Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7QWxVy0vCPIFKEo9RSCgsDmrATY.cer
File: 7QWxVy0vCPIFKEo9RSCgsDmrATY.cer (raw, json)
Hash identifier: uuSjaXhvf00o1eeosT70tj2ZcJkGjUSpENrZdc6TpVc=
Subject key identifier: ED:05:B1:57:2D:2F:08:F2:05:28:4A:3D:45:20:A0:B0:39:AB:01:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 80DA5F032B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/316d04-e0dc-48cb-8734-ea9308b0f74c/1/7QWxVy0vCPIFKEo9RSCgsDmrATY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/316d04-e0dc-48cb-8734-ea9308b0f74c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 05:06:37 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.148.64.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553419473707 (0x80da5f032b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:06:37 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=ed05b1572d2f08f205284a3d4520a0b039ab0136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:46:ca:70:5e:38:b4:70:93:1f:c8:38:cd:3d:
10:69:5c:19:46:4d:45:10:c6:64:ce:11:a4:7c:65:
af:a5:3f:35:f3:cb:bb:83:14:c8:77:79:b4:27:52:
ed:c9:24:bc:b9:80:d6:21:b8:b4:43:f4:39:c2:8f:
1c:26:32:c5:73:19:3a:95:a2:52:8d:0a:a7:a1:bc:
f4:5c:19:5a:53:a5:40:62:c1:5d:bf:a1:0f:e9:ef:
29:de:1a:c2:45:d4:70:cc:21:38:56:61:d8:6d:c9:
8e:bf:cb:86:3f:d0:bf:b3:8b:f1:8e:b1:4f:02:a1:
c4:42:92:a8:66:fd:c4:2f:66:06:f4:ec:81:31:13:
9a:ed:6e:2a:c3:a7:6c:e9:95:6e:46:ee:4e:5f:ca:
aa:16:85:fe:48:b7:20:c9:80:1e:a7:9c:1d:e6:88:
7c:4c:bb:c0:e0:9c:d1:40:22:0c:8c:b7:7d:95:fb:
2e:b6:fa:b1:79:74:35:9f:3e:87:4c:29:63:b2:b2:
8d:53:2d:09:55:c4:a7:53:59:f2:8b:44:2f:ec:6d:
f2:8d:1c:de:b0:35:5b:d8:8a:cd:cb:49:6f:4d:bb:
ec:f0:57:01:4f:65:5b:64:14:17:42:e0:48:7f:f2:
4b:0a:5e:2a:ec:9b:0d:64:47:08:46:3d:dd:c8:5b:
52:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:05:B1:57:2D:2F:08:F2:05:28:4A:3D:45:20:A0:B0:39:AB:01:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/316d04-e0dc-48cb-8734-ea9308b0f74c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/316d04-e0dc-48cb-8734-ea9308b0f74c/1/7QWxVy0vCPIFKEo9RSCgsDmrATY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.64.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:88:70:1d:5e:e2:f8:ba:43:07:86:17:6c:a1:1d:df:3f:56:
fd:45:63:62:9f:d1:dd:c8:3a:b6:94:36:c1:9b:9c:4c:2b:68:
f9:f4:d1:c8:00:67:3f:f7:b9:3c:a4:c7:a8:bb:37:13:c3:5b:
d8:ed:c8:33:e6:2a:42:71:5d:68:31:91:b1:23:46:38:a5:6e:
18:ab:c8:de:b5:51:3f:72:01:f6:17:13:c2:47:bb:af:95:26:
b2:e4:5c:ac:dc:48:f7:e0:e1:de:c1:b7:09:74:b4:18:db:32:
eb:82:fd:32:e0:1c:cd:de:45:30:63:3a:5e:77:ce:ed:84:98:
b5:81:f1:ed:8c:3e:75:66:c8:71:da:a1:6f:7f:00:27:8f:30:
c0:eb:e0:b7:ef:11:e9:f3:61:79:fd:18:3e:38:6e:7a:e3:4b:
ab:1d:54:c4:ad:85:c0:ea:67:ae:2c:f9:2c:a8:61:11:7b:c9:
cb:9c:5b:72:46:53:a1:5d:95:54:4e:4a:8f:fb:53:78:cc:53:
29:46:65:7f:cc:41:7e:d3:db:12:7c:b2:68:23:73:40:8e:35:
e1:a7:e8:78:73:75:d7:91:d5:d8:83:72:69:13:ca:4b:1e:6b:
5c:b9:31:51:af:2f:5a:cb:5b:41:3d:8a:d9:cd:1c:45:fe:85:
81:9e:c5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:16 2023 by rpki-client on console-fra.rpki-client.org