Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9J1mu3G9b4naf3wo4RnPQC5mTB8.cer
File: 9J1mu3G9b4naf3wo4RnPQC5mTB8.cer (raw, json)
Hash identifier: hNxZC4OJqwctdm8GsHrzPxh1qtQ3aNcGm86+kfgHcLA=
Subject key identifier: F4:9D:66:BB:71:BD:6F:89:DA:7F:7C:28:E1:19:CF:40:2E:66:4C:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 82A8DE245E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/5eb249-2861-4c83-970c-51ba2572fced/1/9J1mu3G9b4naf3wo4RnPQC5mTB8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/5eb249-2861-4c83-970c-51ba2572fced/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 06:41:47 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.134.212.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 561178879070 (0x82a8de245e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:41:47 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=f49d66bb71bd6f89da7f7c28e119cf402e664c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:55:a5:9b:38:03:bb:85:b1:c9:ef:c7:a9:51:
bf:50:bf:4e:ce:fe:53:23:3a:7c:18:1d:6a:63:29:
44:9a:01:fe:5b:01:f0:82:40:df:13:5f:a0:75:55:
c7:ee:25:1f:b0:5b:78:3e:c9:e8:4f:5a:f3:7b:a4:
87:a5:d5:06:c1:62:f3:87:89:ed:8c:bd:96:f6:34:
0c:3c:87:ac:18:f3:9a:00:20:26:27:dd:a2:d1:3f:
1b:62:03:49:67:3a:d7:d3:f8:8c:ff:f8:90:36:a7:
06:64:95:1f:43:f0:8a:1f:40:b8:d0:83:92:44:21:
24:20:da:fe:31:00:94:88:0e:d1:26:34:2a:b9:f5:
08:12:46:42:fb:8b:8c:bf:66:e8:46:f0:1c:23:6e:
8e:9c:2b:76:ba:e0:0f:d3:78:15:06:f6:bc:30:1f:
1c:01:8a:d1:72:34:52:51:5a:61:08:d2:f2:06:2f:
3f:16:80:47:1f:ae:59:b3:97:ae:3a:33:e3:bb:85:
b3:1c:ba:b4:22:74:4f:c4:0c:6a:71:3e:c1:bf:7b:
4d:e0:d2:2b:9d:b3:8e:37:a0:87:c8:2b:02:32:2c:
eb:64:1f:4b:71:fa:2d:08:e7:56:88:8d:33:6f:67:
83:b1:62:1a:63:e9:34:9e:2c:07:93:70:6c:a3:47:
a2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9D:66:BB:71:BD:6F:89:DA:7F:7C:28:E1:19:CF:40:2E:66:4C:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5eb249-2861-4c83-970c-51ba2572fced/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5eb249-2861-4c83-970c-51ba2572fced/1/9J1mu3G9b4naf3wo4RnPQC5mTB8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.212.0/22
Signature Algorithm: sha256WithRSAEncryption
22:42:e1:7a:05:a4:66:ca:e2:18:e8:88:ac:f2:6f:f0:fd:b9:
ff:e7:bf:1d:d9:59:b4:03:e8:f0:d6:76:e4:0e:78:0d:e6:f3:
ff:b0:dc:fb:30:a0:54:cd:1c:c2:cc:09:ef:06:b3:25:9a:17:
4e:5d:fc:8b:b3:46:09:39:24:11:9d:e0:80:3b:7f:58:a4:a6:
41:01:86:64:ef:5f:27:fc:6e:45:09:6e:f4:d9:70:d3:b7:4c:
2c:8f:0b:09:3b:9d:ce:14:dd:a5:09:97:dc:15:37:7c:b7:ed:
1c:e8:06:b0:34:80:54:65:c9:58:5f:e5:d6:dd:aa:f8:7a:20:
b9:4f:32:47:ea:b4:e6:75:37:13:41:a0:33:33:3e:3e:c1:df:
f1:27:7e:f3:0d:41:46:56:5b:d5:78:fc:79:d4:74:d3:2d:03:
4a:ce:cd:fd:16:28:84:ac:0f:7c:b3:84:9c:67:6b:1d:d9:e4:
fa:79:2b:17:31:25:cf:d4:c7:95:ec:ce:24:7f:08:88:08:d5:
0f:a3:2c:dd:6c:1b:88:34:32:0e:8f:9e:d6:76:c2:a4:cf:96:
96:c3:47:c1:1d:7a:14:cd:36:dc:2f:cf:d6:85:8b:e2:fc:c0:
21:95:b1:b5:cc:13:41:db:8e:23:3e:18:e7:e6:5a:6d:55:7f:
c8:54:fa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:38 2023 by rpki-client on console-ams.rpki-client.org