Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2tybODMqUFqEfzwj-WJPL4xkdZA.cer
File: 2tybODMqUFqEfzwj-WJPL4xkdZA.cer (raw, json)
Hash identifier: kb4C2Fg3KKFPhQJf1BzU2ENU76T7VKIOVqrHBXpJaAM=
Subject key identifier: DA:DC:9B:38:33:2A:50:5A:84:7F:3C:23:F9:62:4F:2F:8C:64:75:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 8176D1E799
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/2da663-8d0f-43bd-bad4-66e9333123e1/1/2tybODMqUFqEfzwj-WJPL4xkdZA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/2da663-8d0f-43bd-bad4-66e9333123e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 05:26:37 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.140.196.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556044248985 (0x8176d1e799)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:26:37 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=dadc9b38332a505a847f3c23f9624f2f8c647590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:f8:5f:25:ae:7c:6a:4d:da:aa:06:15:10:
30:00:d2:f0:8d:23:5c:16:9e:26:c9:84:3b:38:5f:
5d:b5:53:fe:06:66:df:61:02:0f:06:0d:84:9b:9a:
aa:b9:d2:45:d2:61:1c:00:1c:83:7e:38:16:c8:e8:
63:fa:5a:f2:cd:40:5b:3e:59:03:87:99:92:7f:62:
01:16:08:86:b7:04:36:82:d6:bf:7e:b1:6e:dc:0f:
08:5e:34:be:1e:f2:6b:b6:a7:39:dc:d9:32:d7:28:
4b:f2:9f:17:bc:c1:5d:58:70:fd:0b:06:27:69:55:
57:8c:78:52:ae:be:21:07:4b:45:9d:09:3a:f1:9f:
7e:38:e9:a4:d1:c9:3a:7c:55:97:a6:eb:bc:5b:b0:
fc:22:33:26:a7:9f:1a:28:e2:08:6d:f0:e9:24:bb:
2b:54:fa:cf:33:a9:a2:33:34:69:3c:ca:ce:e8:62:
ec:a9:ae:1b:e2:af:a1:b7:b3:c1:06:f4:62:03:72:
58:8e:e3:1d:cb:41:dc:d6:6a:d9:72:33:b7:0f:a8:
69:51:0f:13:31:6c:15:8b:bc:d7:88:a6:98:23:0f:
18:63:eb:83:db:9b:d3:29:b1:c3:ab:40:60:bd:6c:
2d:71:ad:a0:b4:f2:f0:d0:9e:8a:b9:7c:6b:36:16:
dd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DC:9B:38:33:2A:50:5A:84:7F:3C:23:F9:62:4F:2F:8C:64:75:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2da663-8d0f-43bd-bad4-66e9333123e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2da663-8d0f-43bd-bad4-66e9333123e1/1/2tybODMqUFqEfzwj-WJPL4xkdZA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.196.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:72:32:76:8a:89:80:90:75:ed:09:29:93:42:4c:59:dd:6f:
53:04:27:9a:76:31:75:c0:04:74:60:a8:0e:a8:a7:4d:82:80:
f3:6f:7f:9b:6c:9b:11:41:f4:87:25:a0:e3:21:ad:dd:5a:56:
3b:9d:d0:9c:ff:e7:48:90:79:7e:ac:27:3a:dc:e1:49:47:35:
82:c1:ca:fc:61:d0:db:2b:86:2c:97:2f:14:7d:2f:82:88:92:
47:f2:be:b6:33:70:4b:5d:d3:e0:3a:ad:f0:fa:91:4c:2a:8f:
3c:44:22:b4:0f:da:3d:48:87:89:18:f3:12:6c:17:91:b3:92:
7e:a3:e5:b3:4a:47:91:6b:94:f0:b5:97:1e:7e:6e:72:d9:a1:
ce:f6:6d:98:a6:c5:5b:8f:0d:a5:3b:81:d4:da:34:56:c9:0f:
e1:42:42:2b:84:7f:fb:64:ef:6b:1c:aa:a5:6c:b8:8c:da:fa:
5b:98:f9:3e:d1:8b:6e:e9:d1:12:c4:7b:f0:db:c2:bf:52:a7:
8f:89:86:fd:e6:43:66:18:77:ac:79:fd:96:af:33:6a:3f:aa:
22:88:cd:fd:7c:24:4a:54:68:b4:b2:2a:9c:a6:c7:10:0d:c9:
be:dd:98:8d:3e:d1:6d:dd:e9:19:78:92:ed:ef:dd:ac:fe:d2:
1f:6b:98:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:04 2023 by rpki-client on console-fra.rpki-client.org