Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ySo0INjwnOUgyFomlPGjwwcgE04.cer
File: ySo0INjwnOUgyFomlPGjwwcgE04.cer (raw, json)
Hash identifier: xDtOh3NOgCD2E/DkvKd0YL/H5fGSGMfWb0FmSTFFxeA=
Subject key identifier: C9:2A:34:20:D8:F0:9C:E5:20:C8:5A:26:94:F1:A3:C3:07:20:13:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A50E4AB8FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/a96877-301c-4792-9b04-ccaa0c2a7720/1/ySo0INjwnOUgyFomlPGjwwcgE04.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/a96877-301c-4792-9b04-ccaa0c2a7720/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:57:55 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.80.68.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 708909381885 (0xa50e4ab8fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:57:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c92a3420d8f09ce520c85a2694f1a3c30720134e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:64:a7:5e:28:d1:d6:28:51:ce:3a:45:17:
80:f5:d4:e0:46:cd:2b:7f:f1:a1:b4:72:d3:91:af:
32:23:0d:3d:53:1b:c0:b6:84:65:65:a2:37:15:4c:
77:e8:f6:df:15:fa:0e:2d:f9:17:eb:d9:21:26:c9:
96:be:27:67:bb:db:f4:50:a6:7a:bd:f1:56:c2:73:
5c:b4:fc:2e:82:c0:87:66:23:f6:a6:36:ef:34:3e:
d1:cf:1c:54:ce:2f:a3:eb:10:04:5d:44:07:59:af:
83:15:6d:cd:b2:b6:c4:b6:4b:38:e4:39:be:4e:33:
1a:bf:36:9e:8f:a8:f9:b5:72:92:e9:2b:f7:f9:50:
23:ea:63:b4:08:f2:78:dc:93:99:12:91:2f:28:7d:
ab:a2:ff:3a:b2:b1:95:16:ba:6b:8b:61:06:98:8e:
db:5f:7b:b8:99:a1:0a:fe:00:ac:c2:e0:7c:d4:58:
15:cb:bd:3a:b4:e0:1e:62:b6:3a:ae:7a:64:1f:d5:
61:1a:5d:f0:da:c5:df:08:71:86:fb:9d:4b:b5:91:
53:d2:3d:63:02:8d:23:4e:fa:c4:10:32:e8:09:fa:
7c:4a:3e:e4:f8:e6:d2:0c:36:6d:f4:9f:cb:f0:61:
eb:9d:60:39:eb:0a:3b:fd:55:a5:24:52:44:a1:68:
77:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2A:34:20:D8:F0:9C:E5:20:C8:5A:26:94:F1:A3:C3:07:20:13:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a96877-301c-4792-9b04-ccaa0c2a7720/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a96877-301c-4792-9b04-ccaa0c2a7720/1/ySo0INjwnOUgyFomlPGjwwcgE04.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.68.0/22
Signature Algorithm: sha256WithRSAEncryption
30:33:d4:15:8d:b3:d0:36:4b:91:54:9b:19:b5:4c:a5:53:38:
25:5e:c8:90:ec:b9:c0:bf:01:e2:fe:36:b0:61:8c:a0:c9:df:
90:b9:42:d0:b0:fd:a7:0e:7b:da:17:f1:fb:5a:14:c8:05:50:
38:fc:8c:7b:54:b5:5d:d4:89:62:07:a8:e8:86:0a:a4:bc:95:
44:a5:e5:60:7e:61:4e:50:f2:77:72:7b:aa:de:d0:2e:dd:c2:
21:03:82:01:3e:b4:18:1f:8e:c0:93:79:7a:3b:af:f1:da:40:
02:9f:ad:33:3d:22:02:b0:4f:94:c5:d8:a8:79:f0:e3:c5:4f:
93:c9:93:46:c8:48:a5:59:60:4f:85:b5:16:cd:3c:c4:85:6c:
a4:a3:94:54:04:09:c6:48:a8:c2:a3:db:de:54:be:f5:b3:84:
64:75:4c:4a:91:32:46:b9:41:27:5b:0a:90:8b:8e:8b:5c:e2:
5e:0c:c8:5c:59:c0:eb:6b:69:a5:c6:37:ed:9c:4d:4e:89:20:
b7:a8:c0:64:19:f1:97:33:18:09:65:9a:95:20:cd:d9:41:80:
aa:94:4b:03:d1:dc:28:eb:0b:8c:23:96:c5:ed:73:fb:7c:b9:
35:b3:10:55:6c:86:00:43:f6:58:24:93:06:1a:ad:64:57:81:
2b:dc:24:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:08 2024 by rpki-client on console-fra.rpki-client.org