Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_jHszVJvOQRysUI-TeEE_nreyuE.cer
File: _jHszVJvOQRysUI-TeEE_nreyuE.cer (raw, json)
Hash identifier: yzOd5D3PdtcFbZa6YT9a2XCRsATZgRURkGDtSL4g0cA=
Subject key identifier: FE:31:EC:CD:52:6F:39:04:72:B1:42:3E:4D:E1:04:FE:7A:DE:CA:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A680689929
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/d706d5-1b71-42d4-b6d7-f533fe0d4c9d/1/_jHszVJvOQRysUI-TeEE_nreyuE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/d706d5-1b71-42d4-b6d7-f533fe0d4c9d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:03:07 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.133.112.0/22
IP: 2a0e:5a40::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 715118909737 (0xa680689929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:03:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe31eccd526f390472b1423e4de104fe7adecae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3a:44:65:2b:1a:63:39:35:9e:f1:89:5e:05:
e9:4b:b6:7b:61:28:bc:d6:56:f2:4f:3b:5e:a0:b8:
d5:51:7a:7c:a9:a4:ed:6a:27:81:e2:10:43:e1:7c:
95:b2:f0:3a:c1:e2:d3:a5:a0:f4:ad:2e:65:83:8c:
b6:95:ea:27:98:eb:37:0c:7d:ce:83:20:e7:e3:71:
75:ef:fe:dc:2e:4a:09:98:85:c2:23:73:af:13:60:
e2:72:ff:f3:9a:4d:3f:74:ad:a4:0a:86:7c:a4:36:
7d:5a:f6:4c:2a:d0:53:95:c3:fe:d9:a9:72:dc:08:
0b:41:ab:de:e4:a7:42:f8:29:a7:df:04:49:2a:f9:
bb:5a:79:f2:85:9b:75:77:c4:c2:da:1f:a9:58:91:
40:79:d6:30:ec:40:bb:8d:49:67:e8:95:ae:24:b8:
95:80:7f:2b:4f:19:53:7d:c3:57:e8:33:4b:fa:16:
17:0f:13:bd:92:f5:b9:9f:b4:53:87:e0:1e:e1:be:
f2:73:32:9c:30:d4:8b:ae:e5:09:28:bd:69:38:8f:
71:a4:db:37:89:2e:a4:2b:a7:e0:b9:4b:1e:6a:6d:
7b:22:30:9c:a9:aa:04:0c:c9:e5:ad:d5:e3:81:d0:
93:9d:49:a2:26:0e:3c:f9:87:73:e8:c5:fc:61:6e:
4b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:31:EC:CD:52:6F:39:04:72:B1:42:3E:4D:E1:04:FE:7A:DE:CA:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d706d5-1b71-42d4-b6d7-f533fe0d4c9d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d706d5-1b71-42d4-b6d7-f533fe0d4c9d/1/_jHszVJvOQRysUI-TeEE_nreyuE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.112.0/22
IPv6:
2a0e:5a40::/29
Signature Algorithm: sha256WithRSAEncryption
67:47:73:d4:58:52:66:40:38:aa:41:f4:fa:93:3b:43:da:fd:
0a:6e:66:7a:47:e8:f8:4e:75:36:7c:6a:1e:59:b9:23:fe:be:
e3:2b:ab:a2:c1:00:77:55:0f:d4:85:69:62:e7:e3:6b:8c:fe:
7d:0c:7e:b5:86:86:36:a2:c0:84:34:b2:03:6e:49:c6:21:94:
04:46:31:b8:7b:38:69:59:a9:1e:27:13:71:d7:a3:cb:20:70:
a4:1a:b6:ac:6d:28:7e:75:65:96:e4:28:05:d6:6f:6d:ea:4c:
3d:8f:0d:d6:f2:34:88:70:22:74:97:ee:57:1b:a3:20:cc:b4:
74:9f:c2:28:14:86:63:e4:bb:ed:18:22:9f:7f:18:40:f4:20:
1b:ba:14:be:3d:01:fb:ad:07:ee:c4:25:45:65:86:d2:8e:fe:
d3:f1:6c:cc:e0:46:b1:2d:d7:cb:e1:e2:2a:8a:fb:03:61:35:
2e:f5:b6:9d:e0:e9:6d:3c:df:10:7e:0f:06:0b:1a:69:39:0e:
b5:da:e3:83:c3:d7:bf:21:52:5f:d7:96:5c:89:f1:71:24:0d:
a7:10:ac:0a:d1:1f:54:ff:aa:08:00:38:26:08:a0:5d:61:f2:
17:23:3f:05:4d:d1:d4:a2:fc:67:4a:83:45:1f:dc:a3:a9:5b:
67:43:21:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:42 2024 by rpki-client on console-fra.rpki-client.org