:a9:95:98:c9:aa:a1:5f:89:cd:43:10:86:
8f:3d:23:03:2a:15:d5:35:23:b5:aa:4d:2e:b1:b2:
07:9d:14:59:5f:85:2b:eb:98:89:8e:38:7f:2c:f4:
73:86:47:65:2f:4e:ef:53:b5:df:8e:5e:47:d9:b0:
de:06:93:4d:87:92:34:8e:a2:b3:ba:d4:2e:02:09:
4a:b5:44:18:64:dc:d6:6c:3a:7c:1a:a1:c8:32:08:
86:f4:15:7f:c1:d8:3d:88:6b:6f:ed:f1:0c:a8:fc:
b8:2c:42:f0:58:ce:eb:c1:00:5d:e5:ee:3a:54:7d:
32:67:04:a1:68:f3:93:d8:4b:56:98:4b:43:4c:15:
2c:af:88:d4:81:25:db:97:9d:12:88:1a:16:cb:a7:
6b:96:46:57:96:b4:8f:a5:a6:0e:c5:87:1b:90:c2:
00:d1:55:20:a0:91:38:31:46:b5:75:28:c3:9d:93:
ba:cb:c2:4a:94:d6:e1:56:39:88:bd:0a:14:a5:bf:
7a:5d:09:f2:75:48:1e:41:54:ed:c0:53:99:69:63:
a4:82:6d:cc:33:cf:99:00:b2:85:a0:3f:9d:72:71:
26:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C7:0F:65:04:45:AD:9F:F4:A0:A2:FF:86:5D:38:48:DB:05:BD:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5eccde-d854-4738-a283-33e138d6ca3a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5eccde-d854-4738-a283-33e138d6ca3a/1/1-scPZQRFrZ_0oKL_hl04SNsFvXU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:06:05:67:37:95:3a:7d:de:d8:42:8d:aa:1c:ab:af:97:4d:
39:e7:8b:7b:50:3e:2c:de:04:f0:4e:f8:e5:5e:46:2c:82:6c:
5b:a5:19:c8:dc:4d:a5:81:fd:d3:34:0d:a3:8d:67:14:f9:ed:
47:43:00:ba:5c:f7:93:b4:1d:a3:52:92:b4:4a:dc:6e:33:a8:
1d:87:06:02:61:02:df:15:6c:58:ee:d7:e8:63:58:2b:36:d7:
9a:3d:b6:3c:40:68:a2:da:f9:a6:e3:37:2c:44:f6:77:21:2c:
b0:14:6f:6b:ef:ef:cc:f4:f8:c1:ad:a5:0a:a9:a9:71:74:ef:
4f:94:70:08:6d:ba:49:9d:4f:71:fa:fc:ab:c5:2e:1a:54:d6:
75:46:fc:80:84:d7:ae:92:6d:f4:ea:5b:4e:b9:e7:9e:14:67:
44:02:90:33:27:22:90:9b:d8:ca:7f:ea:9d:5c:ef:18:c2:be:
dd:4b:6c:c4:f9:b2:39:69:bf:d4:e0:24:4f:a2:61:89:a7:44:
db:d5:bd:ae:03:ae:65:37:8d:d5:d4:36:ea:f7:60:1c:cd:ce:
36:dd:4c:5f:01:5b:01:27:49:eb:30:d5:5e:05:8d:51:24:09:
9e:f1:6b:aa:f2:8b:8d:58:73:54:0e:81:78:de:67:57:27:cc:
a9:ea:0c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:57 2023 by rpki-client on console-ams.rpki-client.org