Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xCejeZHttb_BukcfW6cZ7meo3Yw.cer
File: xCejeZHttb_BukcfW6cZ7meo3Yw.cer (raw, json)
Hash identifier: 4vvc06VVdn2s4PpdCAd3+QYHF9j7k0F23XQn8HD+byo=
Subject key identifier: C4:27:A3:79:91:ED:B5:BF:C1:BA:47:1F:5B:A7:19:EE:67:A8:DD:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AA6DC5BDC7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/f046d5-0c1f-4a23-b7fc-7fa80c2fea4c/1/xCejeZHttb_BukcfW6cZ7meo3Yw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/f046d5-0c1f-4a23-b7fc-7fa80c2fea4c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:55:39 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.151.224.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 731986116039 (0xaa6dc5bdc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:55:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c427a37991edb5bfc1ba471f5ba719ee67a8dd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:66:17:2a:d9:da:d7:32:2b:3e:64:7a:8c:8c:
c1:8a:6e:50:0a:93:8b:e2:22:84:c3:9d:fd:52:ae:
42:d9:0d:29:33:ec:a8:af:21:31:56:a9:9b:08:84:
06:91:58:87:27:3b:85:a4:08:51:e3:72:d4:b5:62:
f5:55:28:f2:b9:b6:ec:32:df:13:fb:f2:57:ce:5d:
74:01:44:5e:fb:bf:68:9a:a0:75:48:3e:f3:7b:a5:
68:49:17:0a:1c:0e:b2:5e:72:de:9c:9f:44:93:ff:
f2:f0:48:97:37:06:61:b8:f7:af:fd:40:55:24:f4:
6f:59:39:7b:46:e0:d4:ab:29:e0:16:1b:74:51:13:
95:d5:bb:ef:28:ec:00:73:2d:3f:e1:4f:cc:63:d1:
6c:98:94:db:0b:16:e0:3b:73:e4:ee:94:65:a2:6b:
b0:1b:23:e5:d1:8f:4f:ab:f8:85:8c:4b:ab:4c:f5:
99:fd:56:fa:ca:4d:e5:e9:06:b8:25:a1:c8:e9:fd:
b2:37:0b:48:8b:2f:2a:ae:f9:c3:d2:74:66:5b:92:
c8:d0:5f:28:8b:90:18:71:7c:30:3f:ad:8a:fb:a9:
f2:ce:9f:f7:39:22:9f:39:6e:66:b2:28:35:a8:df:
e7:df:34:60:34:14:23:df:cc:b1:66:4a:c1:ac:28:
06:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:27:A3:79:91:ED:B5:BF:C1:BA:47:1F:5B:A7:19:EE:67:A8:DD:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f046d5-0c1f-4a23-b7fc-7fa80c2fea4c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f046d5-0c1f-4a23-b7fc-7fa80c2fea4c/1/xCejeZHttb_BukcfW6cZ7meo3Yw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.224.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:4a:44:0d:15:62:ce:91:f3:1e:bf:f9:de:b7:95:6e:95:1d:
a3:1c:82:85:45:98:fc:4c:42:fd:ad:36:90:cc:ab:d6:af:20:
a4:bc:40:96:e7:af:77:08:6e:d8:f7:bb:67:35:03:d0:8b:a7:
ae:63:e1:fd:b7:79:19:d7:62:c6:44:91:05:99:de:35:74:1d:
a0:1f:48:e5:3b:81:b6:07:44:ec:41:8c:24:b4:32:66:20:52:
af:77:13:5c:b9:c8:e2:06:aa:a7:fd:e6:58:44:71:76:39:8f:
2e:ef:88:fd:41:35:71:84:52:ee:b4:58:0b:87:84:80:23:79:
1c:ee:fc:93:3f:76:ec:dc:3c:1b:78:0c:1f:91:ba:96:43:2e:
7b:3d:3e:88:d8:42:cc:90:ce:bc:fb:e6:b2:e7:54:a2:19:e2:
f2:70:ac:3b:c3:f9:47:01:e4:6e:c6:4c:5a:d7:7a:c7:1f:37:
7e:3a:7a:84:6c:42:04:c9:bd:23:c7:1c:be:e3:d7:90:f7:39:
18:82:eb:8b:29:31:72:92:6d:b4:6a:6d:16:12:5b:3c:51:e4:
c9:85:eb:52:4a:8a:03:1b:51:fd:90:ac:11:e1:93:e0:7b:67:
0f:03:f0:51:4d:75:d8:ff:5d:ed:95:26:c8:e5:fc:4e:3e:c5:
e0:7a:50:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:02 2024 by rpki-client on console-ams.rpki-client.org