Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B3U55AP8PcCiF_WC4V-2R_-0vWM.cer
File: B3U55AP8PcCiF_WC4V-2R_-0vWM.cer (raw, json)
Hash identifier: U+XUT214AkiM7mTAPK4fFCQikOcc6iln2At0kJopOAs=
Subject key identifier: 07:75:39:E4:03:FC:3D:C0:A2:17:F5:82:E1:5F:B6:47:FF:B4:BD:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B02DFC5F93
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/1d64a3-9546-4d40-b9bd-355a518e7059/1/B3U55AP8PcCiF_WC4V-2R_-0vWM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/1d64a3-9546-4d40-b9bd-355a518e7059/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 17 Apr 2022 12:31:39 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.135.120.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 756685758355 (0xb02dfc5f93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 17 12:31:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=077539e403fc3dc0a217f582e15fb647ffb4bd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f1:43:10:61:5c:60:95:6a:0b:84:f7:69:81:
08:cd:f2:7c:5a:70:20:b7:ab:b1:39:52:31:55:82:
e6:45:18:fb:43:54:99:39:74:b6:1f:4b:b7:c9:dc:
5c:27:de:2e:7f:cb:29:77:d6:1b:ae:e2:aa:de:c7:
db:4e:e1:06:ea:27:ea:df:2f:8a:54:e4:1b:f9:7d:
35:14:88:27:30:80:83:9d:db:48:3f:fe:0a:90:a1:
45:ac:ee:33:8f:46:70:4f:50:b2:e7:30:ae:6e:39:
d2:d4:e1:e8:75:f6:a3:b7:27:01:d0:70:4c:78:75:
ab:9c:ec:73:50:17:43:1c:7b:2d:6a:38:b5:54:9c:
e1:3f:33:f5:8e:d1:03:3e:e5:1e:38:c2:ed:a5:ed:
8d:39:0e:26:be:43:68:19:2b:af:56:00:66:62:b3:
51:42:3c:33:39:7c:e6:92:33:5d:ee:62:f6:0c:3e:
cd:dc:54:43:fa:b5:1b:cc:84:14:93:c6:a5:b8:77:
9f:3e:b7:d4:ff:9f:92:30:d6:a3:43:a8:74:b4:27:
f6:c7:7a:cf:b5:9d:07:ee:e7:0f:be:5f:80:d6:25:
5a:6d:00:4d:33:65:0c:9c:85:ea:2e:b5:57:80:68:
cf:b9:3f:e2:48:87:67:c4:50:08:51:b5:2a:57:3a:
63:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:75:39:E4:03:FC:3D:C0:A2:17:F5:82:E1:5F:B6:47:FF:B4:BD:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1d64a3-9546-4d40-b9bd-355a518e7059/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1d64a3-9546-4d40-b9bd-355a518e7059/1/B3U55AP8PcCiF_WC4V-2R_-0vWM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.120.0/22
Signature Algorithm: sha256WithRSAEncryption
91:e4:c5:16:e3:48:e0:f5:35:aa:36:13:55:22:da:0a:f0:49:
9e:5e:43:6b:3d:e0:c3:8a:d8:a9:3c:0e:e4:2b:0c:de:d9:67:
90:f6:55:c7:43:95:5d:26:a8:6c:87:31:43:81:97:96:dc:33:
f6:ab:0c:4e:80:1d:f6:b7:13:b9:07:b9:23:0e:df:11:31:ed:
ca:6b:01:11:ee:01:6c:90:f9:1b:62:1b:c3:ec:87:c8:ec:13:
91:07:28:d1:04:ce:c4:ab:a9:75:ef:86:0c:ca:bb:f4:83:5e:
7d:b5:fb:f2:dd:e8:72:40:aa:d8:d1:36:48:ca:80:3f:ca:cf:
fc:1d:de:d9:41:d1:21:c6:ca:c3:62:d0:c7:2d:b4:c4:ec:78:
a0:f9:ac:88:51:3d:5b:b6:4c:87:63:fc:70:e1:10:8d:03:e0:
0d:19:9e:7d:c2:f6:86:cf:3f:2f:9a:50:57:f8:6b:02:33:91:
26:b1:64:5e:de:7d:32:91:ca:44:bc:86:a2:cd:0b:7f:09:ae:
cb:8a:87:39:47:72:30:c4:d3:97:12:9a:a6:a4:67:aa:f2:a5:
2e:ac:bc:2b:76:b1:06:d3:7f:3f:39:f3:e0:d2:f5:48:95:f8:
95:84:52:14:c2:dc:53:b8:a7:45:f5:bf:a2:dd:9b:49:55:72:
ed:96:70:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:36 2024 by rpki-client on console-fra.rpki-client.org