Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UnnN-4qJj_c5vBkaX2ZWWN9776s.cer
File: UnnN-4qJj_c5vBkaX2ZWWN9776s.cer (raw, json)
Hash identifier: c551m864R2F1KAQ/1SN6QgDifuZA6fP6hp1a8hay5As=
Subject key identifier: 52:79:CD:FB:8A:89:8F:F7:39:BC:19:1A:5F:66:56:58:DF:7B:EF:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9F5457DAC5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/9e9849-abf7-4eb4-8b19-5309858d06ff/1/UnnN-4qJj_c5vBkaX2ZWWN9776s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/9e9849-abf7-4eb4-8b19-5309858d06ff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:59:42 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.130.40.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684314843845 (0x9f5457dac5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:59:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5279cdfb8a898ff739bc191a5f665658df7befab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:61:dc:5a:93:86:34:9d:14:df:f8:fa:01:d1:
1a:7b:25:49:f6:b2:17:16:41:e0:84:43:57:00:6d:
09:29:9b:0b:7b:c8:71:84:18:c3:a4:be:a3:b6:2c:
44:b2:47:3a:8b:3d:33:74:f1:37:55:34:82:64:78:
98:77:15:b3:64:e8:de:c2:3d:7c:b1:a6:c6:3d:7a:
f9:4f:48:c3:d4:38:04:71:9f:08:2b:7a:98:89:77:
ea:b5:c3:ca:73:b9:c4:94:92:d0:72:1f:42:f6:24:
e5:29:1a:d3:69:91:1f:de:b3:1c:0c:c2:10:fa:ca:
69:e1:f2:4a:01:5f:95:27:1b:fe:5f:a9:85:02:d6:
57:90:62:bf:b1:d7:68:25:36:d2:fb:90:78:3a:bc:
a1:ee:ab:f5:11:fd:a1:7b:b7:36:7e:07:5b:57:d2:
0c:da:a7:69:33:6d:f5:83:95:67:eb:96:e7:f6:a1:
96:0e:83:78:33:ae:10:9f:1f:ab:fd:19:4e:3a:2d:
2f:5d:c1:15:0f:ac:85:ce:da:b6:16:fa:d6:e2:62:
93:9c:56:2f:f0:78:10:1b:a3:64:06:4a:fd:38:dd:
01:73:88:5d:93:82:4b:fa:a5:d0:b6:1b:99:ba:df:
c8:98:37:02:3f:c7:74:cb:28:f8:d4:90:bd:6c:80:
7e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:79:CD:FB:8A:89:8F:F7:39:BC:19:1A:5F:66:56:58:DF:7B:EF:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9e9849-abf7-4eb4-8b19-5309858d06ff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9e9849-abf7-4eb4-8b19-5309858d06ff/1/UnnN-4qJj_c5vBkaX2ZWWN9776s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.40.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:22:f5:e1:9e:56:9f:1c:27:43:57:a1:9a:9c:87:02:81:bc:
65:fd:ce:52:60:da:0c:ae:a8:c2:86:8d:b9:82:43:ae:f6:56:
0d:2e:75:4a:bb:76:be:6a:9a:7b:33:0b:25:72:48:e7:fa:c7:
60:e2:45:c9:c0:19:a8:66:59:9d:b4:30:18:23:f7:08:a2:8f:
32:de:f0:ae:45:68:23:19:6e:40:86:59:a7:37:74:00:c8:1c:
88:bf:4e:eb:ed:fd:3d:fd:4a:68:d3:29:1f:39:49:17:73:9b:
29:5e:c6:81:a1:1a:3c:72:a1:d4:53:b7:06:bf:fe:8f:4f:32:
58:e6:2c:c5:39:55:02:67:4d:17:a5:0f:ef:86:6d:20:8d:c6:
0d:50:9a:3d:d6:ff:f2:a2:4e:1a:47:5b:54:e6:eb:1a:99:68:
3c:e8:75:69:e2:97:aa:35:11:8a:cf:6b:9f:a9:ea:8e:ea:e6:
6b:a0:e4:04:9d:a6:66:13:73:d5:d5:32:be:55:a8:54:11:3f:
8e:22:b4:d8:68:ab:88:11:e2:fc:3d:9f:91:ae:fa:ae:ee:d4:
d8:20:99:24:10:22:c1:af:15:fc:76:8d:e7:97:01:6e:4c:2d:
e3:8e:89:4c:c9:c1:8a:09:a8:27:0c:68:20:86:45:47:4c:3e:
bc:84:70:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:38 2024 by rpki-client on console-ams.rpki-client.org