Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iZqXYtptVxUiVesgTiIf76X3P4U.cer
File: iZqXYtptVxUiVesgTiIf76X3P4U.cer (raw, json)
Hash identifier: u8xFLRIKXwF/qghxZnQ3AvXxa9ht7kuykEIH2i7rPf4=
Subject key identifier: 89:9A:97:62:DA:6D:57:15:22:55:EB:20:4E:22:1F:EF:A5:F7:3F:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018369E3F63601F5AD1B1ABDE52F07596C1D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/aa32be-415f-4b04-ad10-c32d9eadf311/1/iZqXYtptVxUiVesgTiIf76X3P4U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/aa32be-415f-4b04-ad10-c32d9eadf311/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 23 Sep 2022 10:28:10 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.148.50.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:69:e3:f6:36:01:f5:ad:1b:1a:bd:e5:2f:07:59:6c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 23 10:28:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=899a9762da6d57152255eb204e221fefa5f73f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:65:b3:f6:67:a6:3a:15:08:13:41:4e:22:01:
5e:c3:31:6a:0b:28:12:3f:02:86:49:ea:79:28:83:
cb:82:28:62:86:ef:01:03:3c:2d:7b:06:97:0f:67:
c2:ea:3f:a6:02:8f:5f:70:0a:44:71:db:ca:5a:2c:
3b:1e:58:00:77:c1:9f:5f:d2:3a:59:37:62:83:77:
d0:d2:17:77:7d:1c:e3:e9:a6:b6:2b:a1:6e:f1:7b:
f0:cc:ff:47:bb:d5:18:63:f4:96:8b:81:e2:34:ff:
84:b3:c4:88:13:5f:f2:ad:ef:2a:ea:0e:c2:54:c8:
46:62:b4:ec:2e:ba:5a:03:fd:59:c7:af:f8:20:62:
8e:5f:1f:a1:33:dc:f7:8a:de:67:ce:f5:99:83:8f:
ff:aa:6d:ab:43:61:7c:e4:9b:74:cb:0a:5d:10:38:
8e:f1:27:0c:3d:df:cd:e7:95:a5:b2:fd:e2:a6:b3:
0a:d8:d5:cc:06:c4:e9:24:78:26:a7:cf:e0:63:44:
cb:97:a2:f9:7f:f9:07:5d:01:2b:7c:10:fb:ad:33:
6f:b7:7d:f9:3d:7c:32:37:01:56:26:a1:61:a6:d2:
00:bf:20:41:8d:7b:bd:57:7a:d0:ea:f7:87:58:04:
7b:70:19:f0:29:f9:4d:67:e0:ec:cb:eb:fd:5b:75:
91:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9A:97:62:DA:6D:57:15:22:55:EB:20:4E:22:1F:EF:A5:F7:3F:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aa32be-415f-4b04-ad10-c32d9eadf311/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aa32be-415f-4b04-ad10-c32d9eadf311/1/iZqXYtptVxUiVesgTiIf76X3P4U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.50.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:9b:d4:2c:a9:41:50:5a:2c:4e:32:ec:82:1b:33:65:e9:a1:
75:87:77:ee:dd:c9:e1:12:05:67:77:06:6c:56:e9:1d:b2:b6:
d6:f7:66:3d:08:d2:c1:e4:3f:3c:7f:a7:bd:ba:c8:c1:46:48:
58:f2:77:a7:42:05:c3:70:40:71:8c:28:b7:0a:62:89:32:09:
fb:8c:9e:60:10:6d:d6:03:c4:fb:dc:d1:c8:17:94:da:83:68:
4b:bf:5a:a0:80:df:3e:dc:82:bd:6d:61:a8:b2:8f:6b:e1:da:
85:94:9a:cd:e6:6b:a9:8f:ab:52:c4:cf:a5:9b:bc:2b:1a:3d:
27:13:03:fa:e0:10:01:08:a0:73:69:92:d0:21:00:c3:d3:a7:
1f:a1:57:97:12:1e:67:b1:27:61:f1:39:84:92:c4:2e:55:79:
14:c2:f9:69:5e:d9:c5:36:82:c6:b7:da:34:90:ba:21:69:ff:
4d:a6:80:14:af:b9:62:51:16:f4:b3:d5:51:cb:a6:ad:97:bd:
e2:18:25:b4:b4:a5:c2:7b:68:7e:aa:60:2f:0c:06:a6:4a:cb:
7e:f8:1a:dc:74:02:db:ab:90:ce:49:50:b8:d0:04:be:20:c6:
27:34:7f:45:a5:6d:9f:cb:06:32:5e:fa:a5:9d:c6:54:a6:b9:
e3:79:cd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:12 2025 by rpki-client