Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UnTopZXt-i57MorFYo7c75uQP5I.cer
File: UnTopZXt-i57MorFYo7c75uQP5I.cer (raw, json)
Hash identifier: QCU3mKb7TTC1M9oYX52HVwXzRFxDSbRhxl1KjXWSPHc=
Subject key identifier: 52:74:E8:A5:95:ED:FA:2E:7B:32:8A:C5:62:8E:DC:EF:9B:90:3F:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9CE50E3B9A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/143464-ecdb-4662-8fc4-037d36280a2b/1/UnTopZXt-i57MorFYo7c75uQP5I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/143464-ecdb-4662-8fc4-037d36280a2b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:56:14 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.133.92.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673857813402 (0x9ce50e3b9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:56:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5274e8a595edfa2e7b328ac5628edcef9b903f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:73:b2:eb:ab:ff:0b:04:4d:48:9b:0e:3a:78:
6d:88:5a:2e:3c:7a:b0:9c:06:0b:d3:9d:bd:be:4e:
40:e3:fb:43:59:ab:6e:06:54:98:bd:d4:89:a9:d8:
8d:af:88:63:6c:fe:0c:d0:bb:af:2c:6a:5e:88:d2:
1e:f2:7c:e3:c1:64:a2:ff:7f:73:29:ff:9f:bf:56:
7a:ef:5c:ea:25:44:f8:fc:4a:eb:fb:f6:93:3e:2d:
46:b7:f7:b1:a8:f3:87:43:e8:bd:52:94:d8:60:9f:
75:5a:ad:8a:c2:aa:fd:23:37:ef:cb:3a:42:8e:f1:
56:e1:f4:3b:b7:2a:63:40:9a:cc:c9:85:ba:6a:fd:
09:42:a6:40:e8:d3:50:13:c5:0d:fc:46:81:78:79:
8e:fa:65:82:6b:29:ce:92:f1:dd:3f:34:53:89:18:
45:28:f1:25:cd:8b:99:fa:8a:bd:cb:ac:96:b0:62:
4c:c4:e1:4f:d7:80:a4:be:a0:ee:96:cf:8d:81:56:
d0:5c:c0:a3:14:18:be:25:55:9f:30:66:2d:9b:69:
62:ac:53:ab:e8:2a:1d:94:99:20:6f:8a:e9:36:32:
1c:75:8e:19:37:e3:8e:f3:d3:a9:1c:cf:73:2c:1e:
91:01:73:e8:ea:87:9c:57:32:8e:37:73:8e:b6:ce:
fe:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:74:E8:A5:95:ED:FA:2E:7B:32:8A:C5:62:8E:DC:EF:9B:90:3F:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/143464-ecdb-4662-8fc4-037d36280a2b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/143464-ecdb-4662-8fc4-037d36280a2b/1/UnTopZXt-i57MorFYo7c75uQP5I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.92.0/22
Signature Algorithm: sha256WithRSAEncryption
59:73:1d:db:8f:23:ef:91:37:ce:1f:57:4f:55:98:fe:90:36:
a2:44:6f:f1:9b:df:f2:88:ab:33:8a:1b:87:03:00:49:d1:39:
13:df:84:c4:94:3c:ae:76:02:69:c1:8a:9e:70:e0:23:ce:80:
36:45:d5:fd:88:f5:ab:f2:a6:03:3a:6c:6d:ad:4f:8b:d8:f1:
ae:06:38:97:3d:48:c5:b1:82:f0:55:00:34:34:cf:f2:06:ef:
93:f8:ac:3b:7d:a9:b9:c4:b3:ed:59:b7:c4:34:3b:07:2a:6d:
29:8e:41:67:09:b9:1f:7e:a6:3d:13:12:b7:dc:62:4c:ef:13:
ef:5b:c4:1c:1a:80:65:a5:c6:81:b1:d9:ca:2a:72:33:b5:40:
02:a1:12:eb:a3:9e:a0:3c:e4:2a:bb:26:20:e2:29:9d:bd:4b:
f4:c8:af:28:15:a3:59:8c:7b:69:3e:da:ae:55:cc:36:e6:76:
15:92:82:6a:7d:9a:2b:89:45:32:58:c4:6f:c4:ab:e0:1d:18:
4a:82:52:3d:31:3f:c5:ba:76:e8:f8:a0:13:8c:2b:7e:59:f1:
8d:f6:df:6a:39:a9:a7:9b:be:f9:a2:3a:b2:63:49:c2:ae:c8:
21:3c:f6:6a:fe:87:78:9b:19:34:9f:84:6a:04:18:58:37:83:
a7:e2:f8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:38 2024 by rpki-client on console-ams.rpki-client.org