Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sqf5rhB_YK5CJcxNHjAabjg9NWA.cer
File: sqf5rhB_YK5CJcxNHjAabjg9NWA.cer (raw, json)
Hash identifier: qT3Z20YE9+heW9JIGo3nnwFgFrl0nCkRf5CZuJjyII0=
Subject key identifier: B2:A7:F9:AE:10:7F:60:AE:42:25:CC:4D:1E:30:1A:6E:38:3D:35:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9B0FE4D0E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/3d95e5-f9dc-4ece-b5aa-5b9100803ab7/1/sqf5rhB_YK5CJcxNHjAabjg9NWA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/3d95e5-f9dc-4ece-b5aa-5b9100803ab7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:01:26 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.155.204.0/22
IP: 2a0f:1280::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665986584807 (0x9b0fe4d0e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:01:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2a7f9ae107f60ae4225cc4d1e301a6e383d3560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:10:3a:2d:2c:f0:ef:c6:e4:18:83:36:69:e2:
c0:10:52:ff:c2:d6:94:f7:0b:7b:55:89:ff:54:d9:
52:29:81:7c:f7:f3:28:b0:45:ea:da:47:57:b2:84:
bd:82:23:36:cc:46:f1:69:a9:cd:77:f6:ed:4f:11:
ec:f2:8a:d5:17:07:20:e3:f8:34:bc:26:63:03:7f:
5b:1b:5b:12:aa:ed:26:5c:b4:3d:8a:b1:f9:1d:ed:
53:0e:d3:01:f7:de:95:c4:25:f7:5a:b9:e4:34:c1:
dc:43:59:63:f2:68:a8:10:c0:b6:5a:93:e8:21:e4:
dc:3c:64:0e:e5:27:3b:1b:3e:36:16:17:1e:10:23:
6f:bf:4a:01:d8:0a:2d:45:4d:62:5e:f4:de:88:43:
c2:c4:46:52:98:b3:73:97:e7:31:a3:5d:e9:5c:19:
5e:43:d7:70:2d:9d:84:ba:ce:a6:a3:16:24:13:0d:
b5:85:f9:87:50:43:47:c7:6d:57:a4:82:24:a3:a9:
38:82:7e:ae:09:6c:c6:f8:dd:ae:5f:e3:87:25:29:
9b:dc:93:40:cb:10:46:56:2b:72:b0:5a:26:65:88:
d0:8d:6f:84:24:01:9a:14:6b:1e:ee:51:57:a3:f1:
83:77:21:02:1d:2f:9d:60:53:ee:da:49:3d:04:9d:
65:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A7:F9:AE:10:7F:60:AE:42:25:CC:4D:1E:30:1A:6E:38:3D:35:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3d95e5-f9dc-4ece-b5aa-5b9100803ab7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3d95e5-f9dc-4ece-b5aa-5b9100803ab7/1/sqf5rhB_YK5CJcxNHjAabjg9NWA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.204.0/22
IPv6:
2a0f:1280::/29
Signature Algorithm: sha256WithRSAEncryption
9e:32:05:96:4b:ec:90:21:85:37:88:83:21:13:c5:21:40:da:
2b:f9:e0:de:d2:b8:23:12:a7:83:e2:28:ee:48:ea:1b:29:e2:
61:59:e0:9d:64:a3:c5:bf:14:2e:bc:09:51:08:e6:be:32:f7:
8d:1a:9c:69:b1:93:02:31:37:39:e4:9f:46:ce:d8:2f:32:14:
67:1b:31:83:3d:ea:ed:61:be:5c:75:e6:88:b2:59:7e:97:8c:
5e:51:4f:df:a7:47:b0:7f:3b:db:61:23:57:45:31:03:03:43:
58:23:9c:99:cf:39:3a:f7:fe:49:df:5c:10:bd:4b:75:dd:3b:
c2:eb:a0:fb:85:89:ed:7e:09:eb:83:f8:1d:e0:55:71:0c:e4:
63:60:05:b7:ef:b5:dc:70:4f:43:69:dd:ba:45:78:e9:45:80:
aa:85:d0:c6:22:5a:a4:fc:74:cc:63:88:0e:a7:97:1a:85:d6:
d5:0f:65:fa:a1:a6:20:e8:ba:46:03:e4:4d:18:13:9d:51:2f:
02:06:66:e6:0d:4a:3d:4a:86:a7:0f:f3:ce:92:0c:9f:88:c1:
81:a2:16:d0:92:28:13:24:70:26:93:56:5e:8e:b2:87:fb:52:
28:3f:6b:3b:0e:dd:bd:0b:1a:62:48:cb:53:c7:12:b6:a2:3d:
ab:c7:c7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:56 2024 by rpki-client on console-ams.rpki-client.org