Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g8vlbRTyw6LGVlm204pMBYON7X0.cer
File: g8vlbRTyw6LGVlm204pMBYON7X0.cer (raw, json)
Hash identifier: bMMlBzPsCSyqQihZogLwELDA+V5ZcxET9EyJmKgNRos=
Subject key identifier: 83:CB:E5:6D:14:F2:C3:A2:C6:56:59:B6:D3:8A:4C:05:83:8D:ED:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: ADAAE8A57A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/5166e6-a057-43a8-af38-c4b8f6765b6e/1/g8vlbRTyw6LGVlm204pMBYON7X0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/5166e6-a057-43a8-af38-c4b8f6765b6e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 22 Feb 2022 13:25:12 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.133.251.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 745896715642 (0xadaae8a57a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 22 13:25:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83cbe56d14f2c3a2c65659b6d38a4c05838ded7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:42:de:b5:ac:f4:3c:da:b1:12:2b:53:7d:27:
d9:d0:7f:80:ca:43:78:a9:4e:26:43:1e:24:f4:b9:
05:e6:01:fd:d6:f7:7f:ec:ec:ac:a3:02:49:ca:73:
64:a3:64:35:af:a9:49:4f:47:b8:d9:42:93:01:b3:
87:f3:b0:88:a3:e8:0b:f8:f1:58:0b:f4:4d:5f:05:
59:fa:44:aa:80:ce:8a:6c:fa:ed:96:e6:41:11:b8:
c0:c5:1b:60:f3:48:ad:12:17:64:7f:a4:9d:d3:ef:
7b:ca:54:bb:a4:dd:fc:cd:08:ab:21:e6:b6:ee:08:
a3:06:78:4d:d6:56:35:87:a3:bc:70:86:90:64:55:
45:f3:6f:ff:d6:ef:6a:23:38:fe:8d:80:e5:8d:b4:
b5:60:44:48:92:89:d7:53:d3:d4:76:5c:05:f0:cb:
cd:41:c3:c8:ff:1b:5b:54:eb:db:5f:bc:83:cd:11:
31:00:d7:4b:12:d2:89:b8:b5:2b:c4:61:0a:f0:c1:
12:dd:7e:4d:e4:54:64:e6:73:e9:05:03:10:77:05:
c1:50:6b:56:97:b8:0b:f7:48:40:39:1d:da:e4:0b:
a4:fb:21:e7:cd:d7:12:83:08:44:76:07:95:c1:2f:
2e:bf:8c:87:90:30:d4:f3:30:f4:82:a0:b1:92:37:
12:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CB:E5:6D:14:F2:C3:A2:C6:56:59:B6:D3:8A:4C:05:83:8D:ED:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5166e6-a057-43a8-af38-c4b8f6765b6e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5166e6-a057-43a8-af38-c4b8f6765b6e/1/g8vlbRTyw6LGVlm204pMBYON7X0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.251.0/24
Signature Algorithm: sha256WithRSAEncryption
36:35:20:85:e7:78:ac:b4:4c:70:7a:c7:4d:e3:28:72:00:cd:
a2:8a:b6:43:a3:23:fd:a7:f3:36:f9:9b:02:d8:e9:2f:89:df:
7b:88:82:6b:79:f0:4e:fc:cf:a8:20:da:81:1b:2e:e5:c5:9b:
1c:3d:49:ec:ff:4c:70:c3:63:2f:09:ef:d6:ca:91:30:37:fb:
b6:75:2b:10:8d:b9:de:31:24:5d:25:fe:3c:fd:1f:d7:db:58:
c2:7f:58:f8:7f:23:17:1e:b1:77:83:f2:db:7f:85:d3:8f:1a:
90:29:bb:25:f4:a0:bc:35:14:ca:31:e1:87:a8:53:c4:b6:b5:
e3:2f:ef:73:96:1c:07:5a:47:2b:f6:84:e7:20:30:17:69:e4:
68:a8:13:0a:84:12:a8:e0:b2:28:2f:4b:92:9f:b9:6f:63:bc:
f4:e2:58:5d:fa:49:c1:e2:f3:8d:bb:a5:c0:ad:9d:ae:ac:dc:
a1:86:04:6c:21:74:b0:94:5a:56:fc:4b:52:82:02:0f:26:81:
67:0b:cb:9f:07:c6:9e:db:ac:8d:5a:ae:08:3f:d8:68:97:45:
14:75:fa:50:78:08:64:85:fc:09:d5:c8:3d:8e:bf:46:08:f5:
f7:5f:bf:2a:11:ef:6f:4d:65:b8:d5:43:61:a6:ea:c0:3b:05:
0c:9a:2d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:00 2024 by rpki-client on console-ams.rpki-client.org