Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BK2CFknly2TaxEZwPDREHqsxujs.cer
File: BK2CFknly2TaxEZwPDREHqsxujs.cer (raw, json)
Hash identifier: enkgV3c57CHzkVPxDSpBjsdTTnSSoVWIPAmGtoyhkZg=
Subject key identifier: 04:AD:82:16:49:E5:CB:64:DA:C4:46:70:3C:34:44:1E:AB:31:BA:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A15C0B1417
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/7856d0-8fac-48ed-a800-b9ddb324935d/1/BK2CFknly2TaxEZwPDREHqsxujs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/7856d0-8fac-48ed-a800-b9ddb324935d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:55:26 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.145.160.0/22
IP: 2a0e:fb40::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 693033964567 (0xa15c0b1417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:55:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04ad821649e5cb64dac446703c34441eab31ba3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:e4:fb:fe:30:15:3c:35:74:53:57:95:56:
c3:06:e7:3d:13:d8:69:ea:e9:cc:71:d6:7c:2e:ff:
1d:5c:97:1f:60:c0:6e:5a:0c:a3:bc:32:35:ae:b7:
e0:74:43:2f:48:e0:37:0e:20:73:48:25:0a:51:09:
43:53:1a:6f:9b:c4:cc:1f:ac:9c:8a:43:9b:75:cb:
15:9b:56:cc:9a:06:33:82:72:d3:19:a7:95:ba:4d:
be:87:b9:d9:d4:63:89:86:97:7f:9d:50:62:af:2e:
e4:4b:67:9c:e0:b9:ac:8f:eb:ca:42:9b:2a:95:9b:
49:41:d4:54:b1:87:fc:b5:ab:24:ad:b7:52:40:ca:
86:85:e2:01:77:66:6f:48:a4:23:b4:ff:49:47:65:
38:3b:a3:1f:c1:9b:a3:43:77:01:7d:21:09:ea:85:
45:7f:37:1c:d0:e1:8b:23:56:d4:8f:c6:b3:ee:42:
c5:19:f9:77:19:d5:51:1f:4a:85:8a:cb:18:df:be:
c1:22:ad:2b:25:06:b4:4c:a3:8e:d7:84:ca:b1:57:
5b:fb:90:6e:4a:69:54:25:4d:00:06:cf:69:3b:62:
c2:80:39:8d:21:cd:96:45:b8:cb:c7:3b:7d:2e:88:
4b:81:3e:6c:c2:e0:ec:f6:00:41:ba:1f:57:34:03:
d5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AD:82:16:49:E5:CB:64:DA:C4:46:70:3C:34:44:1E:AB:31:BA:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7856d0-8fac-48ed-a800-b9ddb324935d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7856d0-8fac-48ed-a800-b9ddb324935d/1/BK2CFknly2TaxEZwPDREHqsxujs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.160.0/22
IPv6:
2a0e:fb40::/29
Signature Algorithm: sha256WithRSAEncryption
55:d4:c3:7e:f2:2e:97:a9:17:a4:aa:ce:5f:dc:01:57:df:2a:
aa:2a:32:ab:96:51:75:d8:ff:92:05:ff:bf:75:2d:9e:45:e3:
f7:49:69:80:7b:36:b9:bb:7d:06:2d:23:66:4e:e1:50:9d:02:
c5:46:d4:08:a1:15:8e:ed:a9:66:2c:d3:6a:e3:be:84:4c:d4:
5a:c4:b2:38:e3:01:fd:46:a1:be:b1:10:71:d1:76:07:0c:39:
a6:a6:cd:11:f5:46:7e:db:dc:df:c8:b9:eb:db:c0:04:68:b9:
fe:e2:0f:fb:7e:fb:42:6a:87:5f:23:6a:86:8f:ca:07:fe:51:
cd:3f:37:c6:6a:80:cc:2e:de:af:63:c8:5d:fd:79:ef:ea:14:
84:52:cc:51:95:90:59:09:c9:55:4d:f4:41:12:49:79:ce:d8:
7b:85:2c:a9:27:37:76:a7:8b:14:0c:af:a6:91:c9:91:a2:22:
73:02:7d:50:80:6c:0b:0e:ff:a6:29:6d:5d:7d:a9:03:dd:00:
78:cc:2b:12:af:3b:f3:f7:49:11:25:6b:81:c2:8c:74:b9:46:
49:c6:31:85:35:b9:b8:c8:59:92:67:d5:1b:85:4c:5c:a7:b4:
c8:19:d8:05:96:cd:ed:76:50:e5:cb:61:f1:63:4f:22:82:43:
69:64:15:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:27:15 2024 by rpki-client on console-ams.rpki-client.org