Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76KJjhcgqLq-BJmZUkjchxNNSgY.cer
File: 76KJjhcgqLq-BJmZUkjchxNNSgY.cer (raw, json)
Hash identifier: F7UOH/MTqcZBLhrrcEXiQjaJqf/hMlbYUCWsqSaXxyg=
Subject key identifier: EF:A2:89:8E:17:20:A8:BA:BE:04:99:99:52:48:DC:87:13:4D:4A:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7C4BF5290A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/9e61ec-657b-413a-9a8e-e577bc52d493/1/76KJjhcgqLq-BJmZUkjchxNNSgY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/9e61ec-657b-413a-9a8e-e577bc52d493/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 02:58:18 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 5.180.52.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 533850302730 (0x7c4bf5290a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:58:18 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=efa2898e1720a8babe0499995248dc87134d4a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:90:c1:d5:99:fc:53:49:47:a1:d5:cd:f9:23:
1b:5d:99:69:40:b4:dc:89:48:88:1f:13:4e:f6:ee:
9c:67:3b:01:6e:b4:ef:65:90:79:83:4f:cc:e0:f3:
12:8c:9b:16:ce:8c:62:8c:89:8f:f0:ec:01:28:2d:
7a:eb:a9:27:35:26:63:24:c6:1c:54:4d:17:5a:36:
5f:38:99:37:d1:36:63:54:55:0a:aa:aa:bf:20:c7:
1d:ea:14:80:a4:4e:0b:42:d8:c3:de:31:02:38:2d:
d9:6e:81:7a:b5:42:7c:f3:b8:68:f3:6e:36:7d:92:
46:a7:87:27:e3:fd:2c:62:be:db:5e:a2:b3:4e:91:
2d:eb:ad:b8:2d:4c:0d:a4:2a:e2:6e:5d:6d:4f:88:
3c:e8:5b:28:aa:cf:3c:bb:ac:db:5e:d2:01:dc:fb:
ca:f1:8c:e7:f1:d2:2e:18:81:53:99:10:8e:3d:65:
de:01:62:5d:a0:34:bd:81:b6:34:76:ba:d8:8e:6a:
9b:bc:cc:20:d9:ab:af:bd:03:89:49:0d:a4:6e:46:
36:c1:70:d2:45:d3:6d:2c:f6:9f:32:d3:30:07:51:
10:84:67:af:fb:76:d3:d0:73:67:b6:a3:4d:72:85:
45:77:4e:3c:59:4f:63:f1:0a:ff:ee:41:56:b5:a7:
1b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A2:89:8E:17:20:A8:BA:BE:04:99:99:52:48:DC:87:13:4D:4A:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9e61ec-657b-413a-9a8e-e577bc52d493/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9e61ec-657b-413a-9a8e-e577bc52d493/1/76KJjhcgqLq-BJmZUkjchxNNSgY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.52.0/22
Signature Algorithm: sha256WithRSAEncryption
67:91:32:a5:83:fd:36:e9:98:f7:3a:38:bb:f8:34:3b:d1:5e:
e4:1d:fc:7f:20:2d:c8:b1:24:ad:fb:27:34:92:53:73:54:2e:
50:fc:0a:68:3e:b2:ac:cf:73:48:9b:ce:67:86:bb:52:27:d2:
e2:e5:a5:23:2c:9f:0d:9b:77:56:4e:eb:45:3d:72:62:a5:c3:
00:cb:b8:d8:65:6d:bb:9a:49:a5:57:1e:ae:b6:c1:23:fe:8c:
71:c3:4e:ad:40:3e:9f:78:08:fc:e1:6f:0f:19:dd:18:e6:8c:
f9:c6:5c:61:ac:9a:8f:25:0a:91:97:6c:cf:50:70:00:79:db:
f2:e6:93:d5:3d:6b:1e:d3:7f:b6:06:63:50:9e:84:dc:4a:c7:
ab:b9:66:a2:ad:64:c8:96:5e:7c:3a:ce:fe:ac:e3:f9:c2:5d:
a5:42:26:29:61:45:c7:a9:54:d5:2e:18:0d:cc:99:1a:f9:38:
fe:60:21:70:f4:cb:78:87:d2:44:49:3b:0e:52:5d:42:ab:da:
b9:db:1a:3b:62:ed:1a:4b:ec:e7:d8:0a:6e:58:33:28:8d:c3:
46:e2:3b:81:66:40:a1:de:7e:fa:a0:7f:7a:cd:57:e0:e0:e2:
4e:b2:46:3d:d3:82:3b:e7:4b:35:e4:1b:5e:8b:67:63:e7:3f:
cd:eb:c0:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:06 2023 by rpki-client on console-fra.rpki-client.org