Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kZr_HPc7WDUGorrYvHpj9cLylls.cer
File: kZr_HPc7WDUGorrYvHpj9cLylls.cer (raw, json)
Hash identifier: Pycn1vcfmFuAr1yjJitxJhnqoGq9vNRwijQQBJbRq7M=
Subject key identifier: 91:9A:FF:1C:F7:3B:58:35:06:A2:BA:D8:BC:7A:63:F5:C2:F2:96:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A3DFF8A0BB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/43ac4b-9ada-4047-9517-966dbe794a4a/1/kZr_HPc7WDUGorrYvHpj9cLylls.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/43ac4b-9ada-4047-9517-966dbe794a4a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:58:16 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.95.76.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 703837282491 (0xa3dff8a0bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:58:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=919aff1cf73b583506a2bad8bc7a63f5c2f2965b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bc:38:62:8f:57:c5:f9:ed:55:51:6d:4d:cc:
eb:b4:37:1e:d3:2f:3f:92:fc:33:40:5c:f2:fd:d4:
23:ba:bb:af:27:03:53:d7:a9:b6:c2:3b:9f:83:f3:
f2:9a:68:48:5c:60:c4:a8:5a:8c:81:49:ca:e4:9f:
58:c9:5c:97:48:e3:03:e2:50:d4:e6:96:e9:48:c2:
fa:a8:05:c4:f1:7f:cf:82:fb:c1:2a:85:e6:f8:05:
d1:b3:2c:a0:d4:6a:10:53:59:93:f7:da:46:99:82:
f4:4c:e5:2a:6c:07:0e:23:1b:3a:66:01:21:46:4a:
4a:74:5b:34:17:72:bc:29:cc:17:6a:8a:1f:b0:ab:
f1:c0:7f:ef:1b:de:2a:c5:5b:81:3f:dd:f3:36:b2:
7c:9b:2e:94:52:dd:88:98:95:d8:b5:52:9e:51:f3:
39:6a:d3:d9:77:73:39:b8:5b:23:f5:23:75:7a:5b:
10:49:1d:b7:b3:34:2e:57:01:27:9f:ab:e8:2f:4d:
72:fd:6b:b3:03:d7:7d:70:1d:b7:29:a9:02:b6:49:
75:c8:73:d5:0f:7a:93:ba:25:cc:85:dc:c6:0e:22:
6e:38:31:85:83:db:a5:b5:0e:7e:94:52:f9:46:de:
55:f1:10:ba:fc:cf:9a:71:c2:38:9f:12:56:42:5b:
69:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9A:FF:1C:F7:3B:58:35:06:A2:BA:D8:BC:7A:63:F5:C2:F2:96:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/43ac4b-9ada-4047-9517-966dbe794a4a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/43ac4b-9ada-4047-9517-966dbe794a4a/1/kZr_HPc7WDUGorrYvHpj9cLylls.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.76.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:60:9c:0e:55:ae:0b:e1:8e:56:f5:6d:00:67:fb:59:56:07:
8f:3d:e1:2c:15:32:66:80:b0:a5:0a:24:51:51:5a:9e:89:a9:
dd:63:cf:2a:68:89:91:93:14:e2:72:f7:a7:fc:4f:51:45:2b:
65:ce:0a:ea:92:86:a4:6d:ba:da:5c:85:7e:9f:c2:2e:27:de:
ea:ea:41:87:c7:19:e5:69:11:2a:29:c2:ef:bc:a3:50:f6:90:
e4:62:2a:19:f4:88:80:77:c0:f2:7b:cb:eb:95:61:6f:b4:29:
80:cf:4d:ca:96:81:4d:50:13:90:51:6a:e9:be:3d:b5:38:82:
2e:a8:50:45:79:d6:dc:5e:ba:29:02:48:ba:33:24:eb:38:ff:
b3:2a:92:20:2a:9b:1b:a5:03:fa:41:1d:43:b8:96:6c:03:f9:
0c:85:16:43:1e:75:c7:71:aa:fe:e8:4b:45:dc:2f:18:54:d3:
d2:0d:f7:2f:24:05:31:89:11:08:03:a7:01:96:2a:28:7c:79:
c9:73:cb:13:f7:ff:13:a5:04:cd:20:a2:15:02:2b:bb:66:ff:
66:be:15:4d:1b:99:be:92:70:82:d8:9d:e6:16:ff:8e:16:a8:
9b:64:43:9c:5d:a1:7e:47:00:84:86:4d:c3:4f:57:6c:3e:6e:
c1:fb:f8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:13 2025 by rpki-client