Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rFjhnwP4hAAVxTATZyGyHWsUpXw.cer
File: rFjhnwP4hAAVxTATZyGyHWsUpXw.cer (raw, json)
Hash identifier: ROJOuS5JWPQHuKj6AeTlHxbTNTUmghuSK7aytKFDmTg=
Subject key identifier: AC:58:E1:9F:03:F8:84:00:15:C5:30:13:67:21:B2:1D:6B:14:A5:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0184617CFB7B527A7693931A7B2AFDD15659
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/2b8494-99aa-4fd1-9cf9-def7e5c80bac/1/rFjhnwP4hAAVxTATZyGyHWsUpXw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/2b8494-99aa-4fd1-9cf9-def7e5c80bac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 10 Nov 2022 12:21:31 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 48020
IP: 45.67.184.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:61:7c:fb:7b:52:7a:76:93:93:1a:7b:2a:fd:d1:56:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 10 12:21:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac58e19f03f8840015c530136721b21d6b14a57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a5:52:ec:03:f9:9d:7d:9e:17:09:ef:ba:7e:
2c:3a:82:5a:aa:4e:53:54:25:b2:df:f3:9a:22:dd:
f8:00:72:57:2a:9b:da:15:06:a2:d1:7a:08:6e:a1:
3a:70:c1:ff:c4:91:73:86:14:2b:67:59:88:34:f6:
c5:86:77:da:e9:fb:0f:6a:50:ba:70:5f:0f:4d:fd:
be:fb:fe:a0:af:9a:5f:f6:bc:35:78:a9:2e:b1:60:
4d:de:a1:ee:c8:8e:0a:0d:81:d9:d7:fc:4c:0e:99:
13:3c:23:b4:97:65:67:13:ae:90:5c:69:56:6d:52:
bb:38:61:98:72:35:a5:97:d4:44:12:69:7d:6c:a3:
be:9c:49:12:b8:57:32:86:00:d2:d1:ad:5f:06:b0:
07:24:21:a8:c8:e7:d3:41:d6:6a:15:26:eb:2e:e8:
06:5f:2f:e8:51:e3:87:82:6f:b9:45:d4:0f:79:82:
9f:5e:57:95:6e:e7:a9:2d:92:41:f6:a1:db:40:cc:
20:0f:ad:a2:40:f6:71:3a:de:9a:b4:ad:21:a0:ab:
67:2f:99:66:95:6c:e4:58:23:53:76:73:e6:bc:d1:
9f:70:6f:7c:07:7b:f3:cd:06:e7:72:76:3c:5c:ed:
ac:c7:54:1f:1c:26:e0:52:6e:db:61:bb:df:46:39:
16:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:58:E1:9F:03:F8:84:00:15:C5:30:13:67:21:B2:1D:6B:14:A5:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2b8494-99aa-4fd1-9cf9-def7e5c80bac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2b8494-99aa-4fd1-9cf9-def7e5c80bac/1/rFjhnwP4hAAVxTATZyGyHWsUpXw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.184.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48020
Signature Algorithm: sha256WithRSAEncryption
4a:08:9a:3c:59:d9:41:1a:25:6c:7c:8c:c0:76:f8:4e:09:2a:
bf:10:30:e7:44:a8:67:43:0a:6c:d3:8c:94:39:bf:5b:2d:f9:
6d:95:0d:ac:b6:56:48:e8:90:8a:ab:8f:51:80:00:da:59:77:
2f:47:eb:1a:35:ab:65:77:e2:b9:3f:c0:3e:41:45:c0:fd:be:
50:dd:f3:e1:bc:f6:2c:24:ea:12:a7:49:36:c2:82:74:f4:eb:
98:19:5a:3c:ce:af:3c:76:02:95:a2:db:b0:63:e4:c4:9c:99:
f1:60:7b:6c:bf:68:c5:33:b6:22:6c:d5:fa:a0:12:59:32:18:
55:53:f9:7e:48:1e:6d:57:be:f0:e7:9f:cd:58:c9:ce:64:18:
67:9d:5f:3d:a3:a9:da:f0:e9:9b:7e:83:89:62:89:08:dc:5b:
92:99:dc:86:b0:0a:8b:13:4c:c8:73:9c:46:78:26:63:f6:0c:
45:25:51:65:48:d3:e3:cd:92:cc:a2:10:0c:da:97:f6:9e:c5:
97:3d:8d:a3:97:0e:ae:8d:45:b9:02:3f:28:0c:25:9f:da:64:
6a:bb:40:38:ab:21:e8:0c:68:c5:ee:6e:38:fe:15:3e:b3:c3:
64:e8:15:cc:43:17:f6:27:07:20:91:c7:1d:b4:77:16:cd:47:
0e:90:db:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:29 2025 by rpki-client