Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1YGZDko87ncTq0j9Ywh0MEulKqQ.cer
File: 1YGZDko87ncTq0j9Ywh0MEulKqQ.cer (raw, json)
Hash identifier: Ld7O/yCuniURykQc0quMHTKIZHZPeb2HST0YdWfASFM=
Subject key identifier: D5:81:99:0E:4A:3C:EE:77:13:AB:48:FD:63:08:74:30:4B:A5:2A:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7CF9691B9C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/eb9dd3-8908-4f1d-9c1d-b5c80a0b0685/1/1YGZDko87ncTq0j9Ywh0MEulKqQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/eb9dd3-8908-4f1d-9c1d-b5c80a0b0685/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 03:14:58 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.87.172.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 536760359836 (0x7cf9691b9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:14:58 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=d581990e4a3cee7713ab48fd630874304ba52aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a9:8d:9f:3f:62:e4:ee:51:91:80:fe:7a:9e:
59:bc:eb:1e:ce:99:99:34:85:d6:10:53:39:34:29:
35:e6:7f:c9:14:9e:86:2f:cf:d2:fa:e7:70:af:c6:
07:14:21:2e:6c:74:5c:22:6f:e6:85:99:9e:39:19:
8b:0b:4b:4f:ba:ed:a8:bc:48:68:2f:dd:d6:71:24:
db:93:a0:a3:3a:4f:a3:1e:25:6c:04:ca:6b:d0:8d:
5a:b4:13:20:b6:3b:81:95:01:cb:a3:cf:41:58:f1:
a1:34:24:f6:e0:f9:b3:b4:81:b3:fd:38:b7:24:b3:
b7:d6:48:90:5e:2f:14:36:05:79:a8:cf:af:2b:50:
a0:fa:c6:1b:a8:f8:d9:31:e9:a8:9e:d4:b4:f5:63:
bb:50:a3:03:d6:11:d1:1b:37:dc:4c:c5:14:64:7e:
91:a1:13:03:a3:53:59:f8:74:14:d9:50:de:66:d7:
f3:20:64:4d:21:96:9e:14:6a:7a:bf:00:2a:4a:64:
d3:9f:bb:40:b0:8b:5d:be:aa:22:04:40:95:a7:af:
11:66:27:80:7c:ea:59:af:0c:71:7f:5b:4a:e5:2c:
db:32:31:9a:6e:1f:9e:e4:82:10:2a:3d:c6:c3:fe:
bb:25:24:ca:61:b7:83:6a:67:c9:ea:92:5e:a6:00:
2b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:81:99:0E:4A:3C:EE:77:13:AB:48:FD:63:08:74:30:4B:A5:2A:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/eb9dd3-8908-4f1d-9c1d-b5c80a0b0685/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/eb9dd3-8908-4f1d-9c1d-b5c80a0b0685/1/1YGZDko87ncTq0j9Ywh0MEulKqQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.172.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:f7:57:88:5d:74:a5:52:b2:84:cf:3d:fc:6a:35:fe:c5:6b:
1f:a8:86:45:00:0b:90:f1:65:d6:6d:48:a6:90:6a:2f:15:30:
58:f1:b7:a5:81:b8:b3:c8:a9:78:42:a5:7a:ba:32:1f:71:ab:
32:c3:64:39:86:3f:24:32:de:71:ee:95:89:fa:93:ca:f7:7c:
c9:8d:dd:e8:8d:b4:f6:d1:49:ae:24:24:ae:7b:09:d3:d2:d6:
38:59:ca:3d:08:51:56:b1:99:39:04:37:29:27:8f:eb:d0:30:
67:3b:c8:09:5d:58:62:00:92:04:63:da:98:84:bd:2e:32:68:
f5:2e:10:43:5c:29:b3:03:5b:25:ce:c0:17:ac:06:28:04:64:
54:76:ce:49:c3:7d:ad:cc:69:7c:ac:20:bd:ac:4f:0f:32:b1:
7e:1b:20:56:7a:73:c9:dd:e9:72:cb:7b:9c:ac:02:32:be:8e:
25:68:dc:e7:2e:c1:23:b7:c8:7c:6f:d7:b0:ee:b4:c6:f7:cd:
ec:6d:1f:48:91:bc:50:dc:25:a1:d2:15:d2:f3:f3:2a:58:2a:
b5:17:53:d9:1e:d7:63:0e:c8:49:da:c7:01:0a:d1:b8:3f:24:
ba:a1:7d:a4:29:49:36:cd:76:a5:3d:c5:eb:12:22:76:9d:1e:
5f:32:3c:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:48 2023 by rpki-client on console-fra.rpki-client.org