Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Eezzizn_O8tW1yla2e9ntOHMRHg.cer
File: Eezzizn_O8tW1yla2e9ntOHMRHg.cer (raw, json)
Hash identifier: 6hPiyt5MIfteLnxKR4B1H+SCqfQpOfY+WMp19wUgIso=
Subject key identifier: 11:EC:F3:8B:39:FF:3B:CB:56:D7:29:5A:D9:EF:67:B4:E1:CC:44:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 99C19485DD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f1ad6-84b2-4d37-9162-3b15728f75b9/1/Eezzizn_O8tW1yla2e9ntOHMRHg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f1ad6-84b2-4d37-9162-3b15728f75b9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:01:01 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.88.64.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660377732573 (0x99c19485dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:01:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11ecf38b39ff3bcb56d7295ad9ef67b4e1cc4478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:91:5e:a6:f1:b3:08:86:45:f0:70:9d:fc:e7:
c9:b8:0a:7a:42:8b:51:32:c6:46:7b:8e:72:ff:15:
2d:7c:bd:47:5c:6d:1d:9e:32:15:bc:ba:6b:bb:ce:
03:41:72:55:fc:bc:c7:1a:28:37:08:1a:b9:d0:39:
10:da:a5:6e:52:f9:16:8c:99:6c:e4:e2:2c:e3:33:
74:94:11:e3:4c:30:dc:2d:94:38:6b:30:77:09:32:
b9:90:4f:4b:ec:52:15:a3:ca:e2:c1:62:f4:c0:c3:
14:31:a9:e4:8f:e4:1c:7e:29:72:48:46:b3:26:a9:
ed:f4:eb:e5:7f:26:07:25:e5:48:84:3a:18:7e:80:
16:d3:f9:0e:48:f0:cc:df:da:8f:78:87:26:c7:37:
cf:52:1d:16:17:17:bb:6f:d0:74:14:eb:14:47:d1:
11:c1:72:40:cb:e7:15:7c:48:4c:4e:f5:f6:72:e6:
6d:21:58:ae:ec:77:d2:d4:1b:5d:74:05:ed:05:6c:
6d:22:08:37:07:88:4f:3d:cb:87:0c:c9:60:06:c2:
37:61:32:c7:4f:d1:91:56:d4:43:9d:17:0a:58:29:
99:1e:1c:aa:f9:6c:69:0b:59:a2:f2:c7:33:78:04:
6b:eb:9e:54:fb:90:6b:05:5d:27:6c:bd:d5:70:24:
8d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EC:F3:8B:39:FF:3B:CB:56:D7:29:5A:D9:EF:67:B4:E1:CC:44:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f1ad6-84b2-4d37-9162-3b15728f75b9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f1ad6-84b2-4d37-9162-3b15728f75b9/1/Eezzizn_O8tW1yla2e9ntOHMRHg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.64.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:f1:b8:8a:3b:6a:70:bf:26:79:2f:04:9a:98:8a:14:93:90:
91:9f:d0:01:35:a0:ea:72:19:b0:84:0f:9f:b7:e7:2a:95:06:
52:29:c8:dd:c5:83:61:ab:a5:85:f1:a7:b7:1e:84:08:71:6e:
fb:2b:03:d3:c8:ee:0d:7f:6b:46:98:61:7f:f3:48:d5:f1:55:
8a:c0:7c:eb:d9:d0:44:d3:88:14:a3:37:f3:51:04:18:84:d4:
7d:80:73:ce:34:81:1b:cd:0e:d5:d7:ce:6a:06:73:8a:80:68:
fb:f3:57:21:fb:f1:e5:85:a0:7d:50:45:3e:81:54:fa:d1:b7:
59:3a:03:29:8c:8e:e9:ca:06:f2:91:08:d3:c3:65:1a:ee:14:
7e:1b:e1:42:52:b9:b4:e9:62:11:91:47:55:4e:04:7f:a1:5f:
f5:a3:bb:f0:b9:9b:5c:f1:89:2f:60:a8:ec:c0:25:1c:37:39:
12:d5:c8:3c:75:20:d4:e3:8b:08:18:e0:0e:e7:55:f3:da:d2:
b1:be:7c:b6:bc:62:53:89:5c:66:9d:ad:89:67:32:a8:f0:52:
31:bf:df:09:47:3e:3d:1c:7d:2a:de:49:9d:91:b3:7b:ea:1f:
35:5d:2e:cd:90:48:72:89:b3:f9:b5:db:2a:22:5f:1d:fd:ce:
a1:ae:7d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-fra.rpki-client.org