Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1ki_YG5LnyTgSBuiLPCDuRR5OR4.cer
File: 1ki_YG5LnyTgSBuiLPCDuRR5OR4.cer (raw, json)
Hash identifier: Vf/vGmdyrZcTGLr+LeqkZkn5OWxaMOuyEngZYeuG1qU=
Subject key identifier: D6:48:BF:60:6E:4B:9F:24:E0:48:1B:A2:2C:F0:83:B9:14:79:39:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 778E1042CD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/6cc10f-a2ce-4a6a-86f9-a19d833234a1/1/1ki_YG5LnyTgSBuiLPCDuRR5OR4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/6cc10f-a2ce-4a6a-86f9-a19d833234a1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 00:53:50 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.15.144.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513484538573 (0x778e1042cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:53:50 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=d648bf606e4b9f24e0481ba22cf083b91479391e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b1:e5:a8:33:73:6b:4a:48:f0:9c:cf:53:3b:
22:f8:67:63:c0:94:d2:38:a6:b2:c2:a2:ce:1a:51:
ef:60:2c:53:97:9d:4c:fa:2f:27:77:39:11:63:1b:
bc:b1:04:b3:b8:2e:8b:7c:86:06:b6:e8:1d:16:a7:
3b:c7:47:dd:ff:01:ac:35:38:e3:15:22:9d:9d:e8:
29:a0:b4:d2:5c:65:df:d2:20:2a:16:82:b2:fe:c6:
9a:8b:df:e0:0d:85:b8:f2:e5:29:d0:ef:37:cd:44:
18:22:29:80:92:63:fc:8f:e1:e9:b5:33:e0:9f:7c:
32:bb:ab:ac:ac:11:4a:7e:b2:fc:5a:b3:eb:33:22:
e6:bb:52:85:96:49:8a:13:bb:f3:26:80:f7:26:e5:
e6:9b:df:f3:57:76:ca:03:6a:06:85:80:80:5d:04:
ba:5c:a9:0d:8b:e0:2a:53:31:01:96:05:ad:19:59:
c9:25:72:04:81:49:cb:6c:85:61:44:27:10:c0:70:
ce:fd:4c:c7:6d:8d:7b:0c:ca:ff:0c:16:5b:77:32:
ab:ac:9b:23:9f:29:1a:f6:83:86:8f:0a:1c:9b:4b:
bc:c5:c2:5c:f3:05:0b:c0:ee:74:17:3c:c9:1a:f6:
50:0f:e7:ca:d1:8a:45:40:e8:59:eb:96:d9:2f:09:
81:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:48:BF:60:6E:4B:9F:24:E0:48:1B:A2:2C:F0:83:B9:14:79:39:1E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/6cc10f-a2ce-4a6a-86f9-a19d833234a1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/6cc10f-a2ce-4a6a-86f9-a19d833234a1/1/1ki_YG5LnyTgSBuiLPCDuRR5OR4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.144.0/22
Signature Algorithm: sha256WithRSAEncryption
72:e4:0d:c5:b8:2c:78:7f:0c:1e:e0:36:1d:f3:17:5b:7e:c1:
7d:06:d4:c1:74:95:3b:6f:9e:02:21:6c:e2:62:d6:5e:6b:d2:
45:ed:e8:66:22:8c:fd:6e:83:50:4f:fd:aa:df:9c:bb:4b:03:
49:a1:fc:23:19:ee:a0:1e:d1:40:b8:40:3e:2a:09:ce:ff:4a:
34:f4:47:40:6b:a8:7b:35:26:2b:6e:eb:c8:77:5b:ee:9a:94:
96:8c:64:b5:1b:6a:6e:e9:32:46:ce:d2:bd:b1:d4:22:8e:1a:
57:ef:fb:c8:14:45:8e:61:b2:f4:0d:e9:23:cd:fd:04:fc:63:
99:ed:03:d9:cb:bc:7c:e9:ad:41:19:da:a8:d8:d0:ea:c2:ba:
e2:5b:b4:0e:22:f2:66:0b:92:09:2e:0d:60:1d:49:28:b1:32:
4e:43:e4:6d:09:86:cf:72:c0:79:19:73:26:9b:ed:8c:22:3e:
58:53:e1:6a:f7:59:3e:ff:b7:70:9b:ed:e5:85:ad:1b:82:e0:
6e:f4:fb:55:01:ac:07:5a:d4:c9:4f:ae:9b:fb:e1:7a:2e:7c:
be:a7:c1:cd:c0:ba:85:40:cd:d4:50:3f:69:a9:04:d8:2b:78:
0a:e4:fe:1e:80:5c:90:24:da:46:9c:87:3a:a8:97:fb:93:dc:
a5:72:0d:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:54 2023 by rpki-client on console-ams.rpki-client.org