Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f-ltEyYkvy4Ut5FHjn4x3HOdh4.cer
File: 3f-ltEyYkvy4Ut5FHjn4x3HOdh4.cer (raw, json)
Hash identifier: g/EJXmJX4/r8CULgi5058CstUV5r7Wy3omzHQFSrCEg=
Subject key identifier: DD:FF:A5:B4:4C:98:92:FC:B8:52:DE:45:1E:39:F8:C7:71:CE:76:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 84519C1A73
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/7a9970-789d-4106-914b-97d851d3c6ee/1/3f-ltEyYkvy4Ut5FHjn4x3HOdh4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/7a9970-789d-4106-914b-97d851d3c6ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 07:44:42 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.95.212.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568304867955 (0x84519c1a73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:44:42 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=ddffa5b44c9892fcb852de451e39f8c771ce761e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:73:ba:12:98:72:65:65:e8:86:ea:4b:ff:2d:
1c:77:15:61:29:32:08:31:e5:4b:6d:a3:a0:92:72:
f4:a7:5d:ff:dd:83:ae:12:e3:69:75:05:5c:bc:b6:
4c:3f:bf:ea:d3:8e:e4:7e:91:eb:b3:12:8d:9c:68:
f4:34:e1:60:8a:85:ae:24:c6:c5:75:80:41:ab:e3:
1e:16:b1:34:bb:9c:55:f6:84:e1:c3:13:77:8e:d3:
03:67:eb:93:51:cc:8a:31:db:f4:00:7d:03:db:90:
28:90:3b:7a:5a:b4:b7:da:e5:ae:97:49:51:1e:0f:
91:cf:48:42:ea:b8:16:df:36:8d:22:44:de:d0:2a:
ff:df:4f:7b:20:14:66:3f:e6:c2:54:52:49:6b:d3:
46:05:a0:74:5c:af:3b:d9:e0:6f:f9:43:cc:a5:c4:
ba:e3:1b:d9:97:26:b8:bf:12:a6:3c:e8:22:c5:f8:
c5:e5:ad:ba:b9:7f:a9:0a:36:73:61:4b:92:e1:0c:
7e:75:9c:b7:1a:11:95:83:cc:c3:13:ab:82:0a:80:
61:c9:14:04:bb:4d:13:3f:1e:6b:9a:3f:60:42:c1:
41:2b:2a:3d:6c:12:7f:42:f3:52:02:2e:2f:3d:98:
40:54:ae:57:22:f3:ba:66:1d:af:f5:e6:d1:14:b5:
cf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FF:A5:B4:4C:98:92:FC:B8:52:DE:45:1E:39:F8:C7:71:CE:76:1E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7a9970-789d-4106-914b-97d851d3c6ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7a9970-789d-4106-914b-97d851d3c6ee/1/3f-ltEyYkvy4Ut5FHjn4x3HOdh4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.212.0/22
Signature Algorithm: sha256WithRSAEncryption
96:4a:ad:7e:2f:b8:2e:9f:4a:99:79:c4:2b:d2:ee:ec:9c:6a:
37:7f:d2:9d:bc:78:63:15:cd:8c:f3:92:91:8e:7c:f8:c4:8e:
ff:be:df:d5:a7:65:ef:c1:ee:37:37:a0:3f:dc:61:6e:08:b6:
ce:7a:e2:1f:78:9a:b3:00:9d:99:37:70:4b:c5:fb:ab:56:1b:
85:34:5c:64:78:fc:1a:4a:a7:30:31:70:d6:a5:98:24:55:27:
dd:c7:75:83:9f:20:da:0a:93:83:35:07:8e:67:a4:7c:e1:f7:
8f:33:ca:65:88:2a:ac:ef:a1:d4:cc:17:a8:33:5f:55:0a:6c:
d3:1d:53:81:4d:18:8a:c1:67:6b:4d:01:0e:f7:6f:75:82:b8:
b7:6d:5a:8b:b2:7e:7f:89:55:85:32:ed:ec:3e:93:15:c7:ed:
f3:8e:9a:ca:cc:e7:67:99:a4:d5:fc:8f:c6:8e:19:c4:a7:00:
3b:ff:ac:9a:2b:35:34:85:a9:50:e0:a6:6e:e8:7d:9e:14:0b:
e6:8e:95:5b:7a:33:24:50:d2:ce:6f:ef:ae:4f:26:66:da:1e:
e7:95:ae:d9:9f:43:ab:64:d3:ba:af:7c:b9:b5:ab:0f:f7:a2:
68:e5:03:5b:f5:4b:63:7e:05:b1:41:06:8f:a7:52:6d:0d:77:
64:df:03:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:58 2023 by rpki-client on console-fra.rpki-client.org