Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AUmitqsKnD3bMqWyZSa_9l_rtlA.cer
File: AUmitqsKnD3bMqWyZSa_9l_rtlA.cer (raw, json)
Hash identifier: dGxjyPfTC27bp+3wx6TjjmaLCVFDMSPvRm4WewEQ3q0=
Subject key identifier: 01:49:A2:B6:AB:0A:9C:3D:DB:32:A5:B2:65:26:BF:F6:5F:EB:B6:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7B0E892E8B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/642b0d-c6ec-4a9f-b9da-849636d29054/1/AUmitqsKnD3bMqWyZSa_9l_rtlA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/642b0d-c6ec-4a9f-b9da-849636d29054/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 02:28:30 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 5.183.56.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528524848779 (0x7b0e892e8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:28:30 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=0149a2b6ab0a9c3ddb32a5b26526bff65febb650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:ad:43:37:0e:95:75:6b:51:5f:d5:92:c4:
2c:68:30:c3:34:44:94:8f:a1:c6:a9:5c:31:79:dc:
9f:f4:00:c2:e2:22:21:61:cd:bc:96:95:ad:77:3b:
15:66:58:02:b2:90:64:22:0d:05:a8:0b:d5:e0:b6:
93:0c:fd:a0:2d:b3:b4:47:4f:18:e7:a3:ba:4e:fb:
aa:56:ab:30:cc:b7:fa:9a:ff:62:f9:9a:ad:b8:2e:
3c:20:a7:8b:04:1d:64:51:2e:1c:55:c7:d7:ab:38:
52:11:47:5a:6b:a5:7b:fc:f3:56:5b:b2:4a:80:c4:
ad:64:31:fe:c6:4d:30:d5:5b:72:02:c7:b4:59:83:
d6:db:a4:77:62:1c:71:8d:bc:d4:de:b1:16:df:dc:
04:00:40:24:5d:75:45:fc:d7:d6:28:14:36:05:77:
74:d8:28:93:33:4c:a9:a1:12:40:67:83:3f:f6:e1:
f9:2d:76:1c:af:85:4b:10:8d:68:70:22:c4:7b:ec:
8c:c5:18:66:1c:2a:c6:34:2c:c0:80:af:d8:a3:8b:
e1:ee:e3:8a:24:c8:a8:0c:bd:e0:75:ca:37:8d:15:
8d:eb:8d:eb:ec:d9:e2:ed:2e:dd:6c:91:4b:03:cd:
f3:29:c8:af:4c:dc:25:5d:c2:6e:93:18:39:c0:2a:
e4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:49:A2:B6:AB:0A:9C:3D:DB:32:A5:B2:65:26:BF:F6:5F:EB:B6:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/642b0d-c6ec-4a9f-b9da-849636d29054/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/642b0d-c6ec-4a9f-b9da-849636d29054/1/AUmitqsKnD3bMqWyZSa_9l_rtlA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.56.0/22
Signature Algorithm: sha256WithRSAEncryption
88:0c:20:0b:11:c7:18:17:e9:10:0d:da:7a:c6:de:94:8a:74:
67:33:9d:d9:aa:d0:09:25:cc:ac:33:b8:0d:e0:ab:fd:1e:5d:
e9:13:77:d9:01:36:c3:a3:a2:32:db:06:9d:be:0c:af:46:a3:
e2:a9:27:f1:5f:87:b8:a9:07:42:36:74:65:66:63:f3:81:2f:
16:46:0a:a6:8c:04:39:db:98:e6:ea:ca:61:f4:f3:86:78:c0:
43:9c:a7:f1:0c:1c:bc:5c:b9:8a:3f:30:4b:fd:9d:d9:5a:dd:
4b:1e:e0:75:52:2b:83:03:d1:70:be:f5:5f:80:e7:02:47:9b:
54:aa:83:c1:5a:49:0f:d4:49:03:77:9a:60:5a:78:fa:98:79:
b3:da:e3:f6:d3:33:7b:86:b0:40:a4:14:7c:07:eb:dd:d9:98:
35:32:ff:84:48:1f:41:b8:41:60:f4:ba:5e:2b:07:0e:ce:ec:
70:56:1d:99:d1:31:e7:23:3e:0c:63:25:c8:af:bb:ca:4b:a4:
47:0e:c6:69:89:ba:7a:9e:06:16:b7:da:16:a9:71:fc:af:29:
49:06:37:b1:1e:67:c6:cd:48:a4:54:8b:ac:a2:43:a7:25:64:
6b:f4:69:e1:ac:a3:f0:03:f2:55:da:82:35:b3:eb:6c:49:4b:
c9:11:0d:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:12 2023 by rpki-client on console-fra.rpki-client.org