Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2qPlt_4GH3UbcH0AL3ax7nA_QDU.cer
File: 2qPlt_4GH3UbcH0AL3ax7nA_QDU.cer (raw, json)
Hash identifier: Ut7wrp6AunohTGZ6dsmVZoBb5EHzlElHcLvEvB4clXw=
Subject key identifier: DA:A3:E5:B7:FE:06:1F:75:1B:70:7D:00:2F:76:B1:EE:70:3F:40:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 816A0324F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/c16cff-27c9-4879-9588-0e0d15548679/1/2qPlt_4GH3UbcH0AL3ax7nA_QDU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/c16cff-27c9-4879-9588-0e0d15548679/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 05:24:58 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.154.80.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 555829372146 (0x816a0324f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:24:58 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=daa3e5b7fe061f751b707d002f76b1ee703f4035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ee:49:05:6e:97:5c:7d:cf:5c:48:68:4f:24:
b9:0f:ee:64:5f:24:23:4e:19:33:a9:32:52:e5:38:
02:2c:dc:7a:5f:72:14:a8:27:8b:2d:aa:ca:20:d6:
a8:b6:24:5f:01:b2:31:de:5b:76:fe:b2:91:ae:84:
aa:d5:38:ec:48:7b:22:3f:d0:5c:b9:8f:b4:7f:88:
9d:49:78:d3:72:19:0a:17:2c:b0:9d:13:88:df:01:
8a:09:99:91:d2:fe:9f:b7:54:95:7c:dc:62:80:21:
85:96:88:fe:3d:28:02:d9:7c:7f:17:29:91:14:bb:
b0:dd:eb:0f:19:ec:88:af:60:bc:cf:7c:87:21:e5:
1d:8a:29:42:83:8d:26:cb:c2:5a:08:2f:01:8b:2a:
ca:6b:24:47:dd:ab:2f:97:f0:ae:95:34:ce:66:af:
28:77:c6:8f:28:db:9a:d7:48:f9:f2:d8:62:b5:5d:
48:ff:9e:88:ef:ce:68:32:47:43:cb:22:43:11:7f:
38:a1:1c:3c:0c:d4:3c:00:fc:07:72:84:07:f8:6b:
eb:58:2b:e5:a4:f6:58:ea:49:fb:81:5c:8e:59:56:
00:e1:0d:5e:8c:c2:32:ef:18:82:27:c3:7c:ac:26:
fc:ba:d5:39:f0:0f:ab:a3:f7:c8:41:a6:ef:e3:ef:
37:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A3:E5:B7:FE:06:1F:75:1B:70:7D:00:2F:76:B1:EE:70:3F:40:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c16cff-27c9-4879-9588-0e0d15548679/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c16cff-27c9-4879-9588-0e0d15548679/1/2qPlt_4GH3UbcH0AL3ax7nA_QDU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.80.0/22
Signature Algorithm: sha256WithRSAEncryption
60:b2:6a:40:87:01:1d:4d:5d:4a:8f:bf:c0:af:3e:99:89:c8:
aa:52:93:3a:f2:32:1e:2c:d9:fa:d8:40:a9:46:fa:9c:ef:03:
4e:b0:8d:ec:d6:e3:15:87:62:44:6d:50:77:17:b0:4d:38:b3:
6c:eb:3c:05:e7:67:1a:26:7f:88:64:b4:af:35:a1:9e:f7:3d:
f7:cb:96:c9:e2:be:dd:7e:c0:3b:1b:d4:76:a2:f3:22:1e:76:
cc:bb:d2:25:59:7b:59:b8:82:10:51:e4:99:6c:d4:14:0a:23:
12:91:3c:e4:7a:fb:e0:68:b9:2e:2c:55:39:ec:5e:a2:66:bd:
08:36:18:34:19:34:1f:b2:c5:15:9c:bd:12:ab:18:48:4a:85:
4c:fc:ba:05:aa:0c:7a:31:88:84:ee:d4:64:e8:8f:fd:6e:a8:
7c:1e:ef:76:5c:9f:4f:df:22:d7:bd:ac:c8:b6:de:ad:48:53:
1c:b9:c5:3d:38:72:15:55:fd:ed:06:47:bc:7d:ca:68:42:94:
c8:6e:13:a4:59:bc:4e:e9:3d:ec:35:85:2f:67:19:8f:b7:f7:
fe:50:f0:52:9f:d9:a4:44:67:79:c5:66:69:ad:31:ae:4b:85:
1e:0d:9d:ab:8b:75:59:0b:74:2e:2e:de:f5:ad:d0:26:84:a5:
fe:5e:86:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:04 2023 by rpki-client on console-fra.rpki-client.org