Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BuJ0RmbYVmfTLzauuS6ie7juhNc.cer
File: BuJ0RmbYVmfTLzauuS6ie7juhNc.cer (raw, json)
Hash identifier: Eo2apt+VJHoKL4SyXEFN5tg4AkgMpFhHrPiSNzc2M9s=
Subject key identifier: 06:E2:74:46:66:D8:56:67:D3:2F:36:AE:B9:2E:A2:7B:B8:EE:84:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9F091E9D99
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/f43df0-3cfb-43e0-a105-fe66a8e76407/1/BuJ0RmbYVmfTLzauuS6ie7juhNc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/f43df0-3cfb-43e0-a105-fe66a8e76407/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:55:38 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.136.156.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 683052801433 (0x9f091e9d99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:55:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06e2744666d85667d32f36aeb92ea27bb8ee84d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1f:9b:1f:71:82:a7:55:a6:1a:42:62:c5:61:
93:fd:b1:6e:5c:47:88:df:5c:ea:ea:e7:df:ea:3a:
94:68:68:5a:e9:33:f8:aa:5e:7c:fd:e9:7d:30:57:
cd:47:05:f4:a4:90:8f:87:1d:75:e5:36:31:07:49:
0d:68:4a:c1:19:7a:fe:42:69:a9:53:c4:69:86:0d:
c5:12:2b:41:93:c5:58:1e:8c:e2:98:e5:57:50:ac:
ba:8e:44:84:56:c4:0f:5e:b7:de:66:78:6a:07:9f:
7b:ef:e8:ab:a3:96:34:06:c0:be:2f:6a:c2:9f:06:
c2:78:6a:16:3e:2e:bd:ef:06:60:27:94:69:17:50:
c2:12:88:0f:0f:32:0b:53:4c:98:32:bc:0a:b0:d4:
01:fd:d3:01:bb:6a:59:f7:b8:53:f7:b8:b7:5a:a9:
22:9b:75:38:8d:f0:a2:ca:b8:fc:d4:e3:b6:e9:7f:
b7:d0:11:2c:27:6f:34:34:3f:9e:83:cb:33:f0:41:
62:0b:a2:90:07:1a:9f:0d:75:e3:69:a5:ad:48:07:
07:75:a0:06:fb:2b:8b:60:3f:5b:67:cd:cf:39:00:
9e:8d:ce:d6:38:b2:b6:eb:11:a7:09:fc:96:0c:63:
bf:62:81:7f:22:a3:72:88:ee:f5:af:83:d4:75:cf:
43:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E2:74:46:66:D8:56:67:D3:2F:36:AE:B9:2E:A2:7B:B8:EE:84:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f43df0-3cfb-43e0-a105-fe66a8e76407/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f43df0-3cfb-43e0-a105-fe66a8e76407/1/BuJ0RmbYVmfTLzauuS6ie7juhNc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.156.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:d8:08:cc:f3:8b:ce:44:c0:d4:71:8a:ae:14:86:64:0e:53:
c5:40:33:4e:a4:46:85:df:30:10:16:1a:c4:ab:7e:72:fc:8e:
17:9f:32:52:76:87:66:8c:58:32:e1:c0:c2:86:64:b5:b3:0e:
3b:01:b3:8e:9b:3f:8c:77:8f:68:22:dc:e5:42:6f:31:a2:11:
47:88:7c:6d:0b:db:e0:66:69:90:6e:96:b6:47:a0:4b:9a:47:
3a:d9:73:74:a6:53:cd:ab:04:9d:a3:d2:5e:fc:c5:2b:24:a5:
8a:47:5a:74:8a:31:af:5c:99:42:a4:eb:4a:48:a5:87:00:55:
e9:8f:e2:2a:dc:84:66:7a:a3:c7:59:0f:70:c3:3a:46:bd:26:
eb:03:6d:65:43:49:c8:4a:7f:79:df:4e:8f:36:ca:f1:ab:15:
3a:88:c9:33:1b:08:bd:78:1d:13:59:b9:da:22:84:c1:2a:97:
31:37:42:f9:6c:89:b1:5d:e5:1b:7e:67:54:68:8a:d8:26:e3:
07:6b:c2:ee:84:6f:bc:5d:fd:b4:5e:b5:61:57:93:39:d9:ac:
2b:bb:e8:53:d3:40:03:69:c7:f0:50:d8:09:90:55:8a:52:93:
0e:da:4b:40:08:8c:f6:2a:c5:da:1f:e1:7f:ef:76:3c:fe:fe:
2b:fc:70:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:48 2024 by rpki-client on console-fra.rpki-client.org