Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7C8CcPQUBNsfAHgw-_5csEJk2W4.cer
File: 7C8CcPQUBNsfAHgw-_5csEJk2W4.cer (raw, json)
Hash identifier: oOTfbXPdtC1VwX8J1Y/WBPxr+gbSRhjiEywoS/AnVx0=
Subject key identifier: EC:2F:02:70:F4:14:04:DB:1F:00:78:30:FB:FE:5C:B0:42:64:D9:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A7FAA8DBA9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/e7600d-6189-46fe-b0f5-e8d5f7cbe7af/1/7C8CcPQUBNsfAHgw-_5csEJk2W4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/e7600d-6189-46fe-b0f5-e8d5f7cbe7af/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:07:03 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.200.72.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 721464908713 (0xa7faa8dba9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:07:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec2f0270f41404db1f007830fbfe5cb04264d96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:04:54:78:3f:94:8e:20:05:86:f3:52:43:a0:
c9:da:6d:73:9c:b2:dc:20:c0:3e:89:f0:78:92:2d:
68:0b:91:9a:df:f1:cf:a6:63:94:31:9b:8f:d7:f9:
57:a5:f2:d3:89:b9:61:5f:85:28:3b:6f:10:ff:ab:
ea:8a:87:04:fd:04:d0:5f:3c:e9:a6:e0:9c:18:fc:
c0:f3:64:15:7a:72:c2:8a:a3:da:e3:d8:cf:6b:81:
d0:96:c2:15:1f:be:b0:73:fc:29:34:5e:32:f8:8d:
a4:68:c0:e7:a1:bc:d8:5e:19:cf:00:62:29:dd:a8:
61:25:fb:4f:e6:3c:d3:ef:67:13:07:bd:cd:7d:8c:
de:1d:1f:61:6b:e4:a2:1d:4a:4c:f6:c0:82:a6:85:
54:98:2c:63:19:a4:14:61:0e:57:5b:d4:d6:7f:f3:
31:c0:59:9f:39:e1:6d:1d:4e:a7:41:5d:4a:1a:6d:
d3:91:97:a6:b1:25:b1:ac:64:82:cf:a7:bb:06:84:
23:19:ff:b8:a8:1c:3d:8a:56:05:72:3c:7d:ea:19:
03:8c:4c:65:74:d5:ed:e9:51:c2:83:4e:65:ff:d7:
dd:f2:e7:36:e2:98:75:5d:d0:e6:93:a3:ba:1d:a1:
05:35:29:9e:98:75:59:1b:63:bf:ff:57:1c:08:f0:
44:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2F:02:70:F4:14:04:DB:1F:00:78:30:FB:FE:5C:B0:42:64:D9:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e7600d-6189-46fe-b0f5-e8d5f7cbe7af/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e7600d-6189-46fe-b0f5-e8d5f7cbe7af/1/7C8CcPQUBNsfAHgw-_5csEJk2W4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.72.0/22
Signature Algorithm: sha256WithRSAEncryption
69:5f:6d:b0:da:76:fc:ce:d1:6e:5a:9f:47:24:9c:77:b0:56:
fe:c2:aa:65:3b:21:30:25:df:3e:6d:5e:5e:69:ea:05:02:35:
46:1d:6c:f3:5d:7c:b4:db:51:a2:d0:12:5b:b4:68:1b:28:0a:
0e:51:1a:03:5f:8e:de:81:96:a8:2f:bf:d3:9f:d1:d3:e4:95:
1d:98:e0:e0:65:8e:83:78:e8:d7:53:6c:4a:45:b6:5a:64:85:
3f:bf:54:ed:08:7b:18:f3:b8:c3:5e:8e:94:f4:77:e7:f8:fc:
5e:eb:48:2c:dc:1a:f8:53:75:d5:9d:2f:21:14:5c:d8:9f:55:
cd:46:ab:7c:7b:86:6a:b8:8f:04:12:cc:33:5d:50:02:d0:7d:
6b:e5:87:21:0a:1b:15:90:1a:54:c2:0a:7a:e2:67:30:ef:dd:
53:bc:bd:20:13:39:2e:b2:f9:7f:4f:fe:06:3e:12:a3:0c:48:
98:39:72:11:ae:9f:c2:88:c1:c4:7a:82:e7:04:0b:22:dd:d6:
ee:ad:2b:ec:3d:18:47:3d:00:cc:83:68:5b:16:ce:c8:f6:ee:
8d:68:17:4b:90:41:1d:19:75:99:37:7e:06:4c:18:5d:34:36:
69:16:3d:46:a0:08:c7:c5:18:4c:d7:44:fa:2c:06:7a:db:ad:
90:8c:03:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:52 2023 by rpki-client on console-ams.rpki-client.org