Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/isfnrvgXshFp_7IvN81t9KbtHTY.cer
File: isfnrvgXshFp_7IvN81t9KbtHTY.cer (raw, json)
Hash identifier: Xtm5ZaoazNMA4LbF37Q4vaWn+ZzE16sfaW25jaacFFg=
Subject key identifier: 8A:C7:E7:AE:F8:17:B2:11:69:FF:B2:2F:37:CD:6D:F4:A6:ED:1D:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A525A61B93
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/32f282-0247-4502-a1eb-521709d0b4c0/1/isfnrvgXshFp_7IvN81t9KbtHTY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/32f282-0247-4502-a1eb-521709d0b4c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:58:39 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.145.64.0/22
IP: 2a0e:f740::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 709301246867 (0xa525a61b93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:58:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ac7e7aef817b21169ffb22f37cd6df4a6ed1d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6e:2b:ba:65:b1:03:19:60:aa:35:ba:04:8e:
84:7a:4b:95:89:5a:31:09:8c:3e:83:3f:e5:a0:0f:
31:d9:83:00:cb:1a:87:14:2c:a3:62:5e:48:9b:01:
51:f2:25:85:d7:59:ff:bf:41:06:ee:b0:45:92:2c:
16:cf:f8:e7:d6:6f:ba:41:ad:c2:ca:6c:17:50:8f:
6c:ed:00:ae:4b:c6:91:b2:3c:b9:eb:61:fe:c2:4a:
be:22:45:71:ae:69:8c:f1:96:4d:8b:55:ae:92:a2:
0c:7d:fd:a9:5a:cb:72:46:a7:ed:06:9b:57:d0:2c:
a8:e6:d1:cc:ff:e7:76:4a:6d:47:dc:95:14:a4:9a:
00:54:ab:24:8f:6e:85:7d:dc:56:9f:20:1d:80:1d:
67:88:ad:ac:c4:2d:90:c2:ab:f1:26:82:6d:ac:20:
4a:16:f4:6f:85:fd:1b:20:2b:43:67:fc:7a:49:ed:
70:b9:7e:80:d7:48:0c:41:36:92:6f:1b:41:3a:f4:
bb:64:df:d8:e6:d1:a1:32:55:75:16:02:46:a5:7d:
0e:b0:07:22:35:1b:d3:bd:cd:88:45:c9:52:6e:c6:
31:0c:29:6e:98:e5:dc:98:3d:5b:bb:1b:82:79:01:
08:b0:63:c8:74:46:ab:07:13:16:7c:a5:7b:e6:99:
38:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C7:E7:AE:F8:17:B2:11:69:FF:B2:2F:37:CD:6D:F4:A6:ED:1D:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/32f282-0247-4502-a1eb-521709d0b4c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/32f282-0247-4502-a1eb-521709d0b4c0/1/isfnrvgXshFp_7IvN81t9KbtHTY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.64.0/22
IPv6:
2a0e:f740::/29
Signature Algorithm: sha256WithRSAEncryption
8c:85:1a:81:88:d3:c2:a9:d5:f8:4d:9d:ac:a8:97:2e:27:e7:
eb:b6:0c:e4:7f:fc:b7:b9:e8:cd:ac:c2:1a:05:9d:21:c9:93:
2d:d2:bb:35:28:fb:42:b0:59:76:54:4a:68:8f:86:fc:db:ab:
69:3f:f6:59:ce:47:45:8d:c9:bd:0d:d9:46:71:2e:2d:41:50:
4f:59:7c:61:b4:28:d9:b6:42:4f:b7:26:f3:39:5c:e7:48:e9:
3f:6f:37:f5:b3:ac:5c:16:ec:38:b0:e7:6d:ac:c2:0f:90:49:
67:7f:7c:72:a0:c0:2c:bc:7c:bd:2f:25:90:df:ee:ed:26:c2:
98:e7:50:b8:a7:cd:a8:e4:ca:16:ac:a5:c3:b4:0b:64:2a:95:
e9:d3:6b:2d:22:4d:2d:91:7c:90:44:0b:95:7c:30:1b:17:57:
0a:d6:e2:2d:da:1d:98:86:14:91:91:f9:bd:0f:ca:21:2b:e1:
cb:9b:b7:fa:f2:34:d7:f0:22:76:ce:7c:5d:4c:22:ba:1c:6c:
fb:21:66:2f:36:19:5f:06:1d:76:fc:51:48:bd:d3:21:b0:10:
a1:b3:39:39:32:3b:92:9e:05:7b:75:a6:5e:30:15:77:22:6e:
af:ac:f0:c1:9d:a1:b0:06:ed:f7:05:d5:b3:18:4e:2b:7b:26:
a0:91:c3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:32 2024 by rpki-client on console-ams.rpki-client.org