Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3GmwWLewGtvto7Y2LzwHUeku4ew.cer
File: 3GmwWLewGtvto7Y2LzwHUeku4ew.cer (raw, json)
Hash identifier: 0dorplM3m4vavC9MpXzk827C7CcUVFKvUvLA7OW3QGw=
Subject key identifier: DC:69:B0:58:B7:B0:1A:DB:ED:A3:B6:36:2F:3C:07:51:E9:2E:E1:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A12030DBB8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/bf6267-1f4f-446e-aeb1-ef2d9ad0ca6c/1/3GmwWLewGtvto7Y2LzwHUeku4ew.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/bf6267-1f4f-446e-aeb1-ef2d9ad0ca6c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:53:02 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.131.172.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 692029807544 (0xa12030dbb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:53:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc69b058b7b01adbeda3b6362f3c0751e92ee1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:60:4d:f4:09:3e:87:7e:73:6c:70:35:8e:be:
cb:70:05:5e:15:4c:a5:e2:4d:9a:8e:60:15:56:3f:
16:4b:de:63:fc:a7:7f:a9:5d:da:0a:4e:c2:77:55:
86:f7:e6:e9:a0:03:88:9c:91:c0:0a:78:10:31:b4:
36:fb:12:2a:54:6e:1f:a9:f2:a5:4c:e5:d8:8b:51:
3b:67:c3:6d:23:07:50:63:ea:29:1b:94:4c:b9:1e:
04:5d:67:23:a9:b8:8f:23:38:2e:04:b9:c7:ad:02:
3a:f5:4d:11:ad:e1:6e:45:c5:82:9a:5a:73:bc:f8:
c0:36:46:f5:53:4d:91:7f:ab:ad:72:db:c0:81:2a:
77:3b:bc:52:80:84:71:ee:42:2c:8f:3b:52:74:31:
0e:dc:25:01:f5:ee:0b:c8:0e:0b:b2:e3:a5:c3:15:
64:34:ea:8b:a1:e8:9c:2b:c6:38:b7:38:b6:70:6b:
b8:6a:77:f4:88:4e:57:10:eb:33:0b:70:52:3c:ef:
50:21:a5:49:8e:e0:c5:f8:3d:47:c1:98:e1:5e:ae:
9b:0a:c4:49:3a:54:06:f6:8c:d4:af:9e:97:cb:d3:
e8:01:d0:d3:15:b9:b6:5b:94:2a:89:39:4d:30:16:
56:78:34:9d:eb:eb:37:cf:62:92:63:89:0b:7b:a1:
1f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:69:B0:58:B7:B0:1A:DB:ED:A3:B6:36:2F:3C:07:51:E9:2E:E1:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bf6267-1f4f-446e-aeb1-ef2d9ad0ca6c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bf6267-1f4f-446e-aeb1-ef2d9ad0ca6c/1/3GmwWLewGtvto7Y2LzwHUeku4ew.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.172.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:3d:7e:65:91:42:19:c0:7d:bb:17:59:52:38:d9:4d:46:f6:
ae:db:b4:5a:0c:ef:4f:9d:6f:e2:57:95:a0:88:22:d8:7c:44:
b0:5d:21:46:4e:a2:d8:36:d9:57:fb:e0:a5:2c:54:24:89:cd:
ad:94:ba:98:c4:c3:f4:84:d7:72:f4:96:18:3f:f8:d4:b6:dd:
5b:49:5e:54:d1:32:d8:f4:b1:e4:e6:ac:f2:d0:11:a6:b3:70:
91:24:8a:c6:01:09:e4:c6:24:34:08:1a:37:dc:9c:74:56:53:
c5:1c:3c:46:25:99:ea:cf:46:8f:e6:8d:92:04:df:e9:73:07:
16:6c:0f:cb:ef:21:4f:a3:45:2b:86:fd:f0:33:b2:e6:c3:07:
49:76:e1:63:8a:5a:cd:3d:7f:c2:d7:a9:a5:06:82:9a:78:ab:
90:3e:c2:60:08:fc:48:21:ef:a4:fd:94:8b:e9:31:a7:7e:a0:
8f:a2:6e:cc:10:fd:00:85:8b:56:68:c5:d7:7e:b0:ab:1a:eb:
5d:f9:8b:a8:e2:c1:cb:5c:30:fa:c5:a4:a6:0c:1b:00:48:fa:
86:f0:98:89:fd:03:22:85:8e:d0:e5:cb:6e:bf:4f:37:d3:b9:
04:8c:1b:38:0f:8a:1b:8c:67:e5:1c:7f:94:d0:10:fd:25:8c:
eb:b3:12:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:28 2023 by rpki-client on console-ams.rpki-client.org