Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72B-phPDg3HKnsIK8rHpgUoWUPs.cer
File: 72B-phPDg3HKnsIK8rHpgUoWUPs.cer (raw, json)
Hash identifier: vraUf6z41+QS5wG+IZUbwPWF2B0RKujXCxKVMIAZ1R0=
Subject key identifier: EF:60:7E:A6:13:C3:83:71:CA:9E:C2:0A:F2:B1:E9:81:4A:16:50:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 76D3BA36A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/4da7cd-f5cd-49a8-85e6-7c0bbfc95c83/1/72B-phPDg3HKnsIK8rHpgUoWUPs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/4da7cd-f5cd-49a8-85e6-7c0bbfc95c83/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 00:36:47 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 85.208.120.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510358337186 (0x76d3ba36a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:36:47 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=ef607ea613c38371ca9ec20af2b1e9814a1650fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3c:da:16:e8:19:65:4f:f5:2b:b5:bc:1a:b8:
74:58:5a:c8:1e:d5:a6:d0:9b:66:af:40:e4:d7:cd:
42:f9:81:7e:1b:b6:5c:5d:10:f4:d5:d9:e1:1f:6e:
87:b1:f1:d8:cf:9e:58:ac:6d:cc:fd:d5:2c:64:e1:
90:0c:d3:56:96:5b:9d:67:d5:ba:c5:1e:10:5c:c1:
11:81:49:a4:e5:4f:c0:ea:01:07:55:05:f4:ee:de:
5f:a5:d7:23:26:7a:2a:f5:d3:54:bb:f5:d8:85:bb:
d2:f4:db:b1:48:04:37:d3:e7:3d:53:0c:6e:8a:f3:
09:e6:f0:12:2c:ec:8b:d9:a8:30:d5:bc:95:cb:7a:
00:9d:f4:9b:a5:0c:51:a5:9d:48:06:08:d1:b1:00:
2e:b3:cf:1b:ae:d2:92:4d:b2:5d:01:1c:04:38:41:
30:c2:4a:b5:9b:8f:14:06:c0:68:de:e2:ab:dd:e3:
aa:35:ab:24:3e:55:8f:d1:cb:ac:a6:02:0a:03:fb:
ae:76:05:46:ea:77:ba:f5:3f:8b:96:98:ef:f7:a4:
f8:5b:40:54:f7:14:4a:76:74:17:19:cf:97:2c:bd:
15:b6:ea:56:30:2a:9b:21:96:fa:6c:de:18:d3:55:
44:d0:a0:e3:64:98:6d:b1:3f:7d:1f:2a:e6:25:23:
8d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:60:7E:A6:13:C3:83:71:CA:9E:C2:0A:F2:B1:E9:81:4A:16:50:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4da7cd-f5cd-49a8-85e6-7c0bbfc95c83/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4da7cd-f5cd-49a8-85e6-7c0bbfc95c83/1/72B-phPDg3HKnsIK8rHpgUoWUPs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.120.0/22
Signature Algorithm: sha256WithRSAEncryption
26:e7:fb:ed:cc:2b:3e:95:7a:6f:65:85:8e:b6:1a:67:9e:86:
4e:f0:fa:7d:bb:61:fe:cc:3d:be:16:95:ac:e9:ff:03:f8:ab:
68:ce:c9:07:b5:e5:84:0f:28:9b:ae:62:1e:31:02:74:e4:70:
6e:a3:60:c5:ae:74:78:2f:6a:b0:4c:ef:e5:88:5b:98:3c:ba:
8c:5b:cd:3c:22:77:9c:f9:87:98:43:d4:05:4a:a7:d1:7e:78:
ed:e7:6c:06:ef:4f:e6:e1:ce:93:74:a2:0b:33:3e:e7:ca:b9:
47:ec:45:a1:ee:71:8e:65:8d:d6:43:d6:aa:f0:7b:36:df:db:
dc:60:b4:c5:c1:37:58:01:95:66:52:ae:2f:7f:29:1d:4e:41:
03:65:b1:51:08:89:7c:b7:2f:21:9b:22:2c:2b:39:00:9e:89:
ee:8d:72:ab:4a:2c:ec:ff:9c:5d:4c:35:01:52:9b:a6:7e:13:
aa:92:e6:c4:ef:26:6f:eb:59:40:4f:7e:40:69:86:b5:88:71:
02:c6:38:34:0e:0f:5d:e6:23:e5:ba:7f:f2:cf:56:40:d8:4c:
f3:f1:1e:e1:8c:9b:39:55:37:d2:e4:45:40:57:4e:e8:6a:7a:
12:94:ab:28:13:90:a4:a8:1a:c0:7f:a3:b0:fe:1f:a3:20:9d:
7c:8a:ba:4d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:55 2023 by rpki-client on console-fra.rpki-client.org