Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M3KI_NACCinFs74ZnVXwooDDbQk.cer
File: M3KI_NACCinFs74ZnVXwooDDbQk.cer (raw, json)
Hash identifier: hZ8vlot5fsvuZHY8JnwmpAm++U/BqnvVtOgiHR+AIMs=
Subject key identifier: 33:72:88:FC:D0:02:0A:29:C5:B3:BE:19:9D:55:F0:A2:80:C3:6D:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A50F15B797
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/bb0a7d-827b-441d-9563-15c2bdc2465f/1/M3KI_NACCinFs74ZnVXwooDDbQk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/bb0a7d-827b-441d-9563-15c2bdc2465f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:57:56 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.91.100.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 708922685335 (0xa50f15b797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:57:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=337288fcd0020a29c5b3be199d55f0a280c36d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:cb:52:ce:01:d0:d0:8d:1d:2f:c6:02:ac:
d7:e3:b7:e4:42:35:13:41:cf:be:e9:14:bd:0d:d7:
23:b2:37:87:64:e1:a5:4e:77:63:bf:d9:f0:5a:7c:
3e:dc:a3:27:2e:a7:e7:be:00:48:1d:fb:54:7d:1c:
5c:02:04:d8:f2:e3:d1:04:ba:75:f8:28:de:ad:92:
20:75:65:2a:57:29:10:0b:87:cf:4d:98:17:6e:c1:
c5:d3:2f:a5:b1:6e:3c:89:86:bb:b8:cb:09:0a:f3:
a9:0d:d4:9a:dd:f6:d3:9b:24:f5:2c:12:a1:25:6c:
a8:a1:47:08:24:4a:b4:43:e4:3b:d2:53:ba:1b:3c:
47:0f:d6:83:39:63:bd:ca:30:f0:f5:5b:9e:78:fc:
3e:25:cb:fb:63:83:6c:e4:cf:3a:35:98:39:2e:c8:
f8:cf:48:97:b6:63:d9:21:ed:8a:5b:55:bd:e9:c5:
eb:9a:c1:f3:92:81:13:08:66:14:c0:a9:04:f8:88:
fc:c6:36:75:7a:02:71:4a:53:5d:db:fb:0d:6f:f7:
f7:48:83:f5:d6:44:9f:f4:eb:84:d7:ac:d2:cd:75:
53:93:87:66:14:78:05:45:c0:ab:0b:fe:6c:9e:a8:
b6:62:2c:55:35:de:7f:9a:60:63:e8:6b:1e:cc:da:
42:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:72:88:FC:D0:02:0A:29:C5:B3:BE:19:9D:55:F0:A2:80:C3:6D:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb0a7d-827b-441d-9563-15c2bdc2465f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb0a7d-827b-441d-9563-15c2bdc2465f/1/M3KI_NACCinFs74ZnVXwooDDbQk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.100.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:a9:46:e3:9b:ae:28:b2:14:e3:e1:e2:f3:5c:de:3c:9e:40:
2b:e1:bd:4e:31:25:46:8d:2b:33:67:8f:c6:85:27:c2:d8:b5:
f3:f6:d3:55:87:42:7a:66:0b:9d:e6:2b:f4:4d:03:04:37:9b:
18:8d:63:c1:44:83:a0:ea:27:de:91:ff:e5:66:46:ab:b3:f4:
50:4d:79:da:0b:3d:f6:6f:5d:f3:12:60:2a:9d:bc:de:a1:e1:
2b:22:4f:06:8a:7c:08:0f:2f:70:84:08:6b:b4:db:eb:c5:63:
2b:4b:52:57:8e:05:cb:54:e0:20:3b:64:51:2f:94:62:34:ff:
58:5f:5d:3b:d8:b5:be:98:61:53:76:fb:24:f3:3f:c0:d9:d2:
20:8a:c6:3b:74:1b:dd:00:a8:c9:ce:cf:de:82:78:c4:49:76:
e0:fb:4b:e3:d7:55:8b:aa:75:b1:ce:f8:95:c7:15:2a:b0:26:
1b:13:b3:04:e4:5c:cd:da:29:2e:91:37:14:1e:ac:1e:91:3e:
80:13:1a:0e:8b:33:25:18:d3:dd:5c:4a:0a:48:a0:8e:6b:2c:
1a:dd:fa:c4:f1:4f:80:28:18:6c:99:bf:3a:04:32:3c:f0:d0:
5b:bb:64:4b:57:e0:d6:15:38:01:c8:15:68:a2:61:27:7b:58:
b5:44:8f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:56 2023 by rpki-client on console.sobornost.net