Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5y8GzEuHCbzANOIxn96eGuPnXaI.cer
File: 5y8GzEuHCbzANOIxn96eGuPnXaI.cer (raw, json)
Hash identifier: OLsRbxnE9ykBx/bK2dfb75fHaABRPmpBsMNVElGCBbs=
Subject key identifier: E7:2F:06:CC:4B:87:09:BC:C0:34:E2:31:9F:DE:9E:1A:E3:E7:5D:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7774F38361
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/c07079-84bb-4586-ba97-6caf35cf74d8/1/5y8GzEuHCbzANOIxn96eGuPnXaI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/c07079-84bb-4586-ba97-6caf35cf74d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 00:50:55 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 141.98.204.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513063224161 (0x7774f38361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:50:55 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=e72f06cc4b8709bcc034e2319fde9e1ae3e75da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a0:34:6a:2a:25:ff:23:20:34:b0:38:22:bb:
ed:86:09:92:f1:13:e5:65:09:9a:3f:5f:87:63:28:
ef:c3:77:5e:dc:13:64:74:c7:d8:e0:c3:9f:4c:f7:
f3:3c:d5:ff:6a:73:c5:f1:47:22:21:a9:fb:34:6a:
15:e1:a3:c8:eb:a9:4c:72:87:66:3d:70:e3:82:81:
ea:3e:24:8c:f0:12:1e:3e:1d:ef:8d:df:b5:e3:5a:
ac:3b:74:e3:65:76:76:5c:a1:8b:c3:29:ea:e0:c2:
1d:c8:56:21:37:fd:46:59:fa:73:d4:f2:36:1d:a1:
57:af:2a:fb:7f:4e:5e:a2:6c:70:99:7c:38:39:e2:
e4:65:3e:18:27:1f:47:72:6f:a3:9b:4f:ae:0e:32:
98:17:7d:43:09:00:88:22:43:52:e4:de:ee:d8:38:
13:6f:00:63:09:3d:c5:18:a0:c0:0c:fb:ba:e3:f0:
27:c5:09:5a:1a:d5:b9:23:59:e6:11:2e:ab:31:22:
b6:dc:94:4c:58:74:c2:e3:c4:b7:30:8c:51:ea:70:
cc:8c:4e:9a:cf:c9:e0:c4:df:06:cc:7c:a1:7c:35:
f5:67:37:21:1a:f9:9c:77:b2:19:63:dc:51:9e:70:
64:9a:7b:79:72:d7:63:64:12:5f:2b:e7:c4:d8:d1:
9d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2F:06:CC:4B:87:09:BC:C0:34:E2:31:9F:DE:9E:1A:E3:E7:5D:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c07079-84bb-4586-ba97-6caf35cf74d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c07079-84bb-4586-ba97-6caf35cf74d8/1/5y8GzEuHCbzANOIxn96eGuPnXaI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.204.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:a5:30:60:e7:c2:d8:5e:12:48:fe:03:42:ff:d3:1f:7b:ba:
7f:d1:ed:c3:85:6e:35:a0:6e:4c:26:86:83:42:e3:4f:c1:9a:
9a:49:de:fa:e3:b7:ec:54:b4:04:6f:4c:41:d6:c4:8b:3e:75:
7e:78:4b:3f:f4:38:85:6f:cb:5b:ef:47:11:d3:68:4f:2f:c9:
61:ec:18:24:06:21:6e:d9:de:ae:15:d1:93:00:ff:eb:ac:4e:
01:c9:c4:2a:10:4e:f6:d9:38:6f:32:a4:68:dd:9f:60:65:b8:
8a:4e:a2:58:2b:9c:f2:88:f3:07:23:82:4d:66:8c:5f:49:3d:
35:cf:95:c8:0f:9c:1d:f8:53:4f:02:07:b6:30:b3:b2:79:3d:
02:68:ab:1a:3f:30:58:6e:e1:49:38:06:4e:a4:fb:7e:28:9b:
33:b6:ce:4b:ba:ea:1a:49:02:e6:8e:c0:93:53:0c:1a:82:53:
c9:82:82:9d:4b:a7:d2:73:65:53:b3:db:c0:50:bc:33:31:e3:
f0:94:f2:33:0e:54:40:9f:29:ce:6d:ad:20:d6:8e:0b:9a:4e:
a5:4d:8a:d9:24:a4:14:36:88:1b:d3:21:3b:b7:1e:1d:7f:68:
3c:cc:ce:0d:41:5c:fd:e0:94:e5:3f:a7:6b:9c:dc:bc:ff:e4:
b5:55:84:ec
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:54 2023 by rpki-client on console-fra.rpki-client.org