Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VYk1rwRl1Sv2qPGZmblOxemot8M.cer
File: VYk1rwRl1Sv2qPGZmblOxemot8M.cer (raw, json)
Hash identifier: 4YmuPbBxTNXmjbJZCfXAxJOVHcTbGe+8WnuFDO4UcAo=
Subject key identifier: 55:89:35:AF:04:65:D5:2B:F6:A8:F1:99:99:B9:4E:C5:E9:A8:B7:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9C00A07CBD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/133576-aded-4cd3-b0a1-e4793facd761/1/VYk1rwRl1Sv2qPGZmblOxemot8M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/133576-aded-4cd3-b0a1-e4793facd761/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:58:45 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.143.152.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670025415869 (0x9c00a07cbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:58:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=558935af0465d52bf6a8f19999b94ec5e9a8b7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1c:d9:ca:5c:7f:37:7d:2f:b6:1d:12:bb:88:
e2:3b:69:23:e8:14:3a:61:f6:6f:34:67:e5:b0:7f:
d3:a8:6a:cf:22:55:23:cc:ec:49:45:1b:3e:b6:b6:
4f:1e:e8:d5:86:60:df:c9:65:f9:cb:14:17:89:9a:
24:79:e3:a4:e1:30:e9:0b:9a:f1:24:f4:50:2c:20:
fa:7e:aa:a9:1f:4f:30:bd:ab:c2:42:e7:e7:ad:2c:
61:84:a9:46:97:d9:b5:b5:a7:8d:00:9d:fa:6b:8b:
da:c9:d6:bf:98:7c:ef:a2:39:f6:25:f9:3a:9c:4d:
08:73:4c:2e:f8:8a:91:ce:0b:bc:aa:36:c9:68:d7:
41:dc:d3:30:36:a2:3c:1c:86:cb:63:e3:1f:2e:af:
ab:17:0c:b6:22:f8:57:37:48:90:ad:6d:ec:84:d3:
c8:42:69:d3:57:5d:dc:42:4e:68:ef:bf:f3:3f:50:
15:34:80:94:f0:ba:80:09:55:6c:b3:9f:b9:e5:41:
21:cd:77:3d:e8:5e:f9:46:27:90:40:48:75:56:b8:
6e:d9:b2:ef:24:0d:6e:ea:71:7e:1b:9b:8f:8a:b7:
8c:6d:75:16:45:7f:98:65:60:e8:1b:e5:91:ba:8f:
cd:75:f5:bb:fa:65:f1:34:a3:08:98:9f:4b:35:0c:
8c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:89:35:AF:04:65:D5:2B:F6:A8:F1:99:99:B9:4E:C5:E9:A8:B7:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/133576-aded-4cd3-b0a1-e4793facd761/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/133576-aded-4cd3-b0a1-e4793facd761/1/VYk1rwRl1Sv2qPGZmblOxemot8M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.152.0/22
Signature Algorithm: sha256WithRSAEncryption
54:09:82:b1:a9:86:e1:06:ab:d7:95:53:9e:c6:e9:ba:2b:b3:
b4:e5:e1:b0:03:0a:9d:90:ac:f7:0c:91:c1:bf:d3:97:b4:3e:
f0:7d:8a:e5:06:be:cb:40:98:39:09:13:fa:c2:69:d4:ec:44:
e5:6a:5e:b7:11:09:4b:b4:74:56:58:6d:af:22:eb:d7:c3:ac:
3b:e1:4c:0c:25:38:4b:ac:22:99:98:26:92:7d:da:76:eb:71:
9b:4a:1f:94:8d:7f:29:be:4e:d3:ca:20:9a:e1:32:0c:19:9a:
0b:f9:24:2e:98:82:fe:ea:d9:3a:76:a8:e5:ea:d1:3d:98:8d:
ea:20:f4:e6:35:c5:16:ea:e4:8f:b0:80:62:06:a3:e7:eb:35:
42:7a:7b:63:59:17:2a:4a:96:76:db:93:0f:ce:aa:ba:e4:16:
a1:00:dd:61:68:1d:45:2d:bc:db:6a:1f:06:ae:5a:9e:ca:f2:
64:41:91:1a:6c:2c:f4:f9:36:eb:74:89:78:63:c4:b6:2f:d5:
cb:61:a9:6f:23:6e:17:63:a4:fb:2a:28:74:1d:6a:28:97:5e:
12:36:4f:94:a7:62:45:ff:6e:d4:59:cb:09:cd:ca:62:bd:d0:
aa:08:1a:12:73:39:e9:d8:e0:56:99:79:50:91:ac:0d:77:ea:
66:68:d8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:28 2024 by rpki-client on console-fra.rpki-client.org