Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RBPVOWmP5_iS8WRhD8xrlZYIdd8.cer
File: RBPVOWmP5_iS8WRhD8xrlZYIdd8.cer (raw, json)
Hash identifier: Ct8XXWcyfyYBU0ZE6Er6PSwPm8W7PXAwWr+NQj7KONU=
Subject key identifier: 44:13:D5:39:69:8F:E7:F8:92:F1:64:61:0F:CC:6B:95:96:08:75:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9DA7D303ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/7b1eb6-548d-433e-b2e5-3b3364695ae5/1/RBPVOWmP5_iS8WRhD8xrlZYIdd8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/7b1eb6-548d-433e-b2e5-3b3364695ae5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 04:52:57 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.130.96.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677125489645 (0x9da7d303ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:52:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4413d539698fe7f892f164610fcc6b95960875df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:bf:5d:da:3e:9c:fb:1f:19:19:08:15:c9:
f4:7f:1f:dc:cf:3c:96:cd:cb:5b:45:76:e6:70:1a:
94:fa:82:6f:76:67:0f:66:d8:96:42:03:46:bd:fd:
5f:80:ac:1b:29:b5:35:bb:56:1d:bd:b0:a2:a5:6f:
0c:c5:71:db:b7:c4:57:ac:27:cc:41:45:3e:3e:da:
07:20:77:7c:73:58:2f:5a:e3:46:a8:93:56:dd:70:
a0:fb:82:90:c1:ff:87:22:4d:7f:06:84:d3:4d:f0:
9a:74:b2:d1:b5:7e:38:15:27:44:31:16:9e:38:c9:
16:a9:1d:01:9f:37:a2:69:0e:d2:9d:6c:60:0e:d0:
5b:12:40:af:e6:85:68:4a:25:77:ca:00:b1:ad:04:
e3:45:34:bb:3b:7c:a6:b0:fc:86:0f:1c:ff:fd:15:
08:9e:67:b5:68:c9:47:b6:2a:74:7e:65:e1:71:0e:
69:f3:af:fc:5c:15:26:68:9a:02:3b:5e:77:aa:de:
bc:6f:d5:59:3b:26:6b:68:78:4e:0e:01:8b:7c:85:
3c:04:52:62:c8:f5:15:dc:87:a7:1c:6e:eb:44:14:
82:4a:40:b1:a3:ca:f5:c7:36:a5:90:1c:60:f9:d3:
bb:15:9a:2f:60:5c:85:35:a4:ac:68:52:3d:a4:7b:
91:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:13:D5:39:69:8F:E7:F8:92:F1:64:61:0F:CC:6B:95:96:08:75:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7b1eb6-548d-433e-b2e5-3b3364695ae5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7b1eb6-548d-433e-b2e5-3b3364695ae5/1/RBPVOWmP5_iS8WRhD8xrlZYIdd8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.96.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:95:76:76:de:11:4d:90:11:d3:9f:43:dd:be:de:22:76:85:
4a:0b:56:07:ec:96:7f:f8:7b:16:4e:fe:b2:dc:0f:95:6d:e0:
9c:71:69:cb:b2:b4:24:f6:a8:d5:af:a0:dd:dd:2e:0b:6a:88:
5a:51:92:bb:b1:30:20:07:d1:5a:10:53:60:f5:e3:fe:50:48:
64:33:39:5e:0c:86:19:d6:7a:72:78:d5:28:ae:90:13:30:13:
0a:2f:b6:f9:d9:ad:36:9b:d1:7a:5a:1b:d7:05:6e:ef:b3:c4:
0c:e4:40:ca:65:c1:8e:2a:6a:7a:f2:0c:b8:9f:c9:d1:d5:c1:
82:68:1b:8d:89:a7:1e:85:8d:9f:01:7d:be:81:83:4d:e7:d0:
fe:d7:bf:a3:1f:64:de:5e:6e:5f:61:11:93:74:4c:f5:35:9a:
33:43:54:88:c8:a9:63:02:de:fc:47:97:dc:8d:b3:58:c5:54:
cc:34:fa:e9:b3:d5:dd:f6:46:b9:77:7d:11:0d:5e:45:75:04:
12:41:0f:65:bf:c7:d8:1e:17:e9:01:e8:5b:f1:44:39:7f:29:
4b:e0:78:69:42:de:dd:6d:3f:ca:28:53:7b:45:8c:77:ed:9d:
df:53:30:7b:5f:5c:c0:d2:1d:61:3c:06:c9:db:c6:2e:63:b9:
74:48:91:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:26 2024 by rpki-client on console-ams.rpki-client.org