Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ytz7hEof0JOm8R74YtORqt11aVI.cer
File: Ytz7hEof0JOm8R74YtORqt11aVI.cer (raw, json)
Hash identifier: 2SNlLd1QjRGXlNTrC1ynBvXaBas7UubK/pgLFOmZ51A=
Subject key identifier: 62:DC:FB:84:4A:1F:D0:93:A6:F1:1E:F8:62:D3:91:AA:DD:75:69:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01843858FA62189F82AD78811E7D9B9B1507
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/9c504b-dab7-4a4e-9e46-2ef414917c88/1/Ytz7hEof0JOm8R74YtORqt11aVI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/9c504b-dab7-4a4e-9e46-2ef414917c88/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 02 Nov 2022 12:37:46 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.12.252.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:38:58:fa:62:18:9f:82:ad:78:81:1e:7d:9b:9b:15:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 2 12:37:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62dcfb844a1fd093a6f11ef862d391aadd756952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:37:2b:4f:d4:91:91:f2:47:ec:e4:c4:2b:66:
f6:f4:de:db:d2:c8:a3:28:87:b0:bb:01:e2:5d:c1:
7c:23:a9:16:e9:b9:32:9c:84:f5:44:fc:36:76:a0:
3a:10:73:06:87:11:af:78:08:f7:28:36:b1:17:d6:
42:43:78:97:28:89:94:ec:ef:c1:5e:6b:30:94:58:
d0:9c:bd:80:ab:11:1b:0d:20:69:3a:9e:1b:c1:4d:
dc:cd:c4:49:14:c5:bc:bb:8f:14:ff:1f:19:ae:0b:
1f:70:f6:68:ac:54:24:b3:86:05:28:4f:45:b8:e2:
5c:07:95:c4:a9:0b:fc:05:d8:34:41:41:a1:07:e6:
0c:b8:d4:6c:e2:12:e0:96:80:78:79:fe:8a:c9:5a:
01:35:8e:4d:94:30:20:67:85:9d:09:10:c2:56:31:
3c:c7:9a:18:f7:e7:24:0c:7a:89:d7:af:0d:57:4a:
b8:d2:9a:0c:37:ac:49:3a:e7:46:bf:c2:ef:9c:fc:
ae:0b:07:95:79:bc:bb:ea:9c:99:2d:85:38:77:6c:
93:c9:a0:83:ba:cb:82:5a:0d:07:7a:dd:4c:22:e8:
11:95:e6:b1:1f:76:39:05:91:60:db:ba:7e:e1:d3:
94:6f:51:82:0c:51:d7:44:3e:66:22:27:1a:b9:45:
ed:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DC:FB:84:4A:1F:D0:93:A6:F1:1E:F8:62:D3:91:AA:DD:75:69:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9c504b-dab7-4a4e-9e46-2ef414917c88/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9c504b-dab7-4a4e-9e46-2ef414917c88/1/Ytz7hEof0JOm8R74YtORqt11aVI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.252.0/22
Signature Algorithm: sha256WithRSAEncryption
66:d0:c5:11:73:63:97:0f:f1:e6:c2:be:a5:d4:6d:4f:f0:19:
1c:6c:72:3a:c8:b9:9f:f8:ba:b7:06:6d:67:d0:00:54:f5:49:
9f:3c:2b:87:c3:9f:a0:6f:d0:d8:62:d6:dc:17:bd:2a:30:16:
c1:f6:2c:44:84:fe:28:fa:30:a4:38:91:2d:f0:aa:ca:4b:12:
cc:21:b3:07:8f:9a:63:19:b4:41:d3:03:b0:12:60:ce:33:8a:
08:78:7b:9d:bf:06:90:25:d0:37:f5:c7:7f:06:1e:95:28:70:
df:44:86:69:c6:9c:74:28:99:8a:cb:c4:ef:bc:cc:73:4a:f8:
2b:e0:36:63:2f:3f:42:af:c3:ca:74:22:39:48:f2:33:a0:c3:
a6:1a:1a:8b:4a:0b:49:73:4a:aa:ea:bd:21:7f:29:98:c3:85:
5d:e7:1e:fb:19:31:a6:6d:37:c8:78:2f:dd:4b:db:73:79:ed:
e6:70:e3:54:17:d2:54:ef:9a:b8:87:be:63:75:0a:aa:8f:0a:
5a:14:67:6f:eb:ce:ef:8d:7b:93:d7:49:bd:a1:0b:73:39:f1:
8c:ed:79:72:f3:e0:ca:33:01:ff:6a:14:12:c0:93:60:9f:60:
d4:aa:c3:9a:09:56:18:14:d8:f5:3e:96:80:31:10:6c:ed:26:
f3:f0:93:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:02 2024 by rpki-client on console-ams.rpki-client.org