Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2tZPqpmspv7eOnD6JKRjc5x0QNU.cer
File: 2tZPqpmspv7eOnD6JKRjc5x0QNU.cer (raw, json)
Hash identifier: oAbsff2zbgXDg1hMP4OmzmE2aE1ovu6WHqszIFz7Zws=
Subject key identifier: DA:D6:4F:AA:99:AC:A6:FE:DE:3A:70:FA:24:A4:63:73:9C:74:40:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 78696A0826
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/037b2d-3528-4054-a357-3371855950be/1/2tZPqpmspv7eOnD6JKRjc5x0QNU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/037b2d-3528-4054-a357-3371855950be/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 01:31:17 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 79.143.140.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517164632102 (0x78696a0826)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:31:17 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=dad64faa99aca6fede3a70fa24a463739c7440d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:4c:82:2d:13:cd:cb:15:bf:2a:09:c2:ad:
43:5c:95:6a:ba:5d:1c:ab:e9:91:86:05:0d:71:80:
56:f4:ca:35:47:f1:3c:d2:f9:70:a7:7c:54:53:25:
97:7e:bd:99:a6:86:40:0a:59:5a:19:66:d4:bb:8e:
52:74:2b:a9:08:61:80:a9:6a:db:36:2b:a8:01:99:
f0:0a:ea:9c:96:30:9d:5b:b5:5f:a8:2a:04:9a:65:
44:bb:18:73:47:4c:bd:e1:df:4d:ed:1d:b1:62:08:
0f:4c:52:33:99:1a:a0:8b:44:53:f6:ab:a6:94:db:
46:6e:1e:50:90:5b:c6:65:41:fe:56:da:72:65:50:
74:17:fb:d4:47:f4:35:31:63:7b:08:77:9b:46:00:
ab:a4:77:b1:2b:03:76:fd:b8:5b:0f:c1:e8:7b:c7:
03:c7:a1:d0:e3:21:4c:6d:01:70:e1:df:bf:99:f6:
8b:06:80:3d:f4:6a:63:ac:af:01:44:57:f1:7f:38:
5e:75:b3:54:2d:f2:fe:fd:e2:74:2d:9e:01:84:a1:
da:d3:8d:f5:23:59:c3:0c:af:bb:eb:3e:cb:b5:dc:
39:5b:7b:96:69:0d:c9:4c:63:77:d3:ce:27:3c:b2:
68:29:34:b9:e8:3a:5b:17:34:b7:ab:3f:99:23:89:
d1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D6:4F:AA:99:AC:A6:FE:DE:3A:70:FA:24:A4:63:73:9C:74:40:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/037b2d-3528-4054-a357-3371855950be/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/037b2d-3528-4054-a357-3371855950be/1/2tZPqpmspv7eOnD6JKRjc5x0QNU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.140.0/22
Signature Algorithm: sha256WithRSAEncryption
30:00:d6:69:81:3e:db:ae:dd:e7:1d:ea:9a:47:8c:8b:18:99:
ee:6b:5e:12:05:d3:f2:59:4f:70:73:2e:76:d8:ab:a2:de:b3:
14:54:ff:8c:65:17:16:85:08:6a:5c:94:85:2f:a9:c4:ba:dc:
f5:3e:97:43:af:1c:03:f7:17:6c:ff:08:e9:5a:f0:1e:ef:c7:
c4:2c:ec:19:e1:dd:37:fe:14:cc:4c:54:69:41:98:6d:8b:e9:
48:17:4c:89:2f:68:75:10:cd:02:09:3e:90:53:85:82:07:a7:
52:99:c5:6d:3b:17:23:50:98:be:4f:1c:7a:b0:e2:80:c3:ee:
40:f0:dd:03:3a:d3:32:8a:50:7d:0f:f5:84:39:cf:32:ba:42:
a6:d2:00:93:43:48:04:5c:ed:85:17:5d:11:15:77:dc:84:84:
61:c9:67:60:e0:72:68:ee:e2:36:53:52:88:88:9d:fd:5b:0b:
d5:0f:89:97:ff:5d:8b:29:b7:42:a6:57:06:b0:a5:a1:59:c6:
37:42:09:23:f9:bc:d3:92:ed:47:99:8d:51:13:84:fe:ed:54:
98:74:8c:7b:75:f9:ce:29:fa:2d:b4:17:28:47:37:59:1d:78:
bd:80:c9:b4:44:8f:9f:02:e1:2c:4a:dc:ef:bf:e0:0c:5b:13:
65:6a:b6:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:04 2023 by rpki-client on console-fra.rpki-client.org