Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aaIsFMI-_LRqRkd8bqnheSLvRk4.cer
File: aaIsFMI-_LRqRkd8bqnheSLvRk4.cer (raw, json)
Hash identifier: cEk1CYRSjh1kuTdcS7Y1yKiNqfVNQMGbll0SfF+oJ6A=
Subject key identifier: 69:A2:2C:14:C2:3E:FC:B4:6A:46:47:7C:6E:A9:E1:79:22:EF:46:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFB9A0BCB1D0D9ED67BB485B48F9021
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/1b167b-186f-4851-a99e-0838a26339ad/1/aaIsFMI-_LRqRkd8bqnheSLvRk4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/1b167b-186f-4851-a99e-0838a26339ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:17:40 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.93.184.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fb:9a:0b:cb:1d:0d:9e:d6:7b:b4:85:b4:8f:90:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69a22c14c23efcb46a46477c6ea9e17922ef464e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:17:8f:4f:47:76:63:99:18:17:cd:74:af:
3d:17:0e:1b:6d:45:6c:a7:1e:77:3a:aa:6a:55:b4:
87:90:50:01:45:2a:36:a0:3f:d6:30:3f:96:ee:69:
3b:36:f2:e1:de:4b:e7:5b:26:bb:8b:fe:01:e2:b3:
e9:a0:d2:4b:63:af:c0:70:c4:a6:4d:59:53:a8:05:
cc:ac:97:7a:42:a4:2a:f0:1f:eb:46:a6:9f:b6:22:
d8:87:88:4b:c7:94:ea:23:bf:29:82:54:45:bc:95:
0a:78:1f:b6:eb:8d:f5:f8:0f:4d:03:87:e5:6d:ce:
62:f3:15:28:24:53:11:fa:3e:76:15:95:52:5e:b0:
65:62:09:7f:62:83:f5:1d:b2:32:56:bb:28:50:92:
a8:b1:99:19:f1:e5:6d:64:40:04:96:5f:2f:e3:b4:
84:f7:59:27:f9:15:93:dc:a9:02:fd:83:28:22:62:
17:ed:f1:ab:69:a5:92:24:74:45:e9:26:02:77:79:
be:52:69:0c:f8:1e:ff:dd:7c:bb:73:f0:45:5f:4e:
05:0b:51:06:1c:56:41:45:56:aa:7f:0e:ba:66:59:
e8:d7:8b:25:0b:5d:f9:65:a2:9f:b1:d3:73:19:91:
10:d2:67:d6:d5:ec:98:a9:00:87:2f:62:25:47:5a:
64:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A2:2C:14:C2:3E:FC:B4:6A:46:47:7C:6E:A9:E1:79:22:EF:46:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1b167b-186f-4851-a99e-0838a26339ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1b167b-186f-4851-a99e-0838a26339ad/1/aaIsFMI-_LRqRkd8bqnheSLvRk4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.184.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:bd:2b:ae:2e:e6:30:fb:7e:b5:00:3f:0e:bd:52:2f:bb:e8:
c9:c6:2f:d8:fb:c1:6e:10:24:44:90:d3:8b:44:a0:34:45:27:
9a:34:7c:8c:d6:fd:19:d0:ef:aa:d4:c0:57:3d:a9:ac:cc:58:
23:f0:a5:66:04:e5:1c:60:e4:6c:c0:f4:b7:44:ec:87:85:5a:
d2:d2:1d:e1:0b:9e:b1:03:1f:dc:cd:db:29:3c:c7:2c:04:86:
c0:d7:81:2a:7d:79:03:23:98:91:fe:40:f8:14:7f:31:ea:9a:
b7:d6:fb:24:b4:e4:6d:e4:32:95:cf:5e:6c:42:a2:1c:ed:dc:
9c:ba:7e:79:d5:ea:95:85:3a:f2:0a:c7:f0:94:ae:31:6b:59:
11:5c:51:cf:07:9a:96:ef:56:01:e3:2b:df:c5:a6:a0:77:e8:
6b:4e:d5:37:76:65:5c:ce:ac:d5:be:31:36:3a:ec:0c:88:c5:
3d:af:a9:32:d8:9d:b5:25:61:d7:cb:b9:9f:01:57:19:b5:3e:
71:a0:d1:cf:53:60:8f:d8:02:a9:97:10:4f:a3:34:10:1b:ff:
9b:6a:1b:4f:a8:af:23:2e:c6:68:25:09:98:c2:5a:eb:19:bf:
fe:29:c5:ae:a7:a6:17:e8:8d:7d:27:00:66:d1:96:ad:f3:04:
0e:8e:4d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:47 2025 by rpki-client