Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Rc0qtKbTJrHv000HIYEFlwmeXLs.cer
File: Rc0qtKbTJrHv000HIYEFlwmeXLs.cer (raw, json)
Hash identifier: cieCxQ6g305HpAk4wMdNx8keQJovsRU2epH47FEPv1w=
Subject key identifier: 45:CD:2A:B4:A6:D3:26:B1:EF:D3:4D:07:21:81:05:97:09:9E:5C:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A94E613299
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/e4fcb0-ab2e-4f62-bb91-bf21d5ef7bb1/1/Rc0qtKbTJrHv000HIYEFlwmeXLs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/e4fcb0-ab2e-4f62-bb91-bf21d5ef7bb1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:55:42 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.21.135.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 727164465817 (0xa94e613299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:55:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45cd2ab4a6d326b1efd34d0721810597099e5cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:50:b6:9d:31:a7:9c:3e:6f:7e:66:1b:a4:99:
c0:47:68:e9:52:f3:7a:ef:95:ea:23:12:b6:38:1c:
ae:5a:2b:4b:c5:24:83:2e:19:90:b8:a9:db:e9:51:
90:98:fd:a1:7f:d4:58:51:cd:02:c3:12:e5:9b:dc:
7c:65:90:e8:91:3d:f9:08:8c:90:3f:6f:91:6a:94:
cd:d5:ae:1d:fd:25:e6:ee:a8:b0:69:5b:17:02:eb:
5a:a8:a0:c9:dc:b8:a0:8f:7d:df:54:b4:b6:d3:67:
4c:9b:bc:83:78:29:37:5e:06:99:e3:cb:51:63:17:
2d:62:ad:83:70:d0:25:da:b7:4d:7c:2c:b7:87:95:
8c:df:f3:14:c9:97:4d:b3:8b:17:f2:1b:e5:17:7e:
54:98:6d:d5:81:b3:d9:9d:f1:06:20:4a:e7:68:5a:
30:1a:7a:05:33:a0:90:03:25:1e:b0:76:13:af:f9:
21:62:6b:37:69:43:c7:14:09:0d:33:77:10:67:90:
dd:3c:03:7b:b7:f2:0e:d2:28:63:d4:2e:90:92:07:
7d:68:73:78:2e:af:97:0f:61:39:97:52:95:c0:69:
a3:d6:b6:35:19:fa:cd:b5:20:f9:76:e2:6e:84:f9:
32:f2:ab:1e:f6:cd:21:2b:7d:64:0e:45:df:d0:8f:
c8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CD:2A:B4:A6:D3:26:B1:EF:D3:4D:07:21:81:05:97:09:9E:5C:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e4fcb0-ab2e-4f62-bb91-bf21d5ef7bb1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e4fcb0-ab2e-4f62-bb91-bf21d5ef7bb1/1/Rc0qtKbTJrHv000HIYEFlwmeXLs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.135.0/24
Signature Algorithm: sha256WithRSAEncryption
09:3a:d8:34:92:39:b9:0d:5e:12:ca:2a:36:8f:f8:93:96:14:
f8:dd:ee:e4:cc:8f:ae:8e:e9:d9:a0:d7:13:1c:c3:b5:66:cc:
a1:cf:ef:f0:d8:14:43:28:31:b7:35:3e:3c:86:08:a2:64:74:
c6:12:12:28:ea:49:42:9b:70:ee:f2:aa:bb:50:5f:3d:5c:ba:
4f:21:75:ed:8b:be:3b:aa:46:7b:e3:11:a2:75:66:66:00:83:
07:e3:e7:91:10:4b:11:c1:70:30:29:48:85:3c:1f:fb:69:53:
ab:fb:e0:8e:47:36:bb:e4:d5:7d:51:51:4e:62:79:e7:be:0a:
b6:51:3e:2a:55:b9:48:d7:d7:05:a2:28:5d:87:01:8f:11:71:
82:bf:78:04:e2:b7:8e:c0:24:d6:57:d0:83:76:e4:64:b8:e6:
ca:90:37:65:6f:1e:8b:58:57:51:42:16:07:4d:26:67:a3:1b:
27:14:19:9b:62:91:b0:90:3d:18:99:76:86:75:cc:f0:2f:bf:
82:0a:33:f7:d8:3e:cd:a5:6b:5d:aa:7c:c3:64:1d:af:a3:30:
fa:11:8e:77:07:4e:06:88:8a:81:6d:ad:d2:7a:74:b5:77:dd:
84:3a:db:a8:4a:28:e8:e5:e0:ad:6e:71:33:3b:82:7f:6d:cd:
55:4d:c8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:37 2024 by rpki-client on console-ams.rpki-client.org