Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3fSHLcKJH7o5U93h9LdEpF3VPSw.cer
File: 3fSHLcKJH7o5U93h9LdEpF3VPSw.cer (raw, json)
Hash identifier: nsF/WepWK0y4YxaTJBXG6Ko4/WPAF6a02KH2Jb+xuDQ=
Subject key identifier: DD:F4:87:2D:C2:89:1F:BA:39:53:DD:E1:F4:B7:44:A4:5D:D5:3D:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A78BF5170C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/64223e-c628-4f87-b390-60901b3138f8/1/3fSHLcKJH7o5U93h9LdEpF3VPSw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/64223e-c628-4f87-b390-60901b3138f8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:01:44 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.183.112.0/22
IP: 2a0b:c80::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 719607633676 (0xa78bf5170c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:01:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddf4872dc2891fba3953dde1f4b744a45dd53d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:25:b1:1f:82:33:ba:52:59:a8:af:b9:4e:27:
cb:e9:cd:e5:a1:aa:f7:ea:21:2c:bd:70:fc:f3:06:
5d:de:52:76:05:96:61:1a:65:d4:8a:a6:03:df:a4:
8f:27:7d:c1:c9:44:e1:8a:5b:d6:39:c3:2b:8e:44:
89:1b:97:7a:c7:cd:25:fe:bc:46:ed:e7:b1:b7:09:
32:83:92:0e:df:1c:30:6d:d5:53:bf:50:6c:96:de:
c0:67:aa:32:de:5d:0a:16:24:86:82:43:bc:36:b7:
19:68:18:78:82:8f:74:2f:32:cd:2f:f9:8f:5b:61:
31:6d:2c:fb:19:33:cb:92:68:5d:f7:15:5d:82:70:
25:63:ff:a7:0e:57:df:75:0b:8c:22:8d:86:c9:4c:
49:fd:62:8d:66:a5:03:b1:66:29:8f:f4:0e:ca:70:
68:26:09:4d:07:65:16:e3:92:53:c3:4d:8d:71:e5:
d6:21:2a:e0:5a:bb:ec:dd:ec:c7:3d:7e:b2:f4:1d:
cb:77:ea:0f:e0:4a:c3:a8:75:12:70:04:50:d7:f0:
de:43:e9:db:8d:1f:c2:53:b7:d0:32:da:97:30:ff:
fb:03:5b:1e:8b:03:b6:e8:93:bc:69:fa:f1:1f:c8:
cb:5f:99:99:94:94:d2:0e:80:20:12:14:42:ca:3c:
7f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F4:87:2D:C2:89:1F:BA:39:53:DD:E1:F4:B7:44:A4:5D:D5:3D:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/64223e-c628-4f87-b390-60901b3138f8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/64223e-c628-4f87-b390-60901b3138f8/1/3fSHLcKJH7o5U93h9LdEpF3VPSw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.112.0/22
IPv6:
2a0b:c80::/29
Signature Algorithm: sha256WithRSAEncryption
59:c4:67:02:40:09:03:d0:dd:d5:eb:bb:4c:a0:50:d5:0a:6e:
12:d5:be:c0:99:07:81:23:8e:49:c3:bd:1c:a4:99:94:62:21:
45:fc:63:93:d7:37:b9:fa:f9:69:0d:be:23:36:ed:71:ec:42:
ec:5e:92:1c:52:13:db:83:a9:75:ee:a4:5a:3c:80:77:13:ac:
68:5c:8b:61:61:2d:ec:bd:43:1f:ad:78:55:ce:40:ea:3d:75:
72:31:e1:d1:66:a5:0c:70:0a:e8:f4:b4:28:af:c8:ac:43:9c:
7b:82:8d:20:50:7f:c1:b9:c8:f1:59:5f:ad:ff:ac:58:2c:60:
07:a6:3d:08:ea:d3:55:50:df:51:bb:78:cc:6b:22:df:ae:a7:
41:43:25:01:81:f3:5d:30:68:8f:be:fc:ea:bc:21:5a:82:c3:
49:42:d2:0f:30:53:57:c2:ae:4e:f6:ab:4c:e7:49:cc:76:10:
c8:9f:ee:65:46:95:3e:70:aa:e8:b9:1f:e6:9f:d3:4b:ef:f6:
f3:d9:17:59:40:78:05:05:6b:d8:85:0c:f3:8b:df:e0:4c:ce:
3c:39:3b:6d:c8:a3:4d:33:d5:d2:45:c0:a3:1c:9c:10:dd:6e:
ec:ae:80:c9:00:46:ba:8a:2b:61:03:d7:7f:68:9a:6f:a4:2b:
ca:56:e3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:13 2023 by rpki-client on console.sobornost.net