Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1IBPJK-HcQ09IE0ZwN1p6NXoS9Q.cer
File: 1IBPJK-HcQ09IE0ZwN1p6NXoS9Q.cer (raw, json)
Hash identifier: D/OI8sMWkcc/djXzuCvsuRQd6KUugDY5hw6Q08nSFco=
Subject key identifier: D4:80:4F:24:AF:87:71:0D:3D:20:4D:19:C0:DD:69:E8:D5:E8:4B:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7BFF76D3EC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/64fd56-e301-43c4-8bc9-7a06017e18bd/1/1IBPJK-HcQ09IE0ZwN1p6NXoS9Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/64fd56-e301-43c4-8bc9-7a06017e18bd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 02:51:22 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.13.88.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 532566954988 (0x7bff76d3ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:51:22 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=d4804f24af87710d3d204d19c0dd69e8d5e84bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:e6:36:ed:1b:05:5e:0c:5a:ad:a8:c1:98:
d9:f4:ae:61:6f:63:b4:86:72:b8:f7:2b:be:60:da:
65:29:8c:02:df:bf:fb:e6:6a:75:84:aa:49:04:ba:
0d:18:d6:08:34:90:5a:bc:5c:b6:82:67:4f:40:f5:
38:93:cb:ec:2d:c6:df:cf:2c:f9:7e:ef:4c:fd:12:
c6:54:e8:c1:6b:cc:96:8c:db:09:bd:3b:95:33:f0:
0a:b4:a3:4d:45:4d:4e:9e:e4:a3:8e:0a:e6:51:1b:
17:ac:99:8b:40:6c:44:8b:43:3c:16:19:ae:1f:58:
bc:4d:a8:c6:2a:7a:18:eb:b4:cb:d1:27:37:4f:92:
bc:3a:ec:0c:54:42:37:75:07:41:5d:04:31:98:1c:
1f:49:1d:41:cd:19:5e:88:fc:99:44:d5:0b:7a:71:
df:44:06:2f:29:9d:0a:42:32:0c:57:76:c1:ad:c8:
b8:c2:6e:d8:73:57:f1:5c:90:ea:67:4d:a0:b5:02:
4b:0d:4c:39:0f:d8:fa:90:ea:94:72:10:c6:2b:56:
1d:3b:71:79:54:81:54:ad:f9:d0:ab:8c:31:54:66:
fe:8e:70:38:a0:e2:a8:7f:56:26:eb:57:0f:a3:06:
da:6a:bf:bb:f5:0f:9b:7d:f7:ae:60:8e:47:5a:fd:
cf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:80:4F:24:AF:87:71:0D:3D:20:4D:19:C0:DD:69:E8:D5:E8:4B:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/64fd56-e301-43c4-8bc9-7a06017e18bd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/64fd56-e301-43c4-8bc9-7a06017e18bd/1/1IBPJK-HcQ09IE0ZwN1p6NXoS9Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.88.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:84:3b:8f:4c:65:94:a7:0a:80:3b:ed:06:b0:3f:75:f9:77:
9a:e3:09:b4:64:89:9a:46:d2:fe:59:9a:c0:e6:6a:2c:e3:87:
17:37:f5:0a:8f:73:a4:65:8d:b4:f6:23:26:04:aa:c8:8a:51:
66:ea:4e:45:c2:11:c1:56:0e:6f:b9:1e:fb:5c:89:65:19:2a:
70:5c:78:64:73:76:03:6f:42:f2:f0:b2:c1:32:3b:f0:67:2f:
38:ba:56:ca:b3:40:4e:7f:a8:47:81:a3:06:9d:d2:1c:15:16:
70:0c:14:60:0b:21:94:64:a9:0a:77:ca:1b:00:b5:7e:de:91:
e6:e6:26:df:06:a6:0c:e6:c1:86:6a:d1:de:e0:d8:f4:fe:17:
21:df:18:2e:a3:ff:8f:3d:c1:0d:ec:3a:d4:07:4a:57:7e:e8:
f8:50:a1:fe:22:da:78:21:c0:12:b0:5c:de:8a:75:f7:aa:9e:
6c:94:f4:74:4a:d4:ea:dd:22:a4:0b:1a:70:31:71:52:c7:ae:
43:f2:3a:9a:b2:fa:da:7c:6f:19:13:aa:74:86:35:f2:c8:31:
df:f4:3c:98:6d:49:87:b2:56:2e:21:32:72:fa:37:45:6d:ba:
04:18:37:ac:40:c4:d6:9f:08:65:f6:11:51:e8:98:bd:92:d3:
0e:89:25:a3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:47 2023 by rpki-client on console-fra.rpki-client.org