Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4O-WOR_FGck-IUYpmfv3ik1xVPE.cer
File: 4O-WOR_FGck-IUYpmfv3ik1xVPE.cer (raw, json)
Hash identifier: 3wB5J3nXAg+os5odqIjJ/557gP6FUywnblETJaFQUw0=
Subject key identifier: E0:EF:96:39:1F:C5:19:C9:3E:21:46:29:99:FB:F7:8A:4D:71:54:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 8240F3AE63
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/b93f99-dfb5-47a5-b6f1-d5053229433e/1/4O-WOR_FGck-IUYpmfv3ik1xVPE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/b93f99-dfb5-47a5-b6f1-d5053229433e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 06:02:01 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.14.240.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559435460195 (0x8240f3ae63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:02:01 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=e0ef96391fc519c93e21462999fbf78a4d7154f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:86:df:3b:95:d1:47:05:c4:5e:ad:f2:8d:9a:
bd:ce:9c:a3:90:e1:e6:ea:de:d6:c6:3d:0b:c4:3b:
3a:bd:67:cc:e2:af:10:58:db:c0:60:e5:19:25:b5:
5a:0f:19:cd:ff:f4:f1:6a:3f:e6:99:c6:2d:e5:a8:
a8:c2:07:73:21:1e:98:91:56:88:2e:f0:be:a0:65:
58:b4:f7:41:3b:4a:c2:5e:75:f0:86:85:9a:74:42:
b6:a4:11:31:83:ff:2a:09:89:24:1b:9c:a9:ee:32:
8b:2e:55:d1:13:e4:a6:2d:68:e7:75:48:bd:4e:9c:
f6:0b:45:1e:a1:87:d3:0f:b8:ca:4c:5a:ca:05:4f:
84:71:3e:99:3f:88:db:bc:ad:34:d0:bb:9c:a4:62:
dc:bf:c0:94:c4:1e:73:b8:5f:a9:3c:a4:ff:4c:78:
52:d5:06:c4:f2:d0:2c:ef:c3:7d:64:46:e7:4a:4a:
d3:04:86:ba:8b:80:e6:86:73:48:f4:a0:94:99:3b:
9b:b4:02:a3:be:50:1e:51:33:12:cb:e1:45:e5:3b:
f2:d2:0c:a1:b0:0d:33:6a:ec:9e:fe:90:56:0c:f4:
ce:3a:a6:8e:d2:04:98:8b:2e:e5:34:ae:75:6c:5e:
cd:e2:fb:ed:70:8d:62:2e:de:15:93:66:98:8d:cc:
6d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EF:96:39:1F:C5:19:C9:3E:21:46:29:99:FB:F7:8A:4D:71:54:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b93f99-dfb5-47a5-b6f1-d5053229433e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b93f99-dfb5-47a5-b6f1-d5053229433e/1/4O-WOR_FGck-IUYpmfv3ik1xVPE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.240.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:dc:eb:75:37:5d:8d:24:13:f6:a4:33:00:b8:fe:94:10:7d:
b5:cd:9d:24:d0:72:91:3b:d8:1c:c6:d3:43:b0:0d:2e:4e:cb:
e6:41:df:74:f2:1e:42:53:c9:cb:c9:6e:eb:e4:cd:25:a9:56:
9d:35:55:01:38:ed:f6:b9:ca:14:d1:1c:11:4e:eb:18:5c:8d:
5b:2e:c1:cd:38:ce:56:97:bd:f7:da:64:d8:d9:92:57:5a:41:
b1:7e:1f:e8:0b:9e:6b:93:8e:48:bd:7f:a6:08:22:f2:db:79:
99:57:16:da:6a:c4:c5:43:1b:dd:4a:d7:d9:00:6d:c0:ff:79:
81:64:99:83:54:bf:8c:7d:09:83:24:48:22:18:34:23:2f:08:
fe:bc:40:c0:48:34:f6:eb:3a:5b:be:a4:c9:fd:29:44:fb:9b:
18:6c:d5:9c:c3:7e:20:fc:cf:59:d9:da:d9:3b:62:58:5d:8e:
91:d2:ed:58:dc:66:0f:e7:3c:21:cd:f0:bc:13:91:5a:d6:e9:
d6:eb:6f:15:c6:26:61:88:7b:7b:75:89:63:ef:b6:c8:73:f4:
29:78:b7:85:85:41:ec:b3:6d:a7:1d:d6:06:bb:2e:4d:65:21:
99:fa:1b:bc:ee:e8:a4:50:cc:a1:ec:1c:83:59:5b:3f:3b:60:
ec:1f:8c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:33 2023 by rpki-client on console-fra.rpki-client.org