Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30nd9XIeO53Mf3kCl2tA0Y0aLtU.cer
File: 30nd9XIeO53Mf3kCl2tA0Y0aLtU.cer (raw, json)
Hash identifier: GDZyB8vQK5Ukndrx/lP8so89knWbkLJAO0Uu7l+jnc8=
Subject key identifier: DF:49:DD:F5:72:1E:3B:9D:CC:7F:79:02:97:6B:40:D1:8D:1A:2E:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 751BCAE8AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://nostromo.heficed.net/repo/1123731/0/DF49DDF5721E3B9DCC7F7902976B40D18D1A2ED5.mft
caRepository: rsync://nostromo.heficed.net/repo/1123731/0/
Notify URL: https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before: Fri 01 Jan 2021 00:00:05 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 2.58.28.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 502977456299 (0x751bcae8ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:00:05 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=df49ddf5721e3b9dcc7f7902976b40d18d1a2ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:95:cb:e5:3d:1a:59:cc:43:9b:01:75:d5:ff:
83:08:3a:de:c6:2f:fe:7a:46:24:5a:8b:a4:d9:3b:
68:32:05:27:b8:44:27:0c:4f:67:db:fd:9f:d2:dd:
f4:ee:2b:df:c4:3c:46:9b:44:69:b8:63:ca:da:cb:
84:54:d9:31:68:b4:ce:13:96:f2:df:0a:66:8f:ae:
ac:ea:7c:d2:d1:e7:47:54:ce:8b:9a:14:7c:f9:62:
18:4b:53:00:3e:0c:aa:cc:a5:73:0a:2b:01:74:bf:
b1:88:a0:05:d0:89:12:50:8c:4c:44:fe:c1:08:98:
7a:d1:ce:b2:6f:2a:ce:b0:08:54:dc:c3:e0:88:bc:
af:69:e4:fd:43:dc:84:f7:ab:fa:aa:fc:53:f2:4d:
64:a7:dd:85:a2:33:81:de:8b:3f:14:d6:7f:63:c6:
4c:41:ea:d5:e4:b0:87:43:90:1b:27:09:ca:3b:ad:
a9:d0:82:b2:68:a5:6a:aa:f2:98:72:48:90:18:5d:
10:f9:c7:9c:00:f7:ca:40:49:b8:e5:47:66:50:60:
e5:90:6a:f0:6e:02:6b:fa:84:6f:5e:77:20:c1:48:
eb:d6:44:bf:4e:5b:f1:b8:1d:6c:e1:93:88:8a:20:
c9:5c:cb:5f:8c:7b:6d:de:9a:2a:9e:a7:eb:ad:df:
37:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:49:DD:F5:72:1E:3B:9D:CC:7F:79:02:97:6B:40:D1:8D:1A:2E:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://nostromo.heficed.net/repo/1123731/0/
RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123731/0/DF49DDF5721E3B9DCC7F7902976B40D18D1A2ED5.mft
RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.28.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:14:81:47:57:f4:f3:9d:c2:82:4f:35:71:ad:f8:6a:b3:21:
09:11:cb:c3:b3:06:fe:9a:01:bc:c5:d5:6e:a7:c3:94:0d:37:
5a:3c:a0:1f:1b:13:dc:f9:0f:46:3e:77:8b:41:c6:fc:ba:24:
e4:97:0d:a4:c8:0a:e9:29:82:f6:89:fe:8d:06:74:f9:41:2b:
07:5d:8d:10:c8:52:73:14:82:9d:f6:10:17:80:5a:0d:5b:a5:
cc:49:c2:dd:97:3a:16:cc:40:a2:eb:90:a1:90:38:5f:d8:08:
f2:43:f2:b6:cc:dd:55:5e:be:8a:07:3c:70:7d:84:4b:ca:52:
9f:c6:01:c8:2f:65:2d:30:da:ae:83:9a:d3:ba:9b:f8:22:08:
e4:50:fa:d4:47:0e:e1:55:1c:97:56:64:39:e8:77:04:41:b6:
8d:40:78:d7:7d:6a:b6:38:b8:8b:66:98:4e:92:7d:c7:a0:1a:
e9:36:f4:9d:9b:d9:19:27:92:81:57:df:84:41:e2:5e:5b:99:
02:ab:f0:50:72:60:cd:8a:69:ab:5f:8f:7b:24:90:12:44:9c:
a1:83:13:d6:59:ff:bf:b6:ec:80:f9:29:c5:66:45:93:d4:90:
d6:96:31:eb:1a:37:70:6b:34:65:c7:86:9d:94:e0:c7:90:9b:
31:1a:0b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:55 2023 by rpki-client on console-ams.rpki-client.org