Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cxYQ81GTaft9M9MpKg7-j-aLmtk.cer
File: cxYQ81GTaft9M9MpKg7-j-aLmtk.cer (raw, json)
Hash identifier: Hvih2Rn6IkDOjWPH8GdhLIUVJk14Zc3Byp4bUzyAjcA=
Subject key identifier: 73:16:10:F3:51:93:69:FB:7D:33:D3:29:2A:0E:FE:8F:E6:8B:9A:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A08CE21DE8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/042809-c5e8-45a1-9daf-e23d2446de2b/1/cxYQ81GTaft9M9MpKg7-j-aLmtk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/042809-c5e8-45a1-9daf-e23d2446de2b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 06:58:56 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.84.168.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 689558396392 (0xa08ce21de8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:58:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=731610f3519369fb7d33d3292a0efe8fe68b9ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:51:fb:5e:7f:a8:9e:f9:2d:25:27:4c:c5:
4d:dd:be:9a:c8:ca:dd:39:b4:b1:90:6c:e1:79:39:
c5:46:aa:9c:be:ea:67:6d:56:c3:fe:1c:f7:86:a0:
41:08:a6:89:bb:1a:34:e6:3d:04:b7:e0:5d:54:55:
2d:fe:c9:6e:50:23:e5:45:7b:40:ab:e0:d5:29:e9:
2f:93:80:6d:eb:42:3e:12:7f:14:d2:b5:62:4f:2a:
a2:78:1e:cf:68:32:78:13:47:2f:b0:3b:38:be:8e:
64:11:f3:db:d9:2d:4b:91:ab:c3:a5:a8:67:cc:c3:
76:4e:33:f4:d5:f7:65:d6:66:d9:d5:91:89:1b:c6:
d5:74:81:74:43:c1:7d:54:1a:95:bb:75:e3:8d:a7:
4e:bc:84:cd:03:6f:35:d8:25:02:57:6b:7d:ef:f6:
d6:45:2a:f7:f9:51:f0:07:de:ca:2f:be:2d:93:ab:
4a:fa:c4:ed:56:16:56:2e:a5:10:86:9a:a0:14:2b:
56:ab:4c:ba:2e:14:53:7c:f2:43:a0:1e:aa:8d:92:
dd:39:77:74:59:87:7a:74:8f:d7:69:dd:ef:c4:54:
b3:c1:fe:4a:06:09:7d:1f:83:11:fe:bc:33:80:5d:
cc:ef:3d:e6:d8:d6:94:7c:c0:fe:30:f9:3f:3c:e9:
a7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:16:10:F3:51:93:69:FB:7D:33:D3:29:2A:0E:FE:8F:E6:8B:9A:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/042809-c5e8-45a1-9daf-e23d2446de2b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/042809-c5e8-45a1-9daf-e23d2446de2b/1/cxYQ81GTaft9M9MpKg7-j-aLmtk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.168.0/22
Signature Algorithm: sha256WithRSAEncryption
64:1f:0a:fb:c7:ef:f0:f2:a2:bb:43:40:85:a3:77:83:fd:64:
1b:c1:1d:9a:25:7f:0f:58:c5:ec:c2:75:21:6a:04:a9:c8:56:
9e:e2:b5:1a:45:96:89:1a:39:84:1c:e2:3a:cc:66:56:3d:1c:
3c:a4:36:88:14:a5:01:19:fe:9b:9c:2d:3e:6b:4b:e2:7b:d4:
52:3c:86:b4:b1:b1:eb:72:93:d5:77:e0:5f:0f:5f:4e:d7:de:
14:9b:b5:47:35:36:b3:e7:cb:8f:1e:35:af:b0:62:a0:4f:ea:
ff:ee:67:0a:6d:f9:1a:40:94:92:f5:33:9e:9a:ff:d3:88:7a:
fc:53:c8:56:80:5b:78:d3:c5:b9:89:bc:21:ee:b9:9e:f6:d5:
48:19:c9:8f:13:dc:65:d1:df:4a:c1:cd:c0:8f:bb:d7:f5:6a:
9c:ef:5c:2b:99:74:1a:b3:0a:e3:fe:a5:d4:7d:53:67:27:58:
8c:fc:43:e6:d5:db:be:33:a9:29:35:84:3d:01:5b:ac:51:00:
20:63:a5:09:f3:ac:41:d4:13:2f:77:c9:6d:12:62:f6:5f:56:
a3:56:b0:2e:2e:61:7d:5d:8b:68:26:cb:6f:fc:c5:73:7f:d1:
f8:1d:50:23:a2:28:77:ab:75:d4:9c:e4:4f:39:75:7b:0a:2d:
f4:5f:8b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:17 2024 by rpki-client on console-ams.rpki-client.org