Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2R2vC_JbNOVfxRe01TMoIE3gv9k.cer
File: 2R2vC_JbNOVfxRe01TMoIE3gv9k.cer (raw, json)
Hash identifier: kNVXPm+nyiF1crSn2DMgbC8XuNQQ5Z+Vu62wY/TAGSM=
Subject key identifier: D9:1D:AF:0B:F2:5B:34:E5:5F:C5:17:B4:D5:33:28:20:4D:E0:BF:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 75DAB196B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/474ff8-942c-4215-9cd5-eda3ef05c519/1/2R2vC_JbNOVfxRe01TMoIE3gv9k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/474ff8-942c-4215-9cd5-eda3ef05c519/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 00:15:09 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 185.149.232.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506180245172 (0x75dab196b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:15:09 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=d91daf0bf25b34e55fc517b4d53328204de0bfd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3f:54:c2:e8:d8:2e:f9:4b:40:6c:52:ac:4f:
e6:20:49:c2:f6:2b:de:c8:5b:0d:20:a4:c2:72:7f:
45:0a:03:f2:9b:aa:82:d0:74:3c:e2:57:44:c5:88:
27:d5:49:f5:3b:cf:4e:f4:ee:69:c3:64:81:a4:7f:
90:5e:66:24:f9:b7:97:f2:8c:54:f4:82:15:94:1f:
a2:d1:dc:85:ac:79:65:c3:e8:41:c4:aa:40:ba:09:
17:37:75:37:f8:d6:b5:56:44:05:39:c8:25:37:da:
33:37:f5:9e:12:b7:a2:11:82:ba:df:10:a4:d4:fb:
87:49:6b:d8:e1:f3:68:d5:82:6b:39:ce:1a:43:b8:
02:86:8f:c8:8b:2a:98:a7:9e:0e:f8:77:76:70:1b:
9d:07:0e:e4:f7:99:5f:a3:72:25:a4:8f:64:81:da:
e7:ea:ad:fc:53:07:aa:bd:fa:cc:52:7c:31:7c:ba:
24:fa:9b:ca:46:64:8b:b3:04:67:62:97:4d:bc:fd:
06:8d:74:36:fc:51:67:e5:de:96:90:74:c4:98:3b:
86:ea:7b:42:8d:eb:fe:8e:2f:f9:90:d1:df:ee:bb:
fa:21:2e:75:12:44:1a:8b:f9:05:c1:f8:99:99:ac:
2c:80:05:35:60:d7:89:a7:72:07:3e:10:4e:4e:ae:
0a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1D:AF:0B:F2:5B:34:E5:5F:C5:17:B4:D5:33:28:20:4D:E0:BF:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/474ff8-942c-4215-9cd5-eda3ef05c519/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/474ff8-942c-4215-9cd5-eda3ef05c519/1/2R2vC_JbNOVfxRe01TMoIE3gv9k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.232.0/22
Signature Algorithm: sha256WithRSAEncryption
36:98:38:62:34:c0:48:b1:1b:7d:03:8f:68:bd:20:6d:fa:d1:
18:8d:b8:43:54:6d:0f:54:63:d0:b4:8a:6e:f0:8f:22:8a:7a:
7e:ae:af:66:ad:a9:b6:36:b9:ab:60:51:bd:4a:21:ea:69:fd:
90:c8:87:47:e4:62:cb:a1:6d:59:b3:e9:d0:92:8c:42:5b:2e:
67:bf:46:27:b7:99:0a:e6:6c:d5:58:da:ec:42:40:14:3b:08:
75:a1:e6:b4:e0:37:5a:33:4c:39:34:70:8f:59:7a:b0:c1:34:
d2:ea:ed:d4:56:7e:d5:95:c1:80:c8:1c:44:76:d4:38:ff:8b:
02:00:bf:60:66:d6:0c:f5:cc:a4:5b:65:2c:aa:9a:90:98:b0:
9f:fe:b5:a8:2c:9d:47:c6:e3:9c:7c:4f:d1:11:ac:e6:2a:70:
c7:5a:92:10:57:cd:96:b7:9a:33:1c:86:96:16:bb:69:33:35:
73:66:77:3c:7d:43:68:64:8d:92:0a:4b:1c:6e:71:b4:13:5b:
49:7a:a1:43:7a:be:4a:b0:7a:aa:e1:9e:08:63:0f:e6:7a:5c:
c3:22:a8:d5:d6:87:20:51:bc:93:32:54:c3:9e:41:f6:e1:5f:
f1:e7:0e:35:69:34:43:5a:15:cc:e9:2a:89:88:43:0e:c8:0b:
66:06:52:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:31 2023 by rpki-client on console-ams.rpki-client.org