Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SPRCLqm0GTEROAExolUPFmbcd2w.cer
File: SPRCLqm0GTEROAExolUPFmbcd2w.cer (raw, json)
Hash identifier: c6hSPNm94WoVuSALZ5EdMBSEP2Rzh2p4+0H312mV14U=
Subject key identifier: 48:F4:42:2E:A9:B4:19:31:11:38:01:31:A2:55:0F:16:66:DC:77:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B15A64B6D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/40618a-772b-4981-9b2d-a9c285d6ec60/1/SPRCLqm0GTEROAExolUPFmbcd2w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/40618a-772b-4981-9b2d-a9c285d6ec60/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 05 May 2022 17:15:04 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.155.48.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 761725761240 (0xb15a64b6d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 5 17:15:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48f4422ea9b4193111380131a2550f1666dc776c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:e0:5d:45:ed:69:07:93:33:87:4d:88:2b:
48:e3:66:10:67:2f:5e:c2:28:9f:64:d0:be:a2:e8:
16:8e:69:d4:63:e5:e8:a2:81:4e:d4:dd:fc:51:0d:
62:ab:a0:55:32:b6:08:fc:3f:7e:e2:0f:6c:cc:30:
b8:bd:3a:4e:b4:28:ca:23:9a:6e:49:26:b1:28:f7:
3d:09:b9:4b:cc:8a:a0:95:7a:40:eb:9d:45:02:5f:
79:a9:f1:ce:a5:b5:81:28:77:4b:2c:5d:3c:dd:71:
bb:8f:36:07:67:54:2a:9d:1a:18:66:c3:af:11:1e:
1a:9f:e3:3a:55:81:a6:b7:f4:bf:f3:bf:81:56:06:
73:91:30:02:ed:36:29:03:17:db:13:de:d5:71:98:
28:92:2d:4a:17:37:87:7f:24:6d:ea:28:df:ab:f5:
51:17:ed:38:c8:aa:b6:7e:b6:f6:4d:ef:f8:e0:f2:
ea:5d:c2:f3:24:eb:4d:d1:8b:fe:b3:32:b3:07:d4:
29:ac:74:b7:47:e5:1d:c2:44:dd:97:2b:2b:49:38:
a8:4b:df:dd:50:b2:2e:f7:29:f8:03:83:55:30:46:
9c:cf:57:c1:54:8b:db:2d:b5:1c:88:d3:67:a7:03:
f0:35:ae:24:98:eb:e8:27:47:df:b1:b9:ee:7c:0c:
6d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F4:42:2E:A9:B4:19:31:11:38:01:31:A2:55:0F:16:66:DC:77:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/40618a-772b-4981-9b2d-a9c285d6ec60/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/40618a-772b-4981-9b2d-a9c285d6ec60/1/SPRCLqm0GTEROAExolUPFmbcd2w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.48.0/22
Signature Algorithm: sha256WithRSAEncryption
95:84:4e:3e:9d:00:9f:41:62:d0:35:f8:45:db:76:c2:d4:22:
41:45:c1:da:65:81:ae:52:c7:4a:cd:58:49:62:03:50:3d:95:
d1:38:2d:d2:98:dc:63:ff:16:c6:b8:54:d4:db:03:17:b3:9b:
99:65:86:0f:0f:fc:b0:b2:14:67:5a:1a:e0:8e:c7:94:d5:42:
b5:f2:38:cf:09:4c:c5:37:c6:45:2a:28:2e:72:6d:20:76:ef:
3e:79:b0:a1:36:ac:b2:96:e8:4a:4b:79:35:db:a1:5c:68:d4:
2f:6c:fd:cc:75:ff:a4:2a:c3:3d:a7:5c:0f:bf:0d:aa:38:a0:
aa:fd:82:5b:6d:b7:e0:b0:d9:90:d1:07:d3:e0:09:1b:31:de:
48:bf:6d:ee:71:21:34:00:fa:50:e0:86:2f:8f:59:3c:1b:63:
62:ab:c4:11:6c:73:57:e6:c6:97:7c:db:95:71:d4:d6:50:37:
c2:b7:c1:5f:db:e0:dc:f4:b2:cd:a7:d2:7c:c6:6c:81:cb:46:
af:16:74:64:0d:17:26:df:50:67:8a:b5:fd:a1:cf:ea:00:60:
d7:3b:51:fa:5e:52:e0:6c:44:8b:a0:d4:57:b1:2f:9d:2d:57:
a9:9e:f2:98:0a:20:07:74:86:21:3f:1b:f9:de:3b:de:0d:e6:
92:4f:97:49
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGALFaZLbYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
NTA1MTcxNTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0OGY0NDIyZWE5
YjQxOTMxMTEzODAxMzFhMjU1MGYxNjY2ZGM3NzZjMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAlhbgXUXtaQeTM4dNiCtI42YQZy9ewiifZNC+ougWjmnU
Y+XoooFO1N38UQ1iq6BVMrYI/D9+4g9szDC4vTpOtCjKI5puSSaxKPc9CblLzIqg
lXpA651FAl95qfHOpbWBKHdLLF083XG7jzYHZ1QqnRoYZsOvER4an+M6VYGmt/S/
87+BVgZzkTAC7TYpAxfbE97VcZgoki1KFzeHfyRt6ijfq/VRF+04yKq2frb2Te/4
4PLqXcLzJOtN0Yv+szKzB9QprHS3R+UdwkTdlysrSTioS9/dULIu9yn4A4NVMEac
z1fBVIvbLbUciNNnpwPwNa4kmOvoJ0ffsbnufAxt+QIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFEj0Qi6ptBkxETgBMaJVDxZm3HdsMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4LzQwNjE4YS03NzJiLTQ5ODEt
OWIyZC1hOWMyODVkNmVjNjAvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvNDA2MThhLTc3MmItNDk4MS05
YjJkLWE5YzI4NWQ2ZWM2MC8xL1NQUkNMcW0wR1RFUk9BRXhvbFVQRm1iY2Qydy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCLZswMA0GCSqGSIb3DQEBCwUAA4IBAQCVhE4+nQCfQWLQNfhF23bC
1CJBRcHaZYGuUsdKzVhJYgNQPZXROC3SmNxj/xbGuFTU2wMXs5uZZYYPD/ywshRn
WhrgjseU1UK18jjPCUzFN8ZFKigucm0gdu8+ebChNqyyluhKS3k126FcaNQvbP3M
df+kKsM9p1wPvw2qOKCq/YJbbbfgsNmQ0QfT4AkbMd5Iv23ucSE0APpQ4IYvj1k8
G2Niq8QRbHNX5saXfNuVcdTWUDfCt8Ff2+Dc9LLNp9J8xmyBy0avFnRkDRcm31Bn
irX9oc/qAGDXO1H6XlLgbESLoNRXsS+dLVepnvKYCiAHdIYhPxv53jveDeaST5dJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:50 2024 by rpki-client on console-ams.rpki-client.org