Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3Vou2p_Un27ogKuAYVfy4ZYs8n4.cer
File: 3Vou2p_Un27ogKuAYVfy4ZYs8n4.cer (raw, json)
Hash identifier: BIgwMxYa9cVEWrYZRTWxg4gCBmCIdgq2bpAgok0QPMU=
Subject key identifier: DD:5A:2E:DA:9F:D4:9F:6E:E8:80:AB:80:61:57:F2:E1:96:2C:F2:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 589F644EDF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/19e68e-669e-4560-990a-7eedd0e187ad/1/3Vou2p_Un27ogKuAYVfy4ZYs8n4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/19e68e-669e-4560-990a-7eedd0e187ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 24 Feb 2020 14:40:17 +0000
Certificate not after: Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources: IP: 78.40.64.0/21
IP: 89.207.112.0/21
IP: 92.43.8.0/21
IP: 185.151.232.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380631273183 (0x589f644edf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 24 14:40:17 2020 GMT
Not After : Jul 1 00:00:00 2021 GMT
Subject: CN=dd5a2eda9fd49f6ee880ab806157f2e1962cf27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:31:1e:54:bf:5b:89:ff:0c:10:78:b5:b7:5b:
61:35:9c:ce:19:a1:ff:6b:cf:72:d6:53:2c:3e:2f:
5b:d6:11:8c:dc:06:1f:53:31:84:6a:a9:3c:fb:5a:
8e:f1:c0:d8:3c:5c:5b:8e:43:69:a3:15:c1:94:1c:
20:ea:c0:15:d3:72:14:20:5c:37:c2:7b:d8:9e:30:
b3:9a:6e:33:d6:94:e7:07:77:07:a8:28:93:91:61:
a4:ca:3b:d0:ed:60:5e:34:51:79:47:66:05:7a:ac:
13:c8:8a:01:e1:5b:90:35:43:62:07:e1:fa:23:45:
5d:05:26:c0:50:38:e7:30:dd:ec:dc:8a:d9:b1:53:
80:71:33:ce:c0:3f:50:fb:25:b9:47:16:92:74:18:
7e:bb:fb:1d:dc:07:a6:6e:56:e0:2d:91:d4:34:49:
20:70:1c:05:e7:de:2a:f3:98:85:13:41:5d:d5:a8:
ba:17:93:d9:80:06:99:e4:49:a5:d7:87:c6:f6:c9:
d6:09:1e:83:a5:bc:f8:de:69:9e:c9:97:83:e9:24:
40:39:87:da:81:9d:55:5b:59:03:e4:9b:72:fa:54:
e0:18:f2:f8:b0:25:ba:0a:1f:4b:5e:17:63:65:fd:
02:fe:73:1d:be:5f:85:86:79:fc:03:83:3e:65:19:
9a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5A:2E:DA:9F:D4:9F:6E:E8:80:AB:80:61:57:F2:E1:96:2C:F2:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/19e68e-669e-4560-990a-7eedd0e187ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/19e68e-669e-4560-990a-7eedd0e187ad/1/3Vou2p_Un27ogKuAYVfy4ZYs8n4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.64.0/21
89.207.112.0/21
92.43.8.0/21
185.151.232.0/22
Signature Algorithm: sha256WithRSAEncryption
14:95:61:58:d6:a0:05:24:f6:be:9c:d5:74:2a:54:8a:53:44:
7a:e7:e7:36:04:0f:ad:1f:ac:07:db:3d:45:1b:dd:f8:9b:0d:
49:45:52:bf:55:db:08:b2:71:b3:78:6c:ae:84:f2:d5:fc:b6:
34:26:14:1a:e9:25:2e:80:17:2b:e7:c0:b2:3f:d3:85:1b:5e:
fd:87:be:a9:93:ef:5d:1e:55:b8:4d:d9:27:c4:cf:70:37:40:
34:80:c6:14:f9:5f:c7:86:ef:aa:e1:73:79:13:14:c2:a9:0f:
23:b6:53:4a:4f:f5:c6:aa:0f:4f:94:25:42:37:55:0b:95:90:
bc:0b:44:b2:68:da:63:62:78:8a:f5:44:fb:62:07:0d:f7:35:
73:5c:8f:7c:b7:65:50:68:b2:8a:e8:a3:43:0a:5b:13:c4:f4:
10:7a:4f:b9:de:83:6e:34:a3:1e:99:c2:a1:f6:ce:55:18:a9:
9f:8d:e2:a9:95:31:60:5f:94:30:f6:2a:49:b2:62:40:38:2d:
1a:5d:e3:eb:61:ad:31:4f:4c:8e:a5:30:fe:c6:78:cb:75:83:
96:32:13:a3:09:98:cc:c6:cf:20:79:0e:d6:22:14:cf:41:9e:
4f:c0:8f:f1:da:3a:58:4e:88:05:1c:1a:e1:4d:df:32:a0:1c:
04:f5:d9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:46 2023 by rpki-client on console-fra.rpki-client.org