Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sGxDC2G-ejgBkc1d_RBcOvIUgvw.cer
File: sGxDC2G-ejgBkc1d_RBcOvIUgvw.cer (raw, json)
Hash identifier: Oj6p+hYT0HHyUS29NGH4FvkeEwJGfmPKnWiufLlM6Mw=
Subject key identifier: B0:6C:43:0B:61:BE:7A:38:01:91:CD:5D:FD:10:5C:3A:F2:14:82:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AFF389A8F3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/sGxDC2G-ejgBkc1d_RBcOvIUgvw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 11 Apr 2022 12:43:37 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.156.116.0/22
IP: 91.228.168.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 755705161971 (0xaff389a8f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 11 12:43:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b06c430b61be7a380191cd5dfd105c3af21482fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:74:83:ca:9c:10:c2:fa:01:e5:30:6b:03:
29:b7:58:2f:93:de:e6:15:af:dd:01:03:3a:f6:52:
af:3b:38:86:30:7a:4f:52:7e:64:21:e5:84:70:0f:
bc:ff:63:be:7d:1e:9b:96:97:09:0a:bc:4e:b9:a3:
b0:b3:2f:b4:1e:04:d7:28:7a:cd:c4:bc:22:23:96:
52:99:2c:6d:c1:5d:01:3d:91:a1:25:d8:9b:00:d7:
a3:34:20:71:0e:d2:a6:ad:1d:84:2d:f0:07:20:3f:
ab:9a:85:7f:ef:8a:ec:f9:cc:53:0a:2b:2f:86:1b:
7e:4d:b0:9d:1e:2e:18:01:20:cf:04:d7:3e:86:28:
e8:86:a3:02:aa:dd:50:b5:41:44:6b:b5:6c:8e:79:
a9:f7:91:9a:7c:d1:e0:d0:b3:81:cd:17:cc:17:cb:
4e:39:5d:99:f9:64:00:d6:b1:af:29:62:3a:52:be:
66:90:6e:33:1c:c9:c4:0c:ed:e3:36:2b:9c:b6:35:
68:24:a7:26:b4:72:1d:59:a8:ac:53:dc:4b:d5:b0:
bc:8e:fe:f1:8f:b1:e8:ab:e3:cc:4a:06:46:b4:15:
70:4a:6e:a4:b8:d4:64:d5:02:5e:e5:e4:9f:20:bb:
fb:b4:14:ab:bf:b1:38:f7:3c:c3:11:27:a3:61:53:
21:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6C:43:0B:61:BE:7A:38:01:91:CD:5D:FD:10:5C:3A:F2:14:82:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/sGxDC2G-ejgBkc1d_RBcOvIUgvw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.116.0/22
91.228.168.0/24
Signature Algorithm: sha256WithRSAEncryption
62:bd:22:8a:78:16:87:06:63:16:58:dc:dd:f2:3f:14:a2:e7:
2a:24:e5:d1:6e:13:23:89:11:26:41:69:17:2b:87:56:6d:cc:
0e:40:8d:f8:3d:8c:de:fd:e7:a0:8c:43:cd:7f:91:5e:be:f8:
9b:2e:41:50:16:d8:62:f4:92:22:df:4d:db:29:c0:55:ae:8e:
76:1a:40:0e:cc:6c:8c:5d:fd:f9:bb:47:a8:dd:c3:95:80:de:
15:a5:e9:29:ca:32:2c:9a:60:67:68:92:fe:49:79:d7:af:6e:
a9:76:d7:e1:6d:b7:32:db:9e:d0:6d:be:33:c6:3d:59:50:65:
0a:ba:4c:9d:a6:3a:d7:11:55:a5:c4:4c:09:0f:16:65:04:81:
d3:24:07:ef:f2:3a:96:a2:dd:b2:c2:be:24:8e:e4:a7:94:63:
4f:a9:da:81:6b:a2:3e:65:68:6f:59:ea:cf:42:4f:55:e8:1c:
41:53:4a:7e:3e:b8:f5:e5:ee:63:8e:d5:c2:69:23:9c:8a:04:
83:1d:29:10:3a:2f:82:e3:34:96:0c:46:08:20:f8:dc:fe:87:
b1:61:9b:1b:65:bc:54:d5:70:4e:19:41:06:d4:21:3b:4b:28:
c0:91:75:f3:84:3d:b7:cc:36:44:16:75:82:79:d1:f8:c3:6b:
e2:e7:cf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:49 2024 by rpki-client on console-ams.rpki-client.org