Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43Xwf0wYgCb9zq8Rzpi4HIzQnDo.cer
File: 43Xwf0wYgCb9zq8Rzpi4HIzQnDo.cer (raw, json)
Hash identifier: 8MiI7aS2PAX7ttULLL655IsxM66udLG3+c4cS9fmQMw=
Subject key identifier: E3:75:F0:7F:4C:18:80:26:FD:CE:AF:11:CE:98:B8:1C:8C:D0:9C:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7034A3A8DD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb432a-0c54-4989-8228-566cc042e172/1/43Xwf0wYgCb9zq8Rzpi4HIzQnDo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb432a-0c54-4989-8228-566cc042e172/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 08 Oct 2020 15:23:30 +0000
Certificate not after: Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources: IP: 212.107.0.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481919477981 (0x7034a3a8dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 8 15:23:30 2020 GMT
Not After : Jul 1 00:00:00 2021 GMT
Subject: CN=e375f07f4c188026fdceaf11ce98b81c8cd09c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2f:71:4e:64:b9:6a:2e:2c:31:5b:31:c9:ea:
92:5b:ef:39:59:65:93:be:d4:49:61:f6:67:c5:5c:
a0:26:ea:56:10:1b:f7:87:fd:93:0c:33:81:f2:9a:
2c:bb:5f:ab:a4:d1:a3:90:18:df:f1:b1:5a:9f:9b:
e8:34:db:09:7a:f5:35:ba:f4:74:96:38:1a:ad:b7:
37:99:5a:58:3a:db:9e:9a:4c:1d:6f:04:7c:cd:09:
4b:0b:49:fc:c6:b6:70:3d:4b:e2:07:57:ab:87:23:
f6:7e:6d:3d:8f:e8:0d:20:2c:f6:d8:9c:f6:d0:9b:
46:23:54:dc:71:5b:d8:9b:94:22:bb:82:fd:fe:f8:
40:93:6b:93:6e:76:fd:db:25:51:a0:c1:4f:08:12:
5a:16:7f:10:f2:f6:36:89:8b:a0:19:d4:9c:27:ec:
a0:26:62:e1:83:53:e8:a5:d3:1f:06:48:35:73:c2:
23:f2:5e:a9:f2:49:23:c9:01:3b:59:cb:6e:65:43:
c7:dc:f3:ca:d8:c7:00:79:6e:4b:38:a5:35:a3:8f:
05:bf:7f:3b:6e:c8:1a:0c:4a:a6:65:83:4b:57:a1:
10:62:90:65:23:54:45:3c:cc:a2:6d:e8:33:88:05:
69:fe:82:77:50:38:08:37:91:86:cb:16:5b:37:60:
a6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:75:F0:7F:4C:18:80:26:FD:CE:AF:11:CE:98:B8:1C:8C:D0:9C:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb432a-0c54-4989-8228-566cc042e172/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb432a-0c54-4989-8228-566cc042e172/1/43Xwf0wYgCb9zq8Rzpi4HIzQnDo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.107.0.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:14:99:b9:2d:35:49:f3:02:02:33:b9:35:5e:47:0d:99:c6:
7d:c6:24:a2:ea:73:b8:74:41:fb:d4:39:5e:54:18:23:28:58:
85:63:19:17:fa:54:ab:28:90:43:fd:58:52:9d:1b:fc:d7:06:
7b:36:ff:bb:55:b8:6a:79:29:1d:33:c2:8f:bd:34:d5:3d:16:
4d:54:97:f9:5e:8c:cc:71:49:c6:3c:4a:93:5b:df:ee:57:fa:
88:b7:ad:a9:24:6a:ca:d0:3a:04:da:3f:e1:d0:b0:56:b3:53:
a2:4c:06:f3:18:23:51:c7:a9:1b:cd:b2:7a:7b:e4:96:0d:fc:
74:24:61:16:5e:b8:24:5b:18:f2:a5:5b:06:ea:4c:65:51:68:
e6:38:bb:26:f3:fc:cd:12:cc:9b:de:5f:5f:8a:9a:90:b8:4d:
41:2e:63:b6:64:ed:c2:74:6b:48:0c:f3:e1:8e:54:3f:23:87:
c3:c7:b4:eb:26:e6:9b:99:dd:36:87:61:c4:2e:c8:fe:ac:65:
85:b3:6c:34:4b:50:0a:95:ce:64:a3:29:4f:1d:9d:56:33:20:
90:60:c9:16:f0:da:ec:2d:76:6a:dd:ad:45:0e:84:21:16:8b:
98:99:cc:7f:3e:fd:bb:95:88:d0:c5:28:09:22:66:64:92:8b:
6b:26:a7:a4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:13 2023 by rpki-client on console-fra.rpki-client.org