Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9TBMOiLJLIOLr3x5DwezyOw65UY.cer
File: 9TBMOiLJLIOLr3x5DwezyOw65UY.cer (raw, json)
Hash identifier: dX89U54aEamHaV+Esdjxyn/C1bBk8YqjnDr2bLVLL9k=
Subject key identifier: F5:30:4C:3A:22:C9:2C:83:8B:AF:7C:79:0F:07:B3:C8:EC:3A:E5:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 82E18F64D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/0afbb3-8599-48b4-889f-dc71a666d66f/1/9TBMOiLJLIOLr3x5DwezyOw65UY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/0afbb3-8599-48b4-889f-dc71a666d66f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 06:51:18 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.81.148.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 562130019544 (0x82e18f64d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:51:18 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=f5304c3a22c92c838baf7c790f07b3c8ec3ae546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:34:ee:b2:a0:af:b1:44:6b:d3:6c:5d:fc:3a:
aa:5b:a4:9d:49:eb:2b:03:5b:c1:f4:24:92:05:0d:
82:e2:7f:45:dd:ea:c5:f5:56:ad:8b:11:f0:13:d6:
98:44:e9:31:c3:5a:5c:1c:aa:2b:ca:93:60:08:2b:
c5:2d:18:06:cf:fc:1c:fd:b2:2d:4f:5b:8f:c0:49:
e8:d0:71:b8:a5:7a:d1:55:ab:49:7d:7f:b9:f2:b0:
a5:d5:23:18:c1:8d:c8:34:cf:3d:08:3c:78:f6:fc:
6a:4b:d1:c1:11:00:0e:63:3e:a6:40:16:76:0a:e2:
84:90:66:4d:a6:cd:a7:53:e8:cc:53:e7:55:b8:06:
9a:eb:0d:5b:14:93:81:5e:bf:0a:5e:22:b4:cf:e4:
95:1f:f7:ea:51:5d:39:9e:22:7f:af:5c:ee:30:1a:
a7:c2:34:59:08:b8:05:ca:49:dd:66:f9:3d:e9:da:
7a:32:8b:f2:1e:9f:9e:88:d6:a0:33:56:b0:08:02:
18:ab:f6:fa:28:d5:bc:26:f1:0e:4a:35:ed:f7:0e:
fb:a8:ca:50:1a:4a:a9:8e:95:5a:7d:a1:2b:81:c7:
08:2c:d8:eb:14:ed:bb:b9:ae:c5:11:36:ff:2b:10:
4c:72:00:2f:0c:88:71:48:71:14:c3:eb:dc:ce:15:
1d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:30:4C:3A:22:C9:2C:83:8B:AF:7C:79:0F:07:B3:C8:EC:3A:E5:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0afbb3-8599-48b4-889f-dc71a666d66f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0afbb3-8599-48b4-889f-dc71a666d66f/1/9TBMOiLJLIOLr3x5DwezyOw65UY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.148.0/22
Signature Algorithm: sha256WithRSAEncryption
56:be:29:22:24:08:ab:d9:b2:63:af:3c:8e:e2:72:b0:65:a3:
f6:ad:0f:fc:84:74:c5:97:f7:d1:15:7c:27:d4:89:83:c3:ff:
7e:d0:78:4e:7a:c1:4e:12:3a:93:06:cd:5a:76:fd:64:2f:7e:
b2:f2:46:ca:6f:d0:16:d2:09:db:9f:df:52:24:b0:10:8e:a4:
0e:af:94:7f:d9:9f:2d:d6:46:2b:18:95:33:c1:f4:ad:1e:eb:
fd:11:ff:9f:88:34:24:52:78:01:eb:8c:86:95:40:14:81:c1:
3b:aa:bc:c9:59:11:c1:78:1a:e6:55:f1:db:12:30:5a:b0:3f:
6c:0a:1c:e3:72:0e:88:32:74:a2:9a:9a:0a:24:52:18:9a:f0:
43:6b:5f:65:64:ff:be:01:09:bb:bd:31:83:1c:d9:35:9d:c4:
ed:72:5b:0d:a7:c9:95:cd:ad:40:86:4c:ff:64:a0:4f:b1:04:
19:46:6e:00:ca:2b:b6:b7:38:9a:5a:2e:bc:23:da:d3:ce:7c:
46:d5:26:66:60:54:ba:68:e7:8d:f2:19:15:96:3c:c8:cf:98:
ec:cd:9e:11:d6:1b:21:50:7c:b4:66:1c:ad:1a:c1:f1:35:ef:
4d:27:94:45:a2:21:93:f0:88:ad:7a:af:aa:19:66:59:73:e7:
96:2d:c9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:38 2023 by rpki-client on console-ams.rpki-client.org