Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7npzDfPvpOUxa0DB5s445IKR9tA.cer
File: 7npzDfPvpOUxa0DB5s445IKR9tA.cer (raw, json)
Hash identifier: M3ahY1UVuBmnFDrTkwI+IoRL0lzMBYwKNRg9M48VTAA=
Subject key identifier: EE:7A:73:0D:F3:EF:A4:E5:31:6B:40:C1:E6:CE:38:E4:82:91:F6:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7606609BF5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/dc1dd2-ed13-4f76-b591-a90e40fceb02/1/7npzDfPvpOUxa0DB5s445IKR9tA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/dc1dd2-ed13-4f76-b591-a90e40fceb02/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 00:19:03 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.151.0.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506913135605 (0x7606609bf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:19:03 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=ee7a730df3efa4e5316b40c1e6ce38e48291f6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:09:2d:a0:3c:f3:e8:d1:21:48:21:c0:35:
f9:84:1f:c1:e4:f7:3f:c0:6f:15:9f:7e:94:b9:ab:
7b:a5:9e:dc:78:26:5e:76:5e:97:f5:7c:eb:a0:22:
16:70:0e:50:5f:16:93:67:77:c3:f0:d3:49:d4:5b:
ec:f4:a1:59:76:b7:61:78:73:4b:68:41:05:01:9c:
59:5e:2f:e2:17:99:63:b4:79:3e:18:c9:e7:82:0e:
73:ec:01:01:e8:e4:b0:b7:52:95:51:c4:a5:c2:79:
cf:0a:57:5d:8e:e1:d8:4a:fb:de:ec:1d:85:16:86:
48:be:62:00:4d:3a:c3:80:ac:3c:00:86:9e:27:7e:
64:ab:00:15:98:ca:40:a5:00:b5:b8:70:97:ab:0a:
6e:5b:da:cc:90:84:68:59:09:73:ba:12:47:a2:f3:
15:57:ac:9e:3b:d2:a6:29:91:68:2f:57:7f:30:9c:
40:6a:2a:71:80:3c:2b:08:44:35:ac:51:29:22:5d:
a8:1a:df:09:ed:da:dc:a9:54:92:e6:73:4a:6d:51:
41:8a:49:e7:8f:0f:8b:18:15:d2:3a:0e:b0:93:6e:
86:98:ed:79:9c:7e:84:e0:b3:5e:e1:58:ac:fe:39:
09:51:e3:87:3a:99:c0:0b:64:51:93:71:14:73:33:
bb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7A:73:0D:F3:EF:A4:E5:31:6B:40:C1:E6:CE:38:E4:82:91:F6:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/dc1dd2-ed13-4f76-b591-a90e40fceb02/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/dc1dd2-ed13-4f76-b591-a90e40fceb02/1/7npzDfPvpOUxa0DB5s445IKR9tA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.0.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:27:1e:f5:7d:9a:7e:8b:46:32:91:b4:6d:b9:dc:2e:eb:30:
21:7e:7f:f6:78:f0:af:19:15:5e:8e:bb:1b:a7:56:4b:de:74:
93:5e:02:dc:75:35:29:38:0d:fb:91:e2:0f:fb:45:90:00:34:
b5:64:40:44:e1:9b:65:5d:3f:e5:24:0e:d1:47:cb:e8:5b:ff:
cc:73:64:96:3f:77:2d:26:cc:40:2b:75:10:0c:3d:6e:63:8a:
39:c5:de:a9:ac:6d:95:a0:08:31:6d:ca:4b:f9:8d:d4:82:be:
d4:65:a3:d0:b2:bd:a9:7c:ce:82:9b:88:27:8c:bd:12:01:6b:
44:9c:dc:a0:9d:89:06:59:49:d0:99:11:d9:26:81:e2:7e:5f:
1e:ad:c7:0b:73:62:7a:d7:b3:0a:e0:03:e7:b7:46:ae:a2:cc:
ca:52:94:ae:a5:47:66:1a:49:2b:b2:36:45:92:8f:6a:78:6a:
2c:86:c7:03:e6:de:91:64:ea:cd:50:8b:cb:d6:6e:e4:83:8a:
95:5d:d4:d6:9d:e2:dc:95:d1:de:60:75:93:db:41:e8:91:e3:
b3:10:06:ab:f1:5d:fd:d6:b2:8e:49:44:65:7e:ab:54:a2:4e:
85:2a:27:cc:d0:50:90:fa:b6:3b:25:87:84:cd:1e:f4:27:75:
f2:84:d7:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:33 2023 by rpki-client on console-fra.rpki-client.org