Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2pjx898r8NCx3xdwxmRsQV1SrU8.cer
File: 2pjx898r8NCx3xdwxmRsQV1SrU8.cer (raw, json)
Hash identifier: 5auy9zH/UPNy4w9Q0651eALAKwi0NVCucE8Q3gQrnGQ=
Subject key identifier: DA:98:F1:F3:DF:2B:F0:D0:B1:DF:17:70:C6:64:6C:41:5D:52:AD:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 76DBB3BEA7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/160772-8841-44ae-abb4-fcf370516c3f/1/2pjx898r8NCx3xdwxmRsQV1SrU8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/160772-8841-44ae-abb4-fcf370516c3f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 00:37:42 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 77.243.88.0/22
IP: 2a0d:1840::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510492130983 (0x76dbb3bea7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:37:42 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=da98f1f3df2bf0d0b1df1770c6646c415d52ad4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ad:8d:3f:c9:1e:2f:79:6f:d9:fb:5f:66:01:
d1:5b:25:48:82:f4:29:62:df:df:d2:2c:80:64:ee:
34:5f:a2:24:0a:7c:11:a2:02:5d:9c:d6:46:ef:ae:
49:30:a8:c5:80:32:28:ac:4d:3e:d1:7d:32:b8:ed:
8c:f3:37:f0:a3:84:05:46:97:0a:b5:3c:f3:d5:cc:
71:ac:4a:1b:e1:ed:d0:80:38:c0:85:49:b7:16:d6:
a8:98:da:b3:4a:87:2d:d2:f5:1a:6b:c1:05:e0:5e:
40:40:9c:c4:29:b3:fc:1c:00:34:ca:8f:61:5c:89:
8c:d8:5b:f3:fe:b3:3a:4d:5a:86:81:6d:0c:0a:52:
d6:19:64:27:4f:04:3f:f0:1b:a2:4f:c5:26:f4:67:
35:b8:94:9a:5b:1d:ec:7a:a7:aa:33:81:4e:6b:f3:
ef:f1:07:74:8c:86:d6:bf:ba:12:ce:10:13:f8:04:
ec:e0:13:6f:01:c0:9b:0a:d2:60:c0:72:cb:8b:2d:
21:21:f6:bd:eb:39:c6:e0:bd:c6:ed:bc:57:8b:79:
01:78:bd:35:32:a8:49:08:bb:62:e6:d4:45:00:41:
bc:09:11:48:3e:31:7c:aa:4b:72:32:66:82:fe:ef:
0f:61:fb:ec:0e:79:5f:a4:43:9a:0a:99:aa:fb:46:
a8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:98:F1:F3:DF:2B:F0:D0:B1:DF:17:70:C6:64:6C:41:5D:52:AD:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/160772-8841-44ae-abb4-fcf370516c3f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/160772-8841-44ae-abb4-fcf370516c3f/1/2pjx898r8NCx3xdwxmRsQV1SrU8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.88.0/22
IPv6:
2a0d:1840::/29
Signature Algorithm: sha256WithRSAEncryption
6a:e6:95:71:53:cd:91:31:18:fe:ce:12:9d:a9:c2:60:d9:ce:
6f:8e:48:4b:e8:15:5c:d5:d3:f2:cc:d5:0b:b2:08:3d:0d:d3:
cf:65:cd:8a:62:8b:d0:76:68:ad:ea:2a:6d:69:3f:5c:fa:23:
4c:f4:d9:45:12:de:c4:24:45:2c:7a:f4:c2:c3:78:55:26:77:
8b:02:a4:78:f4:a6:ba:23:fb:af:96:0d:f2:d6:c0:47:f0:60:
65:34:7d:9f:3f:22:4f:41:40:73:01:64:e0:da:71:7e:31:20:
11:7d:e3:84:61:fa:a0:9e:4e:c8:01:cf:08:2b:fd:7b:2c:a2:
cb:ce:8e:b6:e2:50:fc:72:03:27:85:a4:ba:4b:ea:d0:67:bd:
71:e4:e6:35:a3:dc:2d:d5:b3:0b:43:ea:70:d7:4c:22:61:20:
8d:eb:93:87:0b:9a:bb:ff:38:8e:92:e1:38:34:85:37:96:22:
ce:21:2c:52:19:25:d4:4c:9e:e7:28:bd:5e:db:0a:d7:cb:a4:
a1:ed:1e:66:30:f3:fb:d1:41:25:c6:a7:f0:2b:45:22:12:9d:
a6:60:70:23:34:6e:7d:e7:e7:96:fd:30:b7:37:49:9d:78:91:
5e:9e:da:14:d7:82:5d:b0:9b:fe:1b:f0:9b:3f:ca:25:51:a1:
f0:25:6e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:50 2023 by rpki-client on console-ams.rpki-client.org