Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FkNUOk8mFydLYEGZCJRN19IIS-Q.cer
File: FkNUOk8mFydLYEGZCJRN19IIS-Q.cer (raw, json)
Hash identifier: v2lzH5sov/XrUMUIwFeD2gsG5rLrBEeMKymZTfrQa+c=
Subject key identifier: 16:43:54:3A:4F:26:17:27:4B:60:41:99:08:94:4D:D7:D2:08:4B:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9AC9937D22
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/74fcba-715e-4974-86fd-657789fa036e/1/FkNUOk8mFydLYEGZCJRN19IIS-Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/74fcba-715e-4974-86fd-657789fa036e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:58:37 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.141.4.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664806849826 (0x9ac9937d22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:58:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1643543a4f2617274b60419908944dd7d2084be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b2:f0:36:69:38:fc:8c:04:a0:07:4c:f1:5a:
b8:b4:ab:13:68:c7:10:e2:ef:87:e1:3c:a5:d8:10:
bd:06:17:ec:a8:9b:91:86:2a:8b:ad:ca:b5:f9:63:
1e:8a:31:43:1d:54:85:42:d3:be:c8:b5:e6:64:19:
43:61:e1:65:3e:71:2b:31:41:69:d0:24:80:63:52:
a2:07:57:cf:d6:55:d2:c2:6c:c3:ed:8f:69:d4:26:
46:70:a2:b1:2e:1f:74:cc:d9:bf:76:53:11:02:ae:
4e:64:b9:e9:be:23:43:96:fe:dd:a3:f8:1d:d8:23:
f3:a7:2d:fe:d3:86:b8:75:6e:3e:f8:cd:fc:45:7a:
d4:9e:35:79:df:a8:1a:b3:88:8d:46:48:64:69:f2:
aa:67:f0:04:2f:b3:ef:52:b2:06:8a:4f:d1:c6:83:
0c:f6:67:d8:e6:43:5a:24:18:d1:1e:12:48:9e:1f:
08:2d:46:c5:f2:d3:31:e3:2b:cb:72:85:fe:f5:b2:
0d:d7:5b:52:39:82:8f:e5:3e:0d:74:94:c7:7e:16:
ec:86:47:0d:23:9b:39:99:d4:6b:41:bc:1b:65:1f:
cd:0b:b7:2b:9c:32:0a:85:c9:d9:e3:17:bd:4b:df:
90:14:6a:30:6b:68:38:03:ab:1b:c5:06:42:09:11:
2f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:43:54:3A:4F:26:17:27:4B:60:41:99:08:94:4D:D7:D2:08:4B:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/74fcba-715e-4974-86fd-657789fa036e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/74fcba-715e-4974-86fd-657789fa036e/1/FkNUOk8mFydLYEGZCJRN19IIS-Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.4.0/22
Signature Algorithm: sha256WithRSAEncryption
03:bf:c5:14:79:f9:a1:b5:14:54:71:c3:a6:b9:2e:63:00:40:
3e:c1:78:63:bd:b5:a8:ae:eb:69:56:50:0a:04:66:f8:32:15:
66:9b:e9:72:d1:b1:d2:29:f7:3e:81:5f:22:69:bf:5c:08:01:
6b:9e:9b:7f:8a:0d:ef:6d:e1:b7:74:79:d5:ff:36:8f:aa:08:
6e:f2:97:f5:ed:e0:62:7a:e9:9e:a7:e4:25:b2:45:c1:40:4c:
4f:ad:8c:82:f7:9b:73:02:55:e1:2e:db:50:b0:f8:d8:b5:45:
d3:36:c9:5b:f6:e3:f0:7c:7c:15:bb:50:ba:00:8a:c3:97:7c:
c3:da:33:a0:96:0f:6f:d0:a5:6e:d4:67:f1:6d:38:38:71:5f:
8c:5d:f4:32:84:57:c1:75:a4:5a:93:54:36:6e:ed:56:6b:65:
3c:d3:f7:fa:e2:4b:50:86:80:be:02:2d:f6:8f:31:73:09:ce:
50:58:9f:b6:81:0d:ae:f2:f3:30:e2:5a:b5:61:fb:75:17:be:
68:27:1e:a1:51:33:88:8a:d2:a8:ff:44:df:be:c1:b4:48:ac:
b9:e3:39:1a:3d:9a:8d:34:9e:16:3a:14:cc:50:83:13:7a:a6:
a4:98:e3:94:c0:71:0b:9f:5d:bc:df:c4:9b:d1:3b:e9:bd:c1:
41:44:b5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:15 2023 by rpki-client on console.sobornost.net