Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N1KdV6bbHsgny65EatOfOdGlGdo.cer
File: N1KdV6bbHsgny65EatOfOdGlGdo.cer (raw, json)
Hash identifier: ht7Id6vT5LurPeZQctNY9H1hCzC9XAlUDiiwulmYKzs=
Subject key identifier: 37:52:9D:57:A6:DB:1E:C8:27:CB:AE:44:6A:D3:9F:39:D1:A5:19:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 98E6A326DE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/5b2fd4-f5c5-4e0c-98e8-e17073d3623d/1/N1KdV6bbHsgny65EatOfOdGlGdo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/5b2fd4-f5c5-4e0c-98e8-e17073d3623d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:51:43 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.129.84.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656704480990 (0x98e6a326de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:51:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37529d57a6db1ec827cbae446ad39f39d1a519da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:f7:c4:0f:41:ce:d3:f4:3e:a0:64:e6:15:
6f:04:28:51:78:50:84:60:2e:47:31:7b:da:f1:bd:
95:3d:bb:61:47:8f:fd:d0:25:78:0f:2f:f9:14:50:
b5:13:8b:01:6f:28:6f:0a:37:6a:0c:1e:7b:26:b0:
2f:61:f2:a4:80:04:0d:f3:59:f3:b7:ab:74:80:f0:
5d:a6:db:c2:20:bf:69:b6:ca:6f:3b:8a:cf:a3:e7:
b7:d5:78:7a:d5:9a:ed:92:9d:ee:5f:51:be:02:c1:
c6:b0:e7:6e:30:ab:57:7a:5a:b8:64:71:d2:2a:a4:
c5:4b:4c:99:e2:c1:c4:3d:ad:0b:b6:2a:c0:5e:28:
dd:46:fa:2f:d3:16:5d:43:b4:73:65:12:29:cc:4d:
0b:09:e6:27:56:30:bd:6b:e0:a4:07:6d:df:35:64:
bc:0f:35:4e:2a:82:6f:ee:c5:f0:36:c5:a0:16:66:
fc:7c:5b:94:61:f6:db:c7:49:eb:11:15:d6:64:75:
9e:76:5b:8d:e7:52:64:39:1b:2b:cc:78:a0:96:fe:
b2:39:9c:5f:a0:db:97:b0:ef:bd:5d:22:e0:7c:b6:
22:ce:3e:de:32:cc:46:ed:6c:e4:63:95:27:c3:ce:
00:0d:ba:0f:b6:99:e3:dd:04:d4:a9:ee:25:48:50:
53:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:52:9D:57:A6:DB:1E:C8:27:CB:AE:44:6A:D3:9F:39:D1:A5:19:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b2fd4-f5c5-4e0c-98e8-e17073d3623d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b2fd4-f5c5-4e0c-98e8-e17073d3623d/1/N1KdV6bbHsgny65EatOfOdGlGdo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.84.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:a9:5b:e1:6f:ad:b9:c8:dd:df:ef:84:2e:17:69:7c:b3:8a:
90:39:ed:09:35:9a:70:17:f5:66:b4:0c:d5:12:7f:1f:de:68:
43:e8:bc:cd:22:e1:cf:1e:2f:13:29:3c:4a:c1:10:5c:49:05:
42:76:b3:46:55:65:9d:15:ec:5e:9d:82:f0:db:39:83:0e:5a:
09:a9:b0:fe:2c:f5:a0:d3:21:23:b0:16:20:68:9d:8a:ce:5a:
9a:47:1d:71:4f:4d:54:47:2e:c1:3b:1f:ff:c5:09:8e:2f:8b:
bb:e2:98:37:f3:0f:3a:d4:65:6f:fc:64:32:14:fd:50:ed:ca:
27:d4:4d:2e:4b:ef:55:d8:a8:dc:aa:8b:02:57:74:58:79:a4:
f9:2b:27:0b:da:d6:2f:b9:2f:be:1a:fb:b2:07:ca:20:a8:b9:
1b:93:c5:85:82:19:41:0d:1e:16:83:7b:4e:7d:47:ca:b2:56:
a4:33:db:d9:8b:ca:0b:68:72:d5:4e:80:a6:a3:9a:fb:fe:f9:
55:92:ba:60:77:cc:58:fc:e5:0d:59:d6:a4:ca:97:7e:ea:8b:
4e:d1:c8:c2:73:55:29:57:ea:fc:1e:dd:99:ca:2e:d7:7b:96:
8d:21:b4:52:07:4d:d0:ff:f8:00:a9:3e:c3:a7:26:da:7a:f9:
6f:93:81:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:26 2024 by rpki-client on console-fra.rpki-client.org