Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7RE3NfEPP-twyqiBoA4D2V8JQF0.cer
File: 7RE3NfEPP-twyqiBoA4D2V8JQF0.cer (raw, json)
Hash identifier: VcBIqx7rsWgqbZSUXxx3iFPHlDJNAesElQtte8Km2So=
Subject key identifier: ED:11:37:35:F1:0F:3F:EB:70:CA:A8:81:A0:0E:03:D9:5F:09:40:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 82C87A8825
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/16feab-e4a3-4bf9-ac80-e0d0a203fd08/1/7RE3NfEPP-twyqiBoA4D2V8JQF0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/16feab-e4a3-4bf9-ac80-e0d0a203fd08/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 06:47:57 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.14.104.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 561709221925 (0x82c87a8825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:47:57 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=ed113735f10f3feb70caa881a00e03d95f09405d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a9:0d:a3:cc:ad:6e:ad:f4:e9:ea:10:03:29:
4b:0f:e2:59:70:6c:ff:ed:b1:54:19:5b:c0:dc:3d:
d4:50:7e:8e:eb:f1:0a:25:ff:06:ed:8d:a0:36:4e:
2a:12:84:ae:a1:e1:fe:51:e6:64:a9:4b:8c:b3:8a:
b3:d0:6b:25:db:9a:60:a6:4e:fc:b7:39:63:09:97:
75:91:26:dc:28:78:50:4e:e3:b3:42:fe:e8:c6:bc:
9d:9d:f2:2f:4c:c2:c1:6f:f4:3d:95:12:56:fa:c3:
ba:fb:8a:29:7e:e9:6d:e2:08:6a:30:b0:19:44:aa:
15:63:4e:19:dd:60:a5:9f:c5:ed:a1:62:b1:fa:8e:
0c:55:d1:80:54:e0:80:25:ea:c7:79:2e:b9:1f:f9:
4f:71:5b:b9:82:79:1c:ea:bc:c6:6e:62:b1:11:0f:
4e:bd:c4:25:21:66:47:7a:a8:d2:03:1c:fb:07:a5:
b5:51:5f:25:38:a3:47:d4:a3:f6:c0:f4:78:f2:c1:
61:22:ab:b0:56:25:46:bb:da:6d:79:56:c9:83:af:
37:05:4e:a6:f7:12:98:be:d9:ec:f1:87:a3:f9:af:
8c:de:ee:42:66:d0:cb:8d:f3:c3:ba:2b:0e:e1:18:
59:11:c8:96:11:23:b3:43:da:bb:56:05:a8:b7:29:
34:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:11:37:35:F1:0F:3F:EB:70:CA:A8:81:A0:0E:03:D9:5F:09:40:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/16feab-e4a3-4bf9-ac80-e0d0a203fd08/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/16feab-e4a3-4bf9-ac80-e0d0a203fd08/1/7RE3NfEPP-twyqiBoA4D2V8JQF0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.104.0/22
Signature Algorithm: sha256WithRSAEncryption
76:85:b6:eb:a1:d0:34:38:b7:d6:8b:e2:db:f1:3a:93:9f:2d:
49:ec:29:83:8b:fc:5e:61:a7:92:a0:15:28:96:c2:c6:61:7a:
a3:85:24:72:76:a9:88:6e:03:5d:d4:1e:41:f3:ec:8b:ed:e8:
b1:a6:05:c4:b7:52:b9:6a:58:0b:fa:58:de:8d:ec:9d:bc:ea:
12:2c:bb:10:de:24:7d:e2:48:3c:45:c8:e5:66:92:71:6d:be:
44:ca:44:ac:fe:ef:55:af:c7:70:27:a7:b4:fd:3f:e1:db:d4:
09:c6:22:4b:b5:56:83:66:27:ee:c7:05:59:d3:be:e4:6b:5a:
5b:c1:d5:c1:72:5c:3f:26:d0:3b:73:68:03:4a:f8:8c:5b:91:
a3:68:08:cc:17:9a:c7:75:33:df:21:0f:68:9c:3a:a7:9f:77:
56:b1:ec:8d:21:88:ae:a3:df:0b:3f:54:d3:3f:c0:fc:3f:09:
c2:1a:78:2a:21:4a:54:42:3c:25:51:e1:96:1e:8d:f7:2a:ef:
a8:03:dd:56:05:1f:61:66:92:cd:ca:fd:ee:56:89:b1:0e:ea:
e0:c1:a0:ed:40:33:d3:e0:b4:2c:73:d3:90:28:b6:68:ce:d3:
a3:66:07:88:23:58:cb:3c:a5:b4:4f:eb:53:5c:2c:98:35:e0:
0b:af:52:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:16 2023 by rpki-client on console-fra.rpki-client.org