Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pXaZy20kCm3XDtKhiMjXBWsL6K0.cer
File: pXaZy20kCm3XDtKhiMjXBWsL6K0.cer (raw, json)
Hash identifier: UdBPlCefTeUso9NiYE1qXiZxddIPfv9um9q0fn7K3bU=
Subject key identifier: A5:76:99:CB:6D:24:0A:6D:D7:0E:D2:A1:88:C8:D7:05:6B:0B:E8:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A8EBAB72AE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/a59fb5-2957-47f0-aeb1-f6fc289a68ac/1/pXaZy20kCm3XDtKhiMjXBWsL6K0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/a59fb5-2957-47f0-aeb1-f6fc289a68ac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:05:47 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.150.112.0/22
IP: 2a0f:500::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 725508387502 (0xa8ebab72ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:05:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a57699cb6d240a6dd70ed2a188c8d7056b0be8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:64:65:8c:d0:88:90:40:b7:9a:66:54:a0:51:
bb:71:80:66:a1:44:d1:0d:b6:a2:64:7d:f9:44:14:
1a:e9:cf:aa:5c:e9:3b:53:09:da:3b:be:1b:6d:19:
47:ef:61:46:95:20:9c:a4:04:42:fe:7b:98:71:3d:
25:3e:50:88:de:72:80:c3:0b:17:7e:bf:dd:11:d2:
af:b0:66:84:ca:84:64:ac:0f:d4:60:93:9a:d6:5a:
42:69:17:44:63:f8:c5:20:52:47:02:de:ae:0c:2f:
d5:b4:f3:73:3e:8f:48:f3:35:d0:c4:90:dd:9d:a7:
96:9d:76:38:2e:a9:67:de:78:ce:e3:60:46:b4:d7:
58:6c:35:33:9d:bf:33:db:6a:8a:49:d3:06:30:e8:
02:db:14:5c:56:45:ea:e3:a8:42:12:47:a1:30:c4:
64:fc:c3:89:64:06:ea:3d:ba:fd:bc:e1:6f:67:31:
59:2c:f3:32:44:47:0e:33:81:70:ac:ae:1c:96:0c:
b5:96:fc:0d:06:19:17:79:51:c2:6d:3f:6d:b0:be:
d4:78:66:22:4c:23:08:d1:b9:bf:ef:35:91:2d:a5:
a5:7d:de:d2:f4:b4:15:19:f0:aa:f2:79:6b:d8:77:
13:9f:7f:16:79:6a:92:dc:47:f2:fb:26:3a:8c:66:
a2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:76:99:CB:6D:24:0A:6D:D7:0E:D2:A1:88:C8:D7:05:6B:0B:E8:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a59fb5-2957-47f0-aeb1-f6fc289a68ac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a59fb5-2957-47f0-aeb1-f6fc289a68ac/1/pXaZy20kCm3XDtKhiMjXBWsL6K0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.112.0/22
IPv6:
2a0f:500::/29
Signature Algorithm: sha256WithRSAEncryption
57:08:bb:0d:2d:01:ab:62:9b:81:9a:68:2a:3d:be:1f:95:5f:
3d:8b:74:13:e4:8f:9c:65:08:d4:2b:43:ae:25:6c:10:36:8e:
3c:a3:1d:62:f8:9c:e5:74:c7:b1:98:50:12:3a:47:1e:c4:c4:
5a:be:00:24:f5:66:30:89:63:87:57:47:a3:c8:9a:f0:58:b9:
ea:8d:67:a8:11:09:70:35:06:9e:13:be:63:d2:e9:7b:4f:7e:
90:63:b7:68:2f:44:b7:d1:ec:a6:20:ba:1d:e3:fb:8e:d4:70:
88:0a:82:86:86:f9:8d:17:4e:52:5d:ed:c9:3a:da:40:7e:d4:
9a:2c:10:7f:07:6e:1b:aa:3f:db:f3:5b:13:90:b0:42:e3:b8:
86:c3:25:2f:8b:57:9a:2e:08:3c:9a:8f:b3:4f:a2:df:0a:36:
e3:ff:cf:3e:a9:28:af:8d:08:0a:c2:14:24:c2:8a:a8:5a:88:
82:1c:5c:7d:a2:9c:fa:15:66:65:cd:a4:55:9d:50:3a:24:f3:
66:1d:72:a0:a4:e8:e1:f7:97:cf:1f:36:31:b1:00:79:76:92:
57:46:28:de:ab:11:62:e8:56:9f:ad:68:c8:07:dd:a3:6c:5e:
8d:39:37:ea:8b:53:ec:93:f1:aa:49:41:e2:92:b8:6d:78:3e:
84:bd:44:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:46 2024 by rpki-client on console-fra.rpki-client.org