Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MSTeLWt4Cz27X79bkm3LjS8MwQY.cer
File: MSTeLWt4Cz27X79bkm3LjS8MwQY.cer (raw, json)
Hash identifier: 9I6gjcJ/02HaFq876scdpJEYO7Ntp2VknE48mWk7VgE=
Subject key identifier: 31:24:DE:2D:6B:78:0B:3D:BB:5F:BF:5B:92:6D:CB:8D:2F:0C:C1:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A4A0E9140D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/MSTeLWt4Cz27X79bkm3LjS8MwQY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:54:35 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 141.98.4.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 707074266125 (0xa4a0e9140d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:54:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3124de2d6b780b3dbb5fbf5b926dcb8d2f0cc106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:62:38:89:d2:70:ca:c6:27:68:66:1c:b0:c7:
0b:c4:a4:32:36:af:4c:8a:56:d0:7e:03:23:c0:8b:
fa:78:3e:75:55:c5:ba:5e:87:48:0b:87:8e:74:c0:
70:42:7c:8d:b3:63:41:33:ff:68:85:ac:6d:72:c2:
56:5a:af:7d:6e:c4:0e:ce:cb:9d:37:ea:d5:51:b4:
ef:6f:4f:3a:99:0c:c3:40:6a:21:40:85:d0:ec:18:
8d:5b:34:5e:1a:8e:e4:0d:a8:dc:a1:be:c5:03:f1:
17:86:fe:28:31:93:26:04:3f:46:3a:e5:0c:e9:fc:
30:c1:56:65:aa:ff:25:78:9f:92:11:3a:65:3e:13:
fc:5f:0c:75:ce:7f:2b:88:06:df:ce:a9:6a:5a:53:
9e:2b:0c:06:fa:eb:e7:20:8b:a7:6f:fc:dc:74:59:
51:14:36:56:d5:12:1c:25:27:d0:5e:5d:04:ca:6f:
75:ea:44:3b:6c:bb:5f:b9:4d:a9:b8:95:df:dd:b7:
05:0a:1f:f8:3f:b3:56:f1:4d:8e:8a:1e:13:33:a4:
b4:0a:ec:bf:12:f2:80:ad:39:e1:c2:a4:6a:2d:cb:
80:d6:66:df:ff:f3:ca:06:40:32:8c:e2:78:07:4a:
f1:72:bb:2d:84:72:ec:ae:e6:78:33:f0:25:12:f3:
f6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:24:DE:2D:6B:78:0B:3D:BB:5F:BF:5B:92:6D:CB:8D:2F:0C:C1:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/MSTeLWt4Cz27X79bkm3LjS8MwQY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.4.0/22
Signature Algorithm: sha256WithRSAEncryption
52:e1:88:81:9e:2c:a6:84:9d:65:59:63:da:e5:ab:e6:c1:83:
88:4d:2f:c9:44:1e:71:bb:b4:36:e5:27:42:05:d4:10:16:29:
3b:15:69:4d:96:65:e8:7b:5b:1e:da:8b:43:f2:9b:75:29:4a:
45:c6:d0:48:23:55:8c:1f:cd:01:9d:03:e0:16:be:bf:a5:ec:
d5:20:12:b1:d4:9f:1e:1b:75:2f:30:51:0d:7a:29:3b:b6:0e:
65:a1:ef:dd:53:e6:8c:48:e8:29:c4:15:46:d9:b8:62:f7:55:
40:5d:39:df:90:2e:b3:6d:14:fc:65:cc:94:02:fb:ff:4d:02:
ae:0c:a1:c6:ec:dc:17:42:1d:12:c2:ae:09:a2:ef:3d:f2:ce:
f5:bd:5f:86:3c:9c:80:93:34:08:f9:c9:e9:57:a6:b3:c5:c1:
e5:56:7f:74:9c:a1:54:a8:eb:01:21:98:3c:80:78:a8:de:de:
4c:95:13:05:53:3c:a8:73:59:5d:2a:d5:37:da:18:d3:f7:d4:
fd:88:b5:7a:ff:d3:be:01:67:3b:58:33:b1:f7:98:36:67:ad:
ed:20:6a:79:b8:9d:18:9c:ab:cf:4e:ba:eb:b5:e0:10:58:c1:
15:a9:7d:28:2e:6f:d5:7c:65:30:f3:36:79:ad:7a:19:19:d8:
84:07:50:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:56 2024 by rpki-client on console-ams.rpki-client.org