Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3IH7jiV6_ZuGjCXjct7ZqkHLmYM.cer
File: 3IH7jiV6_ZuGjCXjct7ZqkHLmYM.cer (raw, json)
Hash identifier: ST7NeDm191GQATN0+ryegU3OFwllEQ2NYUw6gu15rtc=
Subject key identifier: DC:81:FB:8E:25:7A:FD:9B:86:8C:25:E3:72:DE:D9:AA:41:CB:99:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 75C1016363
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e82e8-ab1f-47d3-b079-ba2f586ad35e/1/3IH7jiV6_ZuGjCXjct7ZqkHLmYM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e82e8-ab1f-47d3-b079-ba2f586ad35e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 00:12:21 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.144.184.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 505749267299 (0x75c1016363)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:12:21 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=dc81fb8e257afd9b868c25e372ded9aa41cb9983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:00:d8:c0:a5:fe:a2:97:58:22:c0:78:15:
06:27:fb:8b:28:1d:73:a0:f0:d6:40:92:b6:f2:b2:
21:80:56:d7:00:eb:8e:a3:47:6f:0d:e2:a4:f7:12:
4a:ba:89:b3:06:9e:7a:43:8f:15:46:a9:57:3a:7b:
ad:29:ae:f4:e8:db:4f:4e:11:20:70:2e:7c:40:cf:
fb:b7:e4:a6:15:c5:de:eb:2f:ec:8c:ee:b3:27:78:
15:7d:cb:bd:63:67:48:0e:da:9f:bf:41:48:a3:de:
0e:bc:17:6d:57:0f:9a:3c:3a:3c:32:16:d2:e5:bd:
56:98:45:00:a6:09:a8:a2:27:17:93:ae:0b:d0:3a:
9b:06:c7:be:dd:f7:d1:a5:c0:bf:06:c0:00:b3:fb:
48:e4:f7:a4:73:be:f3:22:93:ba:74:b7:1e:01:48:
b9:c5:6e:cd:f4:3e:34:7f:a9:72:b1:50:b3:c2:1f:
6a:da:48:f8:a7:27:ce:1a:d3:88:65:3c:54:74:ac:
02:01:a7:5e:ca:55:a5:bb:58:d0:c3:3e:17:f3:8c:
99:d0:e2:f9:01:be:c0:20:b7:69:92:7c:89:51:a8:
99:63:76:8f:1a:68:9b:52:92:44:be:8c:7c:be:2d:
34:01:5a:c7:7c:28:ec:10:fa:16:a3:24:f3:cf:42:
4d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:81:FB:8E:25:7A:FD:9B:86:8C:25:E3:72:DE:D9:AA:41:CB:99:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e82e8-ab1f-47d3-b079-ba2f586ad35e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e82e8-ab1f-47d3-b079-ba2f586ad35e/1/3IH7jiV6_ZuGjCXjct7ZqkHLmYM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.184.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:bc:17:af:51:67:74:19:f5:81:d4:e4:8d:50:eb:43:42:c7:
3e:31:60:73:23:ff:6d:27:36:56:f2:99:2a:8a:d3:c1:2b:66:
4f:dd:14:8a:c8:20:84:1b:42:f7:39:3c:c3:89:82:21:1f:30:
2f:fc:42:50:ec:2e:f5:d2:38:57:63:44:1d:7f:6b:af:33:bd:
01:f5:a2:3f:6e:f9:04:fc:55:d7:d9:0c:68:ae:5e:a1:08:d8:
4a:28:04:c9:10:bb:3e:fe:c2:ba:e8:5c:a1:18:88:62:d2:a5:
ba:63:25:98:11:18:e6:16:22:25:fd:81:98:c3:9a:0d:d4:82:
9a:e1:68:9c:5a:20:af:71:78:c4:0f:bb:e2:18:2b:17:c7:68:
14:cf:8d:15:07:54:a8:b7:79:bf:17:7b:81:5b:0b:38:aa:12:
99:19:d4:d6:a7:93:59:84:7b:d3:d5:76:15:d4:3f:9f:c5:ff:
a9:6f:03:56:43:c1:04:3c:b6:8f:30:d0:f3:9b:90:9d:6a:74:
ab:9b:7a:45:b9:2e:eb:df:6a:b2:40:e0:e4:3e:3c:53:0b:2c:
16:d7:4d:5d:7c:ac:fa:8f:de:0e:2d:48:ea:64:0d:08:01:e5:
9b:d6:80:eb:82:b8:73:c7:76:45:87:ce:fe:23:0e:bc:03:f8:
08:30:b0:38
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:28 2023 by rpki-client on console-ams.rpki-client.org