Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I4s2N8QqgRcjuVdr_3tv8zM-9s8.cer
File: I4s2N8QqgRcjuVdr_3tv8zM-9s8.cer (raw, json)
Hash identifier: myEplmSKRdFUjmTy6+347eIgO901KhDjfYu9lmboiAw=
Subject key identifier: 23:8B:36:37:C4:2A:81:17:23:B9:57:6B:FF:7B:6F:F3:33:3E:F6:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9BA8DE9B17
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/6c71c4-1869-4064-b87f-ab879256b4db/1/I4s2N8QqgRcjuVdr_3tv8zM-9s8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/6c71c4-1869-4064-b87f-ab879256b4db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:55:51 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.89.244.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 668553091863 (0x9ba8de9b17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:55:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=238b3637c42a811723b9576bff7b6ff3333ef6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:72:a8:07:9b:9d:bb:01:6a:e8:c2:b6:25:f2:
1c:d1:24:f2:e9:21:1d:48:7f:83:95:dc:e3:12:2b:
41:7e:ee:23:94:4f:21:ff:34:70:96:e1:9e:52:e3:
cd:9c:23:25:8e:cf:40:04:f1:f2:14:f4:7b:3c:e6:
24:da:4e:c9:ea:5b:b8:b7:ff:13:f6:b4:dd:cb:a3:
b2:85:16:cc:2a:9a:6e:43:d7:ee:73:66:8d:43:03:
68:70:22:f6:d4:68:49:4d:96:d3:52:02:ba:66:5a:
56:db:14:23:a1:37:37:21:c5:97:5f:85:8c:54:0c:
98:20:e4:a0:5e:05:f0:cd:10:0e:9f:84:b5:e1:a9:
11:ac:22:68:fd:5e:c2:40:f4:c9:9e:39:28:69:2e:
4e:d5:02:48:23:81:4a:7f:5c:bf:0b:50:85:cf:6f:
a2:4e:b8:bf:69:53:f9:46:41:22:13:00:0b:61:72:
b6:47:6e:f4:d0:a2:a6:f1:d3:50:8e:3f:e3:8a:de:
7d:d5:ed:c1:c7:28:40:d9:97:e1:ab:50:03:7a:65:
8d:6c:02:4f:02:cc:24:52:86:71:72:3d:35:fb:86:
d7:14:d5:f0:03:5a:9d:78:5a:d7:ac:6a:e0:cf:2d:
ea:db:3e:58:e6:37:8d:5f:d7:63:62:9c:4b:08:a5:
94:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8B:36:37:C4:2A:81:17:23:B9:57:6B:FF:7B:6F:F3:33:3E:F6:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/6c71c4-1869-4064-b87f-ab879256b4db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/6c71c4-1869-4064-b87f-ab879256b4db/1/I4s2N8QqgRcjuVdr_3tv8zM-9s8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.244.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:d2:4d:5f:c4:2b:b2:d7:18:69:17:b5:ac:33:28:85:03:f9:
f6:0e:e0:50:b2:cc:b6:5a:84:78:91:89:a3:2b:db:e6:69:e0:
12:76:31:c7:b9:f7:9e:90:1a:3d:b5:cb:ae:ce:f3:6f:c1:7c:
15:08:82:16:bb:2a:60:83:e1:50:79:67:ef:a8:2c:fe:84:4b:
ad:9c:80:c1:14:bf:08:2e:52:4b:51:ff:ce:56:7c:8e:28:65:
7c:0a:3c:57:1c:39:ee:81:84:7d:e8:da:dc:5a:bb:db:e8:cd:
62:04:42:ec:cb:de:7d:df:07:6e:cd:33:33:2f:cc:d7:41:15:
8a:88:f9:d4:64:7a:48:92:82:85:51:2c:69:8c:cd:67:f2:c3:
d7:bd:b6:66:e6:f3:a3:7b:0b:86:8b:0f:68:60:f4:fe:4a:5a:
4d:6e:77:da:76:a5:5b:70:56:60:ae:c2:b6:d2:d7:6b:bc:ae:
98:d7:78:bf:60:a6:3e:32:58:9b:1e:ab:29:d8:06:b1:0d:d9:
67:5a:99:85:da:83:69:31:ae:b6:b8:77:65:f0:a8:54:0f:c8:
12:20:df:cc:be:0e:41:1a:d7:62:77:2f:5b:3d:1a:c1:af:ae:
54:8d:78:6f:de:03:08:13:10:e4:00:b8:22:aa:a7:82:44:65:
7d:35:42:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:15 2024 by rpki-client on console-fra.rpki-client.org