Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rFQY1vvdsBPzJEmdC4IQ85ZmddU.cer
File: rFQY1vvdsBPzJEmdC4IQ85ZmddU.cer (raw, json)
Hash identifier: EBR9Zxsl01aY+Q5cpalmxLfisp00R9kPhmLukuMT9fo=
Subject key identifier: AC:54:18:D6:FB:DD:B0:13:F3:24:49:9D:0B:82:10:F3:96:66:75:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A902BB6955
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cddd6-17ca-4895-9d95-0c08109ae94e/1/rFQY1vvdsBPzJEmdC4IQ85ZmddU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cddd6-17ca-4895-9d95-0c08109ae94e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:06:54 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.67.132.0/22
IP: 2a09:77c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 725895309653 (0xa902bb6955)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:06:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac5418d6fbddb013f324499d0b8210f3966675d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:40:63:ec:3f:39:9b:75:e9:ef:cd:56:64:63:
18:c0:bb:5d:3b:24:c2:00:84:52:a0:03:52:85:8b:
48:99:45:e8:a6:a0:de:cb:ee:fb:90:e6:e9:d4:1b:
b2:1e:ac:89:79:7d:bf:15:3f:a2:ad:bb:53:24:c5:
d2:e7:0b:0c:21:57:b2:aa:62:cb:b7:f6:03:ef:5c:
62:c2:89:a7:5e:5f:36:53:0f:ed:1d:16:aa:73:67:
d8:d0:e3:d3:ce:85:d3:9c:8b:cc:4b:ed:ca:ad:54:
97:d7:da:d6:d2:38:79:da:cf:cb:a3:3d:75:89:e9:
d9:ca:cd:c9:eb:5b:11:37:51:8d:3e:cd:d1:5b:a5:
52:c3:c5:80:f8:8c:0f:37:98:bc:68:81:c0:f0:51:
bf:64:b5:4b:be:4b:c1:ac:fe:9c:48:3d:1e:56:91:
7b:0f:32:86:ce:f2:17:c1:f2:52:88:ad:c2:01:e2:
6f:02:4a:f2:a2:d6:e4:08:7f:88:09:15:7f:18:c3:
d1:dc:a0:6d:11:60:e8:c5:b7:cb:98:c2:c1:ca:eb:
82:5b:93:2e:9d:68:8e:e5:11:3f:d4:d9:ce:1d:1e:
c4:08:c5:d7:7f:ee:77:17:95:b0:0d:00:9c:35:bc:
ca:ab:b3:38:f5:2b:9d:92:c3:aa:7e:8a:43:37:bd:
4a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:54:18:D6:FB:DD:B0:13:F3:24:49:9D:0B:82:10:F3:96:66:75:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cddd6-17ca-4895-9d95-0c08109ae94e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cddd6-17ca-4895-9d95-0c08109ae94e/1/rFQY1vvdsBPzJEmdC4IQ85ZmddU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.132.0/22
IPv6:
2a09:77c0::/29
Signature Algorithm: sha256WithRSAEncryption
61:93:b2:ce:cc:cd:e1:4f:fd:f0:65:d2:38:77:a6:57:3b:c0:
e1:f8:09:e6:43:c7:22:6e:35:4a:29:bb:b9:c7:34:bb:11:aa:
eb:79:35:12:d0:14:01:aa:03:39:0c:9b:c4:65:54:6c:d7:be:
5d:4f:5b:76:61:cd:07:a8:d0:c3:df:83:8c:ba:cc:3d:9a:28:
aa:70:3f:ec:b5:77:e5:a3:81:cb:c0:75:08:82:09:47:30:09:
f1:b6:62:90:ab:3e:2e:4f:ba:de:c0:ed:e1:f8:a8:f9:36:90:
dd:fd:94:84:3e:0a:73:af:68:43:7b:5d:8c:36:6d:bf:da:87:
ad:ac:c7:85:19:e1:93:fd:1c:43:e0:e6:f1:4e:cf:9d:52:ae:
9e:05:26:f0:f0:17:b0:e5:89:8d:2f:73:6c:12:2c:dc:43:ae:
e1:b0:d3:ee:2c:88:8b:03:40:e9:31:66:39:cf:fd:8a:4a:ee:
55:8d:62:16:f3:ad:43:9e:2a:1a:e1:c4:b3:5e:db:a5:a6:93:
db:59:fc:d4:ec:78:b9:b0:40:91:17:97:26:b3:f3:09:c7:bd:
44:93:b7:94:18:30:bf:ff:5e:56:0f:e5:a4:9b:57:91:6e:e2:
15:b4:e7:0f:63:ec:58:18:3d:3f:65:06:67:47:bf:54:87:e2:
93:fd:ba:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:35 2024 by rpki-client on console-ams.rpki-client.org