Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X0J5eVjeXgYzYQb23Q1iO-Kl6xo.cer
File: X0J5eVjeXgYzYQb23Q1iO-Kl6xo.cer (raw, json)
Hash identifier: HzMh1uMIfnrWeoSZP/WM3jDDBY7SxMJ6LHgYtsas2Hc=
Subject key identifier: 5F:42:79:79:58:DE:5E:06:33:61:06:F6:DD:0D:62:3B:E2:A5:EB:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B03216EE5E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/076ece-6498-460f-8365-613d53415a8f/1/X0J5eVjeXgYzYQb23Q1iO-Kl6xo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/076ece-6498-460f-8365-613d53415a8f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 17 Apr 2022 12:47:13 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.141.8.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 756754607710 (0xb03216ee5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 17 12:47:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f42797958de5e06336106f6dd0d623be2a5eb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:86:67:62:3a:79:26:db:55:f5:ee:46:41:5f:
51:f8:4c:01:03:45:0c:fb:55:08:a9:70:a5:88:27:
1c:de:1d:aa:c1:51:5e:5e:f0:b3:f2:53:4b:61:be:
33:9e:5e:df:0a:9e:06:d5:f4:4d:b8:c3:0a:83:eb:
b0:74:0b:1a:8f:a2:ec:70:06:d8:2b:6c:f3:6d:67:
00:de:a0:33:a7:39:4f:15:df:78:c4:20:7c:4c:fe:
62:1f:9c:67:2a:a0:67:80:3e:32:6b:d5:59:ac:4a:
8b:6e:0a:a5:05:08:47:07:45:e0:8e:50:0c:de:88:
a4:0a:37:cf:9f:8a:cd:3e:79:b2:5f:cc:37:f6:37:
52:94:df:c9:69:93:81:46:31:3b:42:ec:d3:04:b4:
46:e0:27:66:cf:7c:e8:76:1c:f4:59:1c:55:0e:14:
97:3d:85:22:45:e9:ad:62:03:cf:41:52:d5:c2:a1:
d8:46:17:b5:04:11:b6:86:12:7c:7b:93:22:58:fe:
ba:06:ed:97:eb:47:37:e1:d5:38:98:ec:41:45:59:
f0:c7:c6:57:a4:b6:2c:e9:c3:ff:f1:ac:f1:5e:33:
3e:37:e4:f0:de:db:ab:3e:69:78:c5:24:9f:ab:e4:
d9:f8:65:57:df:cb:45:01:6f:23:ac:16:4b:7e:8f:
69:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:42:79:79:58:DE:5E:06:33:61:06:F6:DD:0D:62:3B:E2:A5:EB:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/076ece-6498-460f-8365-613d53415a8f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/076ece-6498-460f-8365-613d53415a8f/1/X0J5eVjeXgYzYQb23Q1iO-Kl6xo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.8.0/22
Signature Algorithm: sha256WithRSAEncryption
99:cf:c0:bd:78:83:c0:0e:1a:12:1b:15:6b:c2:67:51:45:2a:
0e:70:30:9e:2f:3f:91:83:6c:ee:17:e6:53:2d:f3:ce:14:4a:
02:6f:3a:23:a2:07:1b:b6:96:e5:94:28:70:c8:f3:21:a5:60:
2e:98:c2:ed:f5:d8:be:ac:c5:b4:15:50:dc:60:9c:fd:86:82:
5a:e0:c8:8e:10:d8:cb:4b:9f:f0:c8:9a:6b:17:35:55:2a:0f:
06:5a:d8:6e:8b:71:76:a9:9c:9c:af:6b:75:55:f2:85:ae:29:
12:f2:5a:f0:46:2e:58:da:47:da:39:2c:4d:fa:4d:c5:23:fc:
1e:24:30:da:30:78:1d:c0:c3:29:f8:44:28:17:62:ad:f2:d6:
9e:f4:22:94:ca:dc:a4:bd:63:a8:fe:36:1e:59:b2:bf:aa:1e:
48:f9:7f:fc:70:8c:53:b8:8b:84:c2:0a:21:78:fa:30:46:d9:
98:88:00:5b:19:ab:8d:72:ec:12:ca:77:8b:09:74:b2:d6:4a:
f2:b9:f4:a1:c4:dd:c3:9f:66:b6:59:d2:ea:98:7b:5f:7e:d2:
6e:8f:a8:7f:d5:73:cb:f2:36:d9:39:6a:b9:c4:ae:14:f2:cd:
25:a4:27:ad:0c:a0:0f:34:a0:0b:6d:ef:41:75:57:30:42:fd:
c6:99:d7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:34:21 2024 by rpki-client on console-ams.rpki-client.org