Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4YlV0zJTWGOS_oCorezuXaksdho.cer
File: 4YlV0zJTWGOS_oCorezuXaksdho.cer (raw, json)
Hash identifier: gI2CGrbgHAkAjiP+0bzMea5CRoPRlER13oggiilWOxU=
Subject key identifier: E1:89:55:D3:32:53:58:63:92:FE:80:A8:AD:EC:EE:5D:A9:2C:76:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 81D45B7A9A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/2c5661-1aea-4d3d-b3c4-0c6af4f923a8/1/4YlV0zJTWGOS_oCorezuXaksdho.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/2c5661-1aea-4d3d-b3c4-0c6af4f923a8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 05:42:42 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.83.144.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 557613546138 (0x81d45b7a9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:42:42 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=e18955d33253586392fe80a8adecee5da92c761a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b4:4d:d2:45:eb:e6:5a:44:98:fc:1b:11:49:
1a:b0:99:ba:eb:d1:81:cb:1b:de:70:62:bb:57:ca:
c5:6f:ae:ea:2a:6f:81:f6:8c:2b:fe:15:67:1c:90:
0b:85:17:61:ee:b8:a4:18:35:17:88:8e:d6:20:e0:
ec:88:57:6f:92:bc:15:4b:77:c6:b9:bf:bd:07:fd:
87:c6:e3:a6:52:85:59:47:68:5c:4e:7c:18:bb:f2:
a7:a7:fb:d4:19:e7:a1:17:ae:46:40:b2:f4:99:46:
d7:14:0c:f3:46:30:2e:c1:57:78:a8:65:f6:71:2b:
70:b1:0a:51:8b:df:d7:b2:12:cd:51:c4:62:5b:27:
7c:4e:f7:96:bb:be:53:37:9a:60:f7:e9:d5:58:d4:
a7:18:af:c5:6e:38:1e:d8:ab:d7:66:dc:cd:53:5d:
2d:9d:c0:2d:1f:dd:57:90:c2:34:c5:f4:56:a1:a9:
bc:47:8f:4a:1e:d5:3d:64:5f:b4:b2:35:00:e4:fe:
4a:a8:12:75:84:71:80:83:d6:6a:f9:45:05:53:6b:
5b:3d:c9:1b:91:86:f8:bf:26:12:0c:cb:f7:0c:bb:
14:bb:80:ef:3f:4e:99:d1:60:6c:1c:4f:2d:68:2b:
4f:60:d8:61:3d:eb:9b:b6:a4:40:cd:19:f5:82:5b:
13:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:89:55:D3:32:53:58:63:92:FE:80:A8:AD:EC:EE:5D:A9:2C:76:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2c5661-1aea-4d3d-b3c4-0c6af4f923a8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2c5661-1aea-4d3d-b3c4-0c6af4f923a8/1/4YlV0zJTWGOS_oCorezuXaksdho.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.144.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:1d:d5:39:92:3d:ed:03:58:b4:36:f5:83:4f:d2:66:8d:a0:
46:ee:34:f5:d9:68:48:36:e9:77:ac:95:53:7a:37:58:80:7f:
d9:6c:0b:89:f7:1e:62:4c:8a:69:a7:db:5a:e9:eb:e1:0e:e5:
dc:e3:2c:55:5c:11:14:05:6c:2b:16:3c:a1:79:a1:13:d3:95:
58:31:13:08:35:61:d9:fc:83:f7:dd:a2:cf:88:c7:7c:54:03:
95:f7:c0:fb:98:32:55:43:bb:97:6d:1a:50:48:39:ae:49:02:
d8:f3:83:14:0b:63:da:4b:5f:4e:d6:b0:2c:d7:c4:8d:52:e3:
2c:23:7d:bb:40:40:df:8d:57:81:d0:fc:e1:1b:c5:83:d5:88:
28:bd:58:cf:58:68:f8:e5:5d:8d:89:8c:8d:b9:20:21:7e:cf:
2d:cd:bf:55:fa:d1:38:c2:e1:b1:c1:ff:e1:c0:13:5a:d2:3d:
a2:96:80:ac:26:de:fb:bd:d5:cb:dd:3c:d4:75:61:65:b8:76:
60:1e:a0:2c:74:18:b4:f8:37:c7:e1:1b:71:47:66:e4:6b:5f:
cf:bf:40:30:56:e9:c2:9a:cc:af:60:ff:6c:7e:43:a2:38:52:
c7:55:49:f4:0e:66:82:bb:5b:25:0a:a8:e2:93:13:6b:ab:e4:
66:05:fd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:34 2023 by rpki-client on console-fra.rpki-client.org