Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7xNTeGNZqmvP2Og8rvJVENEOkG0.cer
File: 7xNTeGNZqmvP2Og8rvJVENEOkG0.cer (raw, json)
Hash identifier: HoGs1YPNdA4bmIXp9Ap9W5BzLgJsX6EbJBLGJ0WKBJo=
Subject key identifier: EF:13:53:78:63:59:AA:6B:CF:D8:E8:3C:AE:F2:55:10:D1:0E:90:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7B94221B7D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/9d42f4-3460-41f6-b32b-6787ed337613/1/7xNTeGNZqmvP2Og8rvJVENEOkG0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/9d42f4-3460-41f6-b32b-6787ed337613/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 02:40:56 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.83.152.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530766240637 (0x7b94221b7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:40:56 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=ef1353786359aa6bcfd8e83caef25510d10e906d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bf:11:10:dd:ec:da:c8:8c:09:63:c6:15:30:
5c:2c:cf:0b:e7:3a:85:0f:26:54:fb:e6:6a:37:c7:
3e:b2:c4:0a:ab:01:ed:3f:ab:01:4e:79:07:47:37:
5c:72:17:16:c9:0c:d6:05:19:31:1d:24:c3:51:77:
7e:70:b6:f1:e1:48:b0:09:a6:92:c7:e7:0e:5f:ab:
e3:00:8a:a4:9b:b5:21:9c:74:33:9f:19:9b:da:f8:
0e:8b:90:28:9b:6e:49:96:50:6f:cc:a0:ae:14:1c:
74:df:1d:00:70:85:4d:8f:d2:99:52:49:92:00:a8:
f8:32:44:ce:7f:02:3d:1f:d5:27:59:28:23:92:92:
5b:05:34:4c:0e:35:06:32:2d:e5:41:f5:90:9f:36:
bc:81:5a:cd:45:a5:76:24:8f:bb:5d:66:d4:9d:f6:
de:c7:74:d0:73:57:0c:4e:a0:c4:ad:1b:1e:21:87:
d9:39:7c:d4:f5:2e:fc:85:93:9b:50:22:c4:aa:47:
ce:81:7a:ca:57:3a:2e:ee:6a:5b:af:09:a1:76:10:
dc:43:ad:2a:01:54:32:f1:2b:6e:83:65:9a:00:b3:
3c:51:05:0b:e6:f8:8c:cb:b7:4f:1c:4e:e4:82:ba:
af:21:14:bb:f5:30:0d:04:e6:42:70:a0:74:2c:bf:
a1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:13:53:78:63:59:AA:6B:CF:D8:E8:3C:AE:F2:55:10:D1:0E:90:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d42f4-3460-41f6-b32b-6787ed337613/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d42f4-3460-41f6-b32b-6787ed337613/1/7xNTeGNZqmvP2Og8rvJVENEOkG0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.152.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:f3:51:8d:71:cf:d4:b9:9c:f9:c3:7c:a6:70:f0:2a:7b:07:
a0:ee:ec:25:c4:f9:7c:bd:e3:a5:bd:d8:ac:50:47:75:7d:fa:
fd:9f:23:07:e6:5a:81:e3:78:cd:1d:74:45:a2:ba:1b:c6:a8:
f8:f9:48:6d:27:0b:96:03:f7:44:84:80:fb:e0:eb:9a:4f:a4:
69:d6:97:0d:78:71:54:35:80:37:5e:53:58:47:dd:83:62:05:
0a:7e:78:d9:77:4f:a9:d4:83:78:0a:0e:be:4c:d1:9c:b7:99:
bf:80:13:bd:30:89:2c:0a:a8:fc:c1:d1:37:5d:4e:43:27:cb:
d5:84:9b:4f:3e:44:fc:fc:f2:8e:7f:6f:63:15:0e:f2:c0:8e:
5e:14:fd:5d:9d:b5:cb:5d:88:23:b2:93:11:4b:15:d4:0f:aa:
5c:7e:62:fe:89:28:bc:38:c4:b7:f1:72:c7:87:88:16:8a:0e:
4d:f2:a8:fc:42:e4:49:dd:14:1d:c7:0e:14:d4:e8:16:f2:08:
87:24:b8:bb:9d:76:c3:99:10:dd:f0:31:ab:f1:78:07:c0:e6:
96:1e:d8:6c:1d:d9:89:4a:59:31:fe:ff:bc:5c:66:46:f9:2a:
74:60:3f:a7:5a:d2:be:7e:2f:4b:21:d0:fc:d9:c5:78:55:29:
bf:de:ed:a8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:33 2023 by rpki-client on console-fra.rpki-client.org