Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3xLi7UO1qTbCwi6aG3KOEGoZBe0.cer
File: 3xLi7UO1qTbCwi6aG3KOEGoZBe0.cer (raw, json)
Hash identifier: FW8VmEOR7A8LD3F+Jwv+P63ps9ARlHQT8W+j/ABvOgA=
Subject key identifier: DF:12:E2:ED:43:B5:A9:36:C2:C2:2E:9A:1B:72:8E:10:6A:19:05:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A0253291B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/76104c-42cb-4670-88f2-c6f0c1942bdb/1/3xLi7UO1qTbCwi6aG3KOEGoZBe0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/76104c-42cb-4670-88f2-c6f0c1942bdb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 06:54:58 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.90.88.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 687818838454 (0xa0253291b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:54:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df12e2ed43b5a936c2c22e9a1b728e106a1905ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7d:a1:69:ba:20:ad:1c:80:b9:a6:e6:60:f8:
84:cf:17:95:70:22:a9:dd:d8:f6:e5:bd:03:ca:b1:
ad:24:06:eb:10:ee:f2:be:c8:84:8c:ab:20:6f:6a:
a9:08:c4:a4:98:86:17:be:5c:1e:02:cf:00:b1:c9:
83:98:81:c7:40:7f:34:2c:b7:97:ea:88:83:26:b8:
4e:76:80:07:1d:33:1c:10:98:dc:ab:e8:fe:f0:85:
89:48:6e:01:6b:94:db:0b:f0:e4:94:de:be:85:63:
fd:ba:1b:a2:c8:34:d2:28:dd:64:95:f4:0f:f2:8c:
57:e6:f9:8b:53:e1:6a:3f:d1:36:df:d5:1b:3f:2e:
32:97:95:a3:b4:98:d2:bd:b4:0a:4d:db:7d:10:76:
19:00:20:7c:8b:3b:7c:f2:f4:68:99:33:f9:6a:27:
51:ba:5f:a0:4c:59:4e:99:6d:65:8e:65:80:0e:ab:
4f:c3:6e:6a:38:7d:65:c8:14:44:90:44:9b:a0:87:
b7:1f:0a:d8:70:26:bf:17:78:b0:68:e7:e5:ac:61:
10:60:0a:5a:ac:97:51:46:de:59:81:0a:a8:71:d3:
45:78:47:51:a5:79:f1:2f:98:09:e7:a2:47:81:0f:
4c:0c:fd:69:7b:a8:48:bc:5b:c8:95:4f:32:2f:59:
a8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:12:E2:ED:43:B5:A9:36:C2:C2:2E:9A:1B:72:8E:10:6A:19:05:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76104c-42cb-4670-88f2-c6f0c1942bdb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76104c-42cb-4670-88f2-c6f0c1942bdb/1/3xLi7UO1qTbCwi6aG3KOEGoZBe0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.88.0/22
Signature Algorithm: sha256WithRSAEncryption
50:13:52:b5:47:0d:39:db:25:11:c1:51:d4:cb:f9:86:25:d9:
c3:f3:75:25:61:76:17:fe:80:49:3a:06:ab:a8:38:d3:8e:9a:
02:30:bd:1a:aa:99:35:ea:ed:2c:89:8b:62:9e:c3:19:0d:df:
d8:0e:de:5b:1a:97:5d:b4:91:ce:eb:a5:a7:fa:9c:55:ff:7c:
0c:b8:89:8a:b9:00:db:84:3b:b3:71:7b:fd:87:53:18:34:e7:
ad:65:4f:0d:01:5b:ac:67:bb:a0:22:76:e9:6d:84:31:9b:4b:
79:9a:54:41:39:14:37:eb:69:95:6f:02:83:ef:6c:5c:90:7a:
c2:0d:de:d7:54:15:a6:90:54:d1:ad:b7:1b:82:7d:60:62:1d:
9c:8f:69:b1:92:80:16:cb:d4:a5:05:1a:0d:17:54:ce:c4:f0:
58:01:61:e7:b8:cf:69:6d:ca:f4:a6:fa:e5:ab:61:13:bb:0c:
98:f5:ce:8d:50:6c:49:74:b9:73:a3:67:c7:67:1a:19:46:a7:
2e:fb:aa:e8:f1:7f:34:f5:83:9f:d5:2b:2c:6f:b9:4e:95:3a:
4b:6e:fe:db:e2:57:0e:25:37:ee:d2:64:95:67:85:ce:f1:50:
77:09:7a:6c:5f:7f:6d:9c:cd:0c:64:09:6c:e9:65:f8:f0:2f:
3e:75:a5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:44 2024 by rpki-client on console-fra.rpki-client.org