Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rE1gLjC5gGyEech7L1tM2S1HhPI.cer
File: rE1gLjC5gGyEech7L1tM2S1HhPI.cer (raw, json)
Hash identifier: /YII0cRrnhDurp8ByYoZEiohxbpCy7UvBuuKsOaN2Qs=
Subject key identifier: AC:4D:60:2E:30:B9:80:6C:84:79:C8:7B:2F:5B:4C:D9:2D:47:84:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9A14283E06
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/17a10d-c8b8-459e-b70a-7530c3af4c26/1/rE1gLjC5gGyEech7L1tM2S1HhPI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/17a10d-c8b8-459e-b70a-7530c3af4c26/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:51:39 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.149.240.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661763145222 (0x9a14283e06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:51:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac4d602e30b9806c8479c87b2f5b4cd92d4784f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:22:3a:95:3a:c7:c1:91:db:f6:f2:67:31:
7e:37:ef:4c:97:43:c7:63:71:c0:f1:86:63:44:d4:
0c:70:29:93:4f:b6:7c:bf:44:46:d8:29:9e:9c:c4:
e2:5a:26:2e:c7:24:1c:8d:fc:cb:6a:eb:bf:8a:6b:
29:ac:f3:92:ea:48:d1:a7:89:5f:57:35:1f:70:b3:
ca:0b:6e:93:26:24:be:65:61:08:8d:e3:72:21:14:
84:6c:d6:a8:db:53:fc:f8:3d:b5:fe:cc:db:79:b0:
fa:3f:6f:ba:b7:d4:a7:a6:7e:b2:96:80:ab:4c:33:
88:27:a5:48:a9:9c:56:ba:b2:b1:c5:34:f3:4b:8a:
31:19:3f:48:97:04:85:82:ee:03:7f:ca:2a:57:7d:
94:14:2b:4e:85:d2:da:9b:88:22:0d:d0:8d:b8:27:
e3:24:01:00:89:fe:7a:d3:26:31:f0:5b:ab:43:45:
a7:9f:35:32:fb:f3:5d:97:42:34:6c:fa:8c:ba:f0:
bd:7b:42:79:ac:64:d4:64:75:c2:62:4c:02:62:94:
57:99:74:b7:d9:53:4b:32:5a:70:75:e8:e7:52:16:
b8:c4:61:c3:50:81:d8:c3:16:7b:d8:ed:4f:f2:3a:
84:35:a2:1a:72:06:4d:b9:21:b5:d0:46:a2:99:d7:
0b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4D:60:2E:30:B9:80:6C:84:79:C8:7B:2F:5B:4C:D9:2D:47:84:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/17a10d-c8b8-459e-b70a-7530c3af4c26/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/17a10d-c8b8-459e-b70a-7530c3af4c26/1/rE1gLjC5gGyEech7L1tM2S1HhPI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.240.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:fb:b9:9c:c8:a4:ee:26:c6:1d:0e:53:4c:51:02:a6:da:fc:
20:f5:aa:9e:12:ea:18:ab:be:e6:61:70:1e:21:10:72:39:98:
5f:18:32:5f:66:ae:eb:36:2f:d2:5d:d0:a9:d1:00:e0:ca:5d:
67:ba:13:ee:20:94:f5:0e:9e:36:5a:07:f9:7d:7e:25:4f:13:
1a:40:19:3e:b6:5c:8f:6f:54:8c:03:c4:d5:6b:4f:f2:b0:a5:
bc:5e:b9:50:70:cf:9a:44:c8:ea:8f:47:d7:b1:53:e0:a7:2a:
c8:6c:ad:04:b2:06:0b:45:ec:ac:27:fd:0b:cf:c7:5f:0f:b4:
5a:b0:22:1e:3b:3b:de:56:ac:22:f0:df:6b:bd:9a:0d:9d:d9:
de:1f:fb:b4:62:50:b4:4f:a9:83:b7:31:f0:6d:9b:23:96:5c:
f8:67:09:84:e8:f6:87:29:09:02:77:b5:cd:98:b3:e6:f3:df:
b9:60:c5:3a:4d:66:bd:68:69:58:a3:b4:46:1a:1d:0d:85:a4:
77:51:e8:fb:73:fb:b4:62:33:94:8b:4b:78:ad:78:79:7b:ca:
c3:6b:0c:b0:d5:7d:6f:9e:8d:6a:11:45:b5:ef:76:c5:b9:f3:
85:d1:9d:e5:96:a0:a9:fa:e2:bd:b1:34:cf:74:b6:3c:61:18:
6b:db:69:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:25 2023 by rpki-client on console-fra.rpki-client.org