Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vD4XK_clhJM0rZK_eL9_fyG3OqQ.cer
File: vD4XK_clhJM0rZK_eL9_fyG3OqQ.cer (raw, json)
Hash identifier: e3Xv5ZVoNH9v9HCkUCaz5kWQtsMNbgVJfSMdPNoD464=
Subject key identifier: BC:3E:17:2B:F7:25:84:93:34:AD:92:BF:78:BF:7F:7F:21:B7:3A:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0184BD6D663009022916474C42D22E6D38A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/fce7c1-a583-4b4e-a591-72bc856ed676/1/vD4XK_clhJM0rZK_eL9_fyG3OqQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/fce7c1-a583-4b4e-a591-72bc856ed676/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 28 Nov 2022 08:49:34 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.141.156.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bd:6d:66:30:09:02:29:16:47:4c:42:d2:2e:6d:38:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 28 08:49:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc3e172bf725849334ad92bf78bf7f7f21b73aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:20:94:cc:59:7f:54:c8:8b:77:f6:77:5b:d1:
74:e0:be:9b:95:f4:3f:b5:36:dd:9c:39:90:cb:37:
8c:e4:34:14:6d:af:7f:d4:8e:a7:e1:82:72:70:13:
a4:41:48:18:f8:42:5a:aa:f8:45:2e:f6:da:d9:43:
98:35:c9:8e:f5:f2:88:fa:49:f7:74:42:f9:ac:b6:
33:84:a4:34:18:be:97:76:49:cd:98:b9:95:e7:91:
88:4a:62:e2:8e:f0:0d:70:4a:56:26:d0:f5:99:a9:
b5:7c:fa:0b:7d:ab:c8:f3:96:2c:60:8a:dc:33:80:
da:ed:44:67:28:f3:29:03:62:e2:7c:15:ef:31:02:
cb:15:dd:06:38:23:d9:46:46:2b:55:49:4a:87:fa:
d0:90:ad:0f:2b:c7:dd:46:6c:f2:3e:38:60:bb:aa:
db:74:a6:33:4f:66:f5:0e:8b:77:b7:32:17:92:b0:
7e:b7:9d:20:1a:43:58:8c:61:e7:e6:53:0d:ce:ad:
ee:72:c1:57:db:63:7e:85:7e:d4:b0:d2:f9:a2:d0:
93:29:d1:b9:bd:d4:6c:db:3b:76:a1:f7:ad:ba:33:
d0:2b:a2:08:a9:58:5d:9b:28:f1:0b:5a:fa:cb:08:
a6:9c:8e:0a:69:47:1d:80:11:ee:ee:ff:40:41:af:
50:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3E:17:2B:F7:25:84:93:34:AD:92:BF:78:BF:7F:7F:21:B7:3A:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fce7c1-a583-4b4e-a591-72bc856ed676/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fce7c1-a583-4b4e-a591-72bc856ed676/1/vD4XK_clhJM0rZK_eL9_fyG3OqQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.156.0/22
Signature Algorithm: sha256WithRSAEncryption
84:36:be:20:13:7f:ae:ee:1e:c7:5d:b8:52:34:7c:22:46:d1:
06:76:fc:e7:1e:bf:97:eb:a8:c3:08:f2:11:c5:7c:18:41:4f:
dc:1e:ee:b0:40:01:69:b5:24:6e:93:a4:3f:91:76:db:3b:a8:
01:2c:da:66:f5:b1:ef:45:75:b9:3d:cd:08:34:d9:d4:39:e4:
87:74:72:85:1d:18:32:e7:db:2a:19:a8:1a:84:b0:f4:84:c9:
1b:29:41:6d:20:f6:48:1f:e5:5d:19:ec:79:2e:70:eb:d2:61:
2f:05:00:66:11:aa:51:92:24:5a:ab:45:42:79:45:17:ab:f7:
e5:e9:ac:22:3b:45:fb:5f:09:c5:f9:61:d6:47:b9:92:3e:8e:
70:16:fb:f4:be:38:19:44:bb:0b:72:c8:6a:6f:63:34:6f:b0:
71:69:13:74:d2:c1:cc:80:4e:ed:25:15:f7:ef:ae:61:23:9a:
89:9d:3d:eb:74:d2:a4:6f:4c:62:ae:20:16:9e:87:91:28:97:
ae:21:95:b1:36:da:95:f3:3e:7b:95:ce:82:56:28:f0:ba:95:
c7:c7:63:af:db:a3:11:c1:87:8b:40:5a:e1:18:8d:8a:97:6f:
b0:94:be:70:c5:b8:87:c5:18:3a:89:22:95:fe:92:29:c7:25:
99:6b:a5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:26 2024 by rpki-client on console-ams.rpki-client.org