Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DYVOuBM8HATb0HPsu07j-hMCroY.cer
File: DYVOuBM8HATb0HPsu07j-hMCroY.cer (raw, json)
Hash identifier: L7ASeQqbTqJhB/0oPWizIyyI4dclE9HCOR9uBeB9mlI=
Subject key identifier: 0D:85:4E:B8:13:3C:1C:04:DB:D0:73:EC:BB:4E:E3:FA:13:02:AE:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A9BD61BE14
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/85483e-a23c-44bf-9900-203495152c69/1/DYVOuBM8HATb0HPsu07j-hMCroY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/85483e-a23c-44bf-9900-203495152c69/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:00:59 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.84.96.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 729026772500 (0xa9bd61be14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:00:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d854eb8133c1c04dbd073ecbb4ee3fa1302ae86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:ac:49:fb:0b:b8:7d:08:52:f5:ca:1b:d2:
ae:ed:bb:21:fe:3c:d7:de:f1:dc:07:18:a0:91:33:
8d:2b:95:90:ed:b3:b5:f1:fd:e8:e0:07:00:bd:4c:
de:2c:ff:c2:59:cb:9f:8d:93:dc:88:82:cc:68:97:
ed:86:f8:66:22:6e:32:6e:97:c7:e1:7b:0f:ae:f2:
28:41:ee:a2:53:5c:00:0e:82:25:f6:c7:cd:a2:d4:
ef:bc:d7:e8:bf:5e:80:27:62:e8:10:41:ad:d0:18:
cd:dc:f5:c6:7d:30:07:ca:fd:a8:b3:63:9a:38:97:
dd:7c:e3:28:65:74:75:16:a6:45:69:0d:2a:5d:90:
8f:86:ee:66:39:7d:cb:da:68:2e:53:0f:d0:84:87:
38:36:78:da:d9:a8:56:52:7b:7d:c1:fa:37:00:b7:
18:b3:6b:f0:91:45:48:53:a0:4d:7a:51:26:6b:29:
cf:21:9f:f4:b8:a6:1c:57:9e:e2:e8:20:d7:07:37:
c5:33:21:8f:53:70:d5:d2:22:f2:db:09:19:69:77:
44:91:63:e8:f3:16:52:c4:78:f9:f4:af:2f:40:70:
3a:0d:73:1e:b9:d1:05:5b:0d:77:59:ee:e3:34:7e:
ae:2a:24:38:e1:46:af:0c:a2:6c:7c:00:6a:0a:32:
a7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:85:4E:B8:13:3C:1C:04:DB:D0:73:EC:BB:4E:E3:FA:13:02:AE:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/85483e-a23c-44bf-9900-203495152c69/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/85483e-a23c-44bf-9900-203495152c69/1/DYVOuBM8HATb0HPsu07j-hMCroY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.96.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:fd:df:4e:49:1e:b1:b4:ff:4c:ba:96:cb:42:4c:7e:70:80:
7d:b7:28:1b:00:4e:59:eb:f8:86:fc:7e:12:3f:4a:ac:cd:48:
3f:7c:6b:59:3b:94:e7:5f:f8:6d:fe:ce:e2:7d:b6:40:f2:d2:
4a:ed:a5:b0:3b:76:21:79:40:c3:59:90:db:4b:ac:b6:6e:6b:
72:ad:5a:f3:4e:5d:2c:4e:7f:0b:79:1e:92:01:21:6b:e5:a9:
64:99:da:df:cd:6f:9f:e6:5c:d7:31:dd:37:f9:5e:59:5e:c9:
9a:49:e4:83:44:83:9c:a7:93:fd:cc:39:64:3d:eb:8f:f6:2f:
a4:fc:80:96:2d:29:94:6a:74:6d:cf:03:cb:30:04:62:07:c9:
b8:5a:05:cc:ed:a4:26:24:d1:3f:f4:ec:d5:81:a1:45:95:76:
c0:49:d0:12:e4:07:25:28:a7:fa:e4:73:9f:73:49:a5:2f:81:
ae:f5:79:ec:63:5b:d6:b1:a5:b4:9a:00:9e:23:29:89:61:9c:
24:45:2f:6f:ef:ac:c8:a7:0a:69:c9:74:a7:84:c8:92:38:9a:
2c:03:c2:ec:4e:f9:b9:c4:e7:0b:34:84:40:ee:47:fe:b3:0f:
b6:49:f1:0a:30:6e:a0:37:f3:b0:47:72:39:a2:a3:ac:3c:06:
c0:4a:9f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:28:01 2024 by rpki-client on console-ams.rpki-client.org