Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3AqCbyvXJKsAacBzmlz2_qamEMg.cer
File: 3AqCbyvXJKsAacBzmlz2_qamEMg.cer (raw, json)
Hash identifier: LIywQtzhjIBIpSOrcgtQdRMV1fxJTAY5AZ+eh3oiw0Q=
Subject key identifier: DC:0A:82:6F:2B:D7:24:AB:00:69:C0:73:9A:5C:F6:FE:A6:A6:10:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7B59AAC7DD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/b58f54-8686-4ccb-a6fe-d9d4a951ddbd/1/3AqCbyvXJKsAacBzmlz2_qamEMg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/b58f54-8686-4ccb-a6fe-d9d4a951ddbd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 02:35:33 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 77.83.200.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 529785341917 (0x7b59aac7dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:35:33 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=dc0a826f2bd724ab0069c0739a5cf6fea6a610c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e8:a4:14:c8:a8:5e:0b:4f:22:c1:94:36:7c:
b7:08:9b:93:ca:cc:30:99:9d:d6:8b:53:dc:f2:69:
43:d6:42:d6:a9:d5:9e:c6:ad:d1:65:7e:f6:b1:8f:
81:93:ae:a3:14:42:d2:2e:ff:7e:39:ac:7b:59:95:
74:42:e7:27:97:3c:94:fa:cc:06:45:b0:b1:7b:5a:
d3:a5:70:03:46:9d:e8:09:e2:1b:c6:d7:40:4c:01:
d4:c6:80:a3:18:c2:10:c5:fb:70:c8:87:5c:50:10:
3e:41:23:8d:af:ce:01:a2:a5:25:c9:4b:0d:3c:42:
1d:82:a9:89:f2:ff:f8:33:ca:e8:47:11:ad:4c:8c:
4d:34:ad:87:db:fe:32:c9:a7:de:76:da:07:44:0b:
12:81:26:d5:c5:1d:29:4c:d5:9b:15:bf:dd:7e:e7:
a9:63:d1:e6:35:6f:6c:92:fa:bc:9e:8c:87:1c:94:
48:af:1f:4e:4a:65:91:3c:9c:b0:88:03:9a:75:14:
43:4c:ef:44:33:28:ce:c4:e3:a9:a9:09:76:42:34:
bf:6f:1e:34:18:75:26:65:06:71:f4:4a:13:15:58:
fe:25:a6:be:82:cb:c7:27:dd:06:e7:bd:5b:c1:31:
37:3d:1d:38:30:47:b8:a0:92:e9:7b:01:25:1e:a3:
55:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0A:82:6F:2B:D7:24:AB:00:69:C0:73:9A:5C:F6:FE:A6:A6:10:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b58f54-8686-4ccb-a6fe-d9d4a951ddbd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b58f54-8686-4ccb-a6fe-d9d4a951ddbd/1/3AqCbyvXJKsAacBzmlz2_qamEMg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.200.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:b1:c0:74:09:dc:02:81:00:03:8c:c0:61:1f:73:1b:0a:4e:
43:5f:44:dc:86:5c:1b:6d:34:60:59:d4:dc:54:c5:d7:ec:42:
2c:c5:68:60:68:24:fe:ae:b5:56:f1:bc:5a:2c:94:6d:1f:f3:
e8:f5:cb:4f:be:5d:80:c6:5d:b5:d0:e9:1a:2d:9e:0e:82:c8:
c4:26:73:37:e1:6f:41:8d:a4:69:75:fa:bf:d6:cc:f1:f9:09:
cb:80:a8:8f:37:ff:70:05:5b:db:6f:5b:15:8b:af:e6:55:6a:
ff:57:4d:26:77:3b:a5:dc:66:ca:98:b6:47:d5:d3:af:a3:c0:
d6:22:89:6e:66:15:c6:8e:09:e0:de:7a:3f:a8:75:b7:38:3d:
73:a1:d2:f6:8a:ad:77:72:74:40:7e:66:a3:09:cd:1a:16:8f:
af:01:0d:ff:a4:bd:f2:cb:e5:f1:bf:ac:1c:a4:6d:47:94:d8:
94:3a:4e:f2:d4:f9:a6:39:17:8d:11:74:63:6b:bb:6a:db:24:
77:03:ff:d2:70:9d:c1:ec:b8:e0:14:8d:ca:17:0f:14:f0:a0:
22:18:b5:95:39:62:30:bf:71:e7:a3:8c:64:81:e6:50:d2:09:
7f:1a:56:3b:a9:3e:e7:63:0f:59:86:8a:51:f2:38:7f:1e:9a:
c7:85:0c:ec
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:44 2023 by rpki-client on console-fra.rpki-client.org