Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6Zt07EQayEgZbAXMzlwk4Q65TXc.cer
File: 6Zt07EQayEgZbAXMzlwk4Q65TXc.cer (raw, json)
Hash identifier: Z1ko9x0Sx+EER3PPxpu+DnqBQeOLLolQcOkD97gfA8o=
Subject key identifier: E9:9B:74:EC:44:1A:C8:48:19:6C:05:CC:CE:5C:24:E1:0E:B9:4D:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7A79C28CF0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/844fec-71a4-4cac-b719-303a4d367d41/1/6Zt07EQayEgZbAXMzlwk4Q65TXc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/844fec-71a4-4cac-b719-303a4d367d41/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 02:15:32 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.129.12.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 526028803312 (0x7a79c28cf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:15:32 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=e99b74ec441ac848196c05ccce5c24e10eb94d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9b:8a:16:a1:8c:89:1f:d3:eb:c0:a6:03:8e:
ab:7b:4b:36:75:a3:06:5a:15:bd:e1:d9:bb:c1:1f:
63:92:aa:46:7a:54:a5:c9:20:f8:2a:a8:88:17:2b:
4a:9e:3b:73:5e:41:e6:4c:07:99:a5:53:5f:8e:30:
ab:e5:38:ee:b2:21:8a:ed:86:1a:28:d2:07:20:c1:
8c:cf:cb:45:4a:18:3d:cc:b1:38:cb:e2:f2:06:81:
35:42:8f:a7:79:09:b5:89:74:d7:6a:5c:d8:50:78:
24:4e:6d:ee:94:b5:e5:ee:df:4d:08:50:91:43:30:
f1:77:22:f0:8e:6a:f7:df:70:e8:cb:92:07:c0:41:
86:9b:5b:43:20:c9:97:b2:e8:f0:bb:87:4c:8d:ac:
c6:c4:96:f3:1b:cf:46:fa:b5:f1:84:9f:a2:a1:7d:
06:80:3a:70:bb:8c:0c:8c:b2:18:54:7b:b7:a7:8b:
76:c4:56:7f:22:15:bf:bb:5d:0a:7b:85:9b:49:7d:
d5:63:5e:7d:c5:34:ff:42:11:9c:22:b8:c5:86:08:
5f:ed:74:8c:3c:cd:57:0b:40:d4:f8:fb:47:5d:48:
4b:1e:58:d1:70:8b:a7:81:d4:32:24:89:6b:bc:a4:
d5:37:c3:e7:02:c2:f2:1d:b9:b8:a5:9e:0f:17:64:
6c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9B:74:EC:44:1A:C8:48:19:6C:05:CC:CE:5C:24:E1:0E:B9:4D:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/844fec-71a4-4cac-b719-303a4d367d41/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/844fec-71a4-4cac-b719-303a4d367d41/1/6Zt07EQayEgZbAXMzlwk4Q65TXc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.12.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:5b:37:98:f6:8d:88:64:2d:70:9a:27:51:a0:e5:e8:44:5f:
db:9d:3c:eb:da:1e:d3:81:60:75:d6:b2:e0:32:cb:9b:5e:92:
77:75:1d:67:c4:98:ae:bc:4c:13:f9:a7:e8:ac:93:95:95:2a:
04:43:e8:54:c2:1c:4f:16:85:fc:9e:ec:30:0d:e7:5c:9f:3a:
85:3e:28:e1:2a:fa:f8:c5:fe:64:ce:5c:ed:a1:ea:98:e1:b6:
3d:45:42:65:d3:81:01:66:82:5f:dc:4d:7f:f3:b4:b6:28:f2:
72:2c:26:42:31:9c:f6:84:21:73:8a:7a:4c:f2:a9:90:5e:e5:
12:df:25:65:1c:53:52:3a:bd:0d:7d:a1:5d:69:7f:62:e1:b1:
03:8e:44:9c:0f:ab:63:53:29:32:12:f6:8c:f2:76:08:3c:d7:
12:f6:b1:18:57:63:0c:ec:e0:21:74:df:c7:ef:95:e4:f1:e6:
5b:29:2d:4e:5f:1f:80:ec:58:ab:d8:25:28:6e:c6:02:f2:ae:
31:c1:6f:7b:1b:1a:81:20:4e:b0:7d:85:ca:92:0c:2f:68:6b:
f1:d0:dd:09:88:48:8b:06:5e:e1:3e:f4:03:4a:a1:02:ed:6e:
8f:7f:d3:28:62:c2:27:a0:a5:cc:74:4b:b4:59:13:ca:98:5c:
99:01:1e:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:24 2023 by rpki-client on console-fra.rpki-client.org