Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/omqsQ54JZy26iDUYW4s5DCLjVAU.cer
File: omqsQ54JZy26iDUYW4s5DCLjVAU.cer (raw, json)
Hash identifier: 4z4sWnk1eXGcEWV2ceatneHQxt6HDAOdCD0PoXePqjA=
Subject key identifier: A2:6A:AC:43:9E:09:67:2D:BA:88:35:18:5B:8B:39:0C:22:E3:54:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AE529AD100
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/5175e6-e22f-448e-a538-5c431c4da2d8/1/omqsQ54JZy26iDUYW4s5DCLjVAU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/5175e6-e22f-448e-a538-5c431c4da2d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 08 Mar 2022 09:26:39 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.131.184.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 748710187264 (0xae529ad100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 8 09:26:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a26aac439e09672dba8835185b8b390c22e35405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6b:a1:38:f6:6c:28:0e:82:7b:ce:2c:38:b9:
2d:d3:60:3a:8d:87:22:9e:74:1e:f0:92:6a:fd:ee:
84:db:b9:9e:60:21:77:aa:07:c3:1c:06:8b:fd:0a:
f4:f3:1c:c5:6a:7f:8c:de:15:03:a9:2c:0e:2b:bc:
bf:0d:d3:63:dc:ff:8c:bf:4f:00:b8:a8:e1:9a:e3:
0c:e2:d6:a9:60:87:20:40:7c:ba:90:de:87:2a:43:
5d:db:b0:aa:bd:16:e8:67:66:2f:2a:2a:5c:34:55:
20:d7:6e:13:77:40:25:2b:12:fd:f3:4b:66:c3:b4:
16:34:1a:74:28:2f:aa:1d:c2:7b:91:c4:c0:48:2b:
cc:93:00:73:80:09:da:f0:23:22:6d:ee:35:19:b7:
48:c7:a1:ba:22:51:a1:1f:85:75:91:06:77:d7:a3:
81:57:95:5c:f3:9e:cc:7e:b7:f4:29:26:e5:50:d4:
fc:70:4d:4a:b1:35:31:6e:2d:ab:e7:38:0a:fc:fe:
70:e3:10:15:4b:80:31:b0:2b:db:1d:12:6c:56:e4:
80:ad:23:6c:50:70:a0:e7:94:9c:79:55:43:25:5b:
64:ea:ae:95:38:64:49:4f:cc:8e:7c:d5:02:5a:a6:
e5:be:92:bb:eb:1d:c7:a7:d7:cb:ad:57:9e:ee:59:
6b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6A:AC:43:9E:09:67:2D:BA:88:35:18:5B:8B:39:0C:22:E3:54:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/5175e6-e22f-448e-a538-5c431c4da2d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/5175e6-e22f-448e-a538-5c431c4da2d8/1/omqsQ54JZy26iDUYW4s5DCLjVAU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.184.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:7d:7b:97:b9:9a:8d:f3:0a:11:ad:04:b0:dc:22:61:75:3b:
be:08:a0:e6:8a:d7:26:c2:11:4e:bf:04:9b:47:48:4e:fa:35:
78:79:e3:32:90:bf:8b:8d:28:db:d2:a1:ae:ba:cf:a2:e0:64:
46:1c:db:61:15:6d:29:30:53:9e:fa:0e:0c:53:0e:28:1e:65:
7c:3a:bd:7a:2a:a9:09:6b:13:ad:9d:df:a6:a0:64:70:4d:69:
36:60:77:1f:17:59:82:e7:c0:e8:06:c0:a5:71:cb:72:35:2a:
41:42:61:d8:61:99:d1:e1:58:89:4d:15:c1:16:33:20:1b:55:
cb:a4:8e:3e:6f:6a:d1:60:72:1c:24:9c:18:f5:20:8f:12:66:
87:22:27:d2:f1:b4:31:c8:12:d5:86:3a:4a:5a:f4:e5:7f:b0:
62:08:99:be:0d:fb:c1:8c:90:49:38:c8:87:e6:6a:6f:59:51:
32:13:42:e5:d3:bc:35:c5:35:5d:2f:60:76:43:99:b4:2b:e6:
5e:bf:b2:73:0a:85:ff:9a:2d:bd:db:ad:91:85:d4:d3:bd:ff:
28:6d:a0:e0:e9:c4:ab:aa:9d:e4:cb:f5:9d:6f:29:c1:c9:e3:
e8:e4:ba:2f:f6:74:3c:79:78:42:bd:13:12:9c:9c:bb:01:d7:
3e:50:34:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:52 2024 by rpki-client on console-ams.rpki-client.org