Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zLZufd80Q5GapYwRDxDXa8RrQzA.cer
File: zLZufd80Q5GapYwRDxDXa8RrQzA.cer (raw, json)
Hash identifier: ONQpY4TgAfknPRr6PAj2HV6vyOzi2PklKuemRkv0oVM=
Subject key identifier: CC:B6:6E:7D:DF:34:43:91:9A:A5:8C:11:0F:10:D7:6B:C4:6B:43:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A3D903F4F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/b6dd11-a42e-4145-826d-cd7488c7e5f1/1/zLZufd80Q5GapYwRDxDXa8RrQzA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/b6dd11-a42e-4145-826d-cd7488c7e5f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:58:01 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.66.244.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 703720584433 (0xa3d903f4f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:58:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ccb66e7ddf3443919aa58c110f10d76bc46b4330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ae:b6:8d:07:66:7f:32:f8:2c:c6:75:5d:f0:
2e:ec:45:c9:63:ab:ea:f3:ec:a5:11:fe:6b:b1:17:
f2:b7:6e:70:8c:67:aa:22:c2:f4:f2:3d:9c:72:dc:
ff:5c:58:54:47:3a:22:32:4c:e5:ba:8d:8a:9c:85:
e0:0a:24:f0:0d:e7:8d:24:73:f2:20:bf:8d:7a:6a:
eb:e6:b0:a5:86:18:c0:e3:2b:fd:19:0d:46:24:b1:
1a:55:45:06:a0:2b:83:4f:55:6c:59:f5:37:fa:61:
a9:17:86:5b:75:74:b3:2c:84:d9:b4:54:5f:0c:f9:
7e:14:82:17:ba:7d:89:e2:b9:af:c8:9e:df:1f:ec:
66:29:0a:17:64:85:0b:38:06:53:f2:c3:07:07:fc:
64:74:48:14:5a:ff:4d:73:95:2a:fc:ce:5b:b9:25:
cd:05:cf:f0:24:74:40:af:9f:d9:e8:f0:ab:62:69:
19:d0:0a:0b:9b:87:e0:32:5f:15:ee:79:bc:73:86:
2c:1a:ec:38:dd:93:e4:79:9d:d3:54:36:d8:9a:95:
97:4e:eb:66:5d:c1:6a:7a:08:5b:2e:1f:ed:7e:47:
61:8e:a7:66:d7:aa:08:04:bd:21:00:72:95:30:1a:
29:c0:ec:eb:46:8d:98:74:f0:47:b7:62:0e:12:f2:
ef:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B6:6E:7D:DF:34:43:91:9A:A5:8C:11:0F:10:D7:6B:C4:6B:43:30
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b6dd11-a42e-4145-826d-cd7488c7e5f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b6dd11-a42e-4145-826d-cd7488c7e5f1/1/zLZufd80Q5GapYwRDxDXa8RrQzA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.244.0/22
Signature Algorithm: sha256WithRSAEncryption
27:a9:68:8a:ad:de:be:f6:c9:24:6b:4a:34:c2:54:28:d0:bf:
25:ed:80:9b:b0:d4:0c:ef:bd:d7:a0:0a:04:68:2a:61:39:9c:
cb:98:ee:46:1c:f8:28:df:5a:27:85:ed:67:df:9b:bd:1e:ae:
d5:a2:9f:38:5a:9e:a9:98:d4:d6:43:91:81:9f:84:be:27:2c:
59:eb:fa:16:95:38:44:b1:5b:9e:c6:97:82:16:e2:8a:8d:bc:
7f:86:94:57:9c:90:65:48:e7:f4:e5:80:56:e1:f8:94:29:1b:
f7:f5:7b:d8:10:28:7f:66:90:c0:c2:2b:f0:4f:16:16:97:a7:
9a:96:75:4b:6b:27:3b:af:33:cd:9d:81:1f:3d:97:e0:de:2e:
a7:f5:2b:4b:38:03:fd:9d:da:ef:c6:80:b6:66:91:e4:d2:2a:
ce:e5:5c:aa:67:44:76:ce:54:1d:ab:a8:01:25:5b:3b:c8:94:
0e:76:49:59:8e:7d:6b:a0:00:4a:13:f3:00:ae:41:7b:3f:8c:
08:2d:bd:bb:99:06:d6:a7:e9:05:22:3d:9b:2a:42:62:80:0d:
f7:8c:bf:a7:bb:03:fa:98:cc:9c:1a:b0:98:42:6e:dd:cc:1d:
86:7b:86:78:5a:17:4d:08:29:f5:e5:cb:f9:9c:89:7b:8d:4e:
17:f0:f0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:39 2024 by rpki-client on console-ams.rpki-client.org