Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1ySwC0m1m4O0v1Pea0fsj5ur3EA.cer
File: 1ySwC0m1m4O0v1Pea0fsj5ur3EA.cer (raw, json)
Hash identifier: 04pWfKQ4ZD4QlIRfZsj7SZkyRUG+kYdmUdZpR+wG+Bk=
Subject key identifier: D7:24:B0:0B:49:B5:9B:83:B4:BF:53:DE:6B:47:EC:8F:9B:AB:DC:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 828F386FCF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/01f9d6-598f-4e28-bfbe-41b8cfdb61f5/1/1ySwC0m1m4O0v1Pea0fsj5ur3EA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/01f9d6-598f-4e28-bfbe-41b8cfdb61f5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 06:38:07 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 178.239.20.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560748589007 (0x828f386fcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:38:07 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=d724b00b49b59b83b4bf53de6b47ec8f9babdc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:b7:78:5f:27:da:a0:ff:63:98:d6:22:f2:
83:27:76:21:41:6b:14:4c:67:fc:49:b9:e1:37:04:
ea:59:1b:34:b2:53:0b:95:2c:1c:cf:97:56:10:1c:
4f:1e:67:73:fd:a0:65:1e:c6:6a:70:37:5c:03:a1:
b6:c0:50:f8:66:1e:75:56:23:13:1c:46:9b:67:86:
17:22:32:d0:76:ff:c9:73:36:e9:20:20:73:36:79:
c6:11:c4:30:75:f4:ff:61:b0:45:0f:5d:95:83:37:
e6:7b:a4:9d:c4:bf:ef:ed:46:5a:10:37:1b:76:01:
c1:af:2a:31:ec:56:f3:0f:d9:91:ee:26:a2:1a:98:
97:74:87:a7:eb:1f:f1:81:80:dc:34:c6:19:9b:ca:
63:86:97:a4:35:da:cd:af:c7:4d:0f:8d:31:7b:62:
35:2f:b7:33:fa:f9:cf:ce:ce:e3:f8:21:34:24:4d:
82:59:91:19:3a:a5:9a:4e:d0:2c:af:b0:2f:43:a5:
7b:78:ca:5c:fb:b9:8c:37:0d:54:99:38:bf:bc:45:
55:f1:0b:2c:21:d5:86:03:c2:0a:f6:43:5a:d9:c5:
2c:7e:78:72:b5:bb:40:e1:ce:6c:67:f8:e1:be:54:
67:d3:40:4c:4e:6d:49:5f:f4:06:8f:9c:0b:6b:2b:
19:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:24:B0:0B:49:B5:9B:83:B4:BF:53:DE:6B:47:EC:8F:9B:AB:DC:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/01f9d6-598f-4e28-bfbe-41b8cfdb61f5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/01f9d6-598f-4e28-bfbe-41b8cfdb61f5/1/1ySwC0m1m4O0v1Pea0fsj5ur3EA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.20.0/22
Signature Algorithm: sha256WithRSAEncryption
90:84:f7:82:a9:72:c9:53:f2:cc:23:e3:4c:2c:9f:37:e7:e5:
dd:10:3b:60:18:20:29:d7:9d:62:80:07:1d:1d:e2:4f:eb:38:
3b:87:60:dc:82:47:72:a6:17:95:96:ba:8f:0f:6f:cf:ba:d2:
c4:53:16:66:8d:90:34:eb:ff:18:7a:f8:9e:9b:27:c2:90:2d:
5a:7b:23:8a:1f:55:ab:4f:13:d5:17:0e:6e:a5:96:a0:88:a0:
03:e6:70:99:32:7c:02:f7:e8:13:c7:bc:fc:76:8a:e5:f4:54:
cc:0e:ac:c7:af:ba:83:77:d5:6f:53:9d:e0:3c:b6:87:40:b3:
13:8d:fa:e8:03:ae:cb:20:4e:ff:e1:b6:73:81:ed:4f:17:2b:
e6:d4:7f:4d:38:4c:50:13:fd:88:80:fd:13:18:c1:59:5d:4b:
aa:85:85:0b:f3:49:eb:5e:5d:73:85:46:db:e5:0b:a8:78:5b:
05:db:27:dd:db:b7:91:7e:87:50:79:65:ef:a4:ae:7a:d3:13:
cb:08:6d:04:09:68:7b:00:b3:05:22:ae:4f:aa:27:76:32:4f:
22:41:c5:69:df:88:8d:33:a3:29:de:2a:ad:36:54:fd:af:ff:
01:ea:46:b1:be:17:1a:15:5e:cd:a2:3e:f7:9e:1f:1c:6d:54:
1f:34:39:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:07 2023 by rpki-client on console-fra.rpki-client.org