Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6AUn8if-WuL1fompRgzCaikuF3o.cer
File: 6AUn8if-WuL1fompRgzCaikuF3o.cer (raw, json)
Hash identifier: mWXzKIZuHnnxn8ZtwhV7zeDpa/2xWOf/goXI60geVk4=
Subject key identifier: E8:05:27:F2:27:FE:5A:E2:F5:7E:89:A9:46:0C:C2:6A:29:2E:17:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 755EBCE031
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/f150ff-3314-4541-95bd-9e6030b5f54e/1/6AUn8if-WuL1fompRgzCaikuF3o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/f150ff-3314-4541-95bd-9e6030b5f54e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 00:04:12 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.135.220.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504100610097 (0x755ebce031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:04:12 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=e80527f227fe5ae2f57e89a9460cc26a292e177a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:34:ae:e7:75:42:d3:8e:84:58:59:b5:fd:e8:
fe:72:98:7f:68:0a:bb:ae:20:ba:cf:a5:f5:7c:73:
df:93:0a:53:d8:96:f2:ba:f5:3f:eb:4d:dd:5f:97:
00:4a:00:9d:09:5e:20:a4:db:5d:72:ab:f9:1c:83:
1f:40:1b:70:89:9d:f4:80:57:90:c6:34:f6:16:f1:
0b:08:8c:5a:f7:48:5d:96:b4:41:6d:04:b4:d7:61:
0c:7b:d9:1f:b3:9f:41:bd:55:0e:1d:ce:b5:7c:32:
11:75:16:e1:4a:aa:82:3f:69:98:8f:b2:c8:59:02:
0a:3f:e9:ae:25:7b:c4:c8:b6:22:fa:f0:d5:fb:51:
c7:c7:9e:82:31:34:e8:49:f5:fc:eb:65:da:85:3a:
49:ce:b7:b5:ba:db:6f:03:ff:47:1c:11:2e:a2:a1:
4a:2f:a9:b0:19:6d:28:30:d8:36:c9:3e:8a:fe:cb:
d8:c4:ea:78:71:b6:53:e0:d6:16:e8:9a:95:a6:5b:
62:4a:64:cc:47:c2:52:82:47:62:22:b3:71:56:bf:
58:2c:3b:64:22:03:12:ea:94:0e:fc:ca:63:c9:5a:
21:6c:7a:7c:99:53:9a:c8:41:28:ca:86:e7:0a:98:
01:d8:15:66:d5:f7:92:ae:f4:7c:80:5a:3f:aa:33:
05:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:05:27:F2:27:FE:5A:E2:F5:7E:89:A9:46:0C:C2:6A:29:2E:17:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f150ff-3314-4541-95bd-9e6030b5f54e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f150ff-3314-4541-95bd-9e6030b5f54e/1/6AUn8if-WuL1fompRgzCaikuF3o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.220.0/22
Signature Algorithm: sha256WithRSAEncryption
91:cb:e0:45:70:e2:50:78:be:9e:24:3a:13:d3:b7:ef:f1:06:
f5:96:58:6c:56:13:b9:e9:e0:ca:b1:97:06:2b:bc:e2:9e:89:
53:14:ca:ef:2e:b4:8e:46:56:e7:0b:da:af:6a:3b:db:ee:fc:
b4:ec:92:c8:40:48:04:2f:c3:ed:61:cd:8e:63:9d:61:89:d9:
3f:27:06:35:f1:4f:30:f3:5b:9c:3d:bf:73:5a:b9:88:dc:12:
47:d7:65:1d:45:65:e7:f1:a2:c3:33:fe:46:ec:7d:b3:12:0c:
75:dc:c6:5f:53:9e:ab:dd:d5:57:1a:90:50:db:c5:f3:3d:6f:
0a:a6:8d:24:24:c4:af:ed:e4:01:09:cd:08:de:85:24:8d:ab:
a7:a4:ba:cb:a8:d6:67:2a:dd:52:cf:ac:74:bc:1b:96:7c:e0:
85:88:b9:3d:2f:3e:63:2d:9f:1f:0f:9b:b4:29:e4:a7:c8:18:
4f:0d:c0:7b:b9:c6:af:52:4a:5e:b6:11:f8:a1:7e:70:f5:65:
63:f0:58:30:d8:31:b0:4f:46:d7:c1:53:55:51:a5:84:b4:f3:
f1:68:fa:98:8a:bf:e0:b1:55:b6:27:bb:15:cf:41:d9:c3:5a:
62:68:1a:5c:74:32:a2:f6:1a:ff:5d:70:c6:33:e9:78:af:a5:
de:6a:fb:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:23 2023 by rpki-client on console-fra.rpki-client.org