Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_KiL62AawG_Cg-HClTj_A3sROBY.cer
File: _KiL62AawG_Cg-HClTj_A3sROBY.cer (raw, json)
Hash identifier: +dYPElaXQ1ca6TcEW51ck4dEYcD0m0TVZm3MW7I4khY=
Subject key identifier: FC:A8:8B:EB:60:1A:C0:6F:C2:83:E1:C2:95:38:FF:03:7B:11:38:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A887454167
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a6c6e-5aa5-4aaf-99a2-273d8a51a9f6/1/_KiL62AawG_Cg-HClTj_A3sROBY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a6c6e-5aa5-4aaf-99a2-273d8a51a9f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:00:25 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.147.200.0/22
IP: 2a0f:2c00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723823968615 (0xa887454167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:00:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fca88beb601ac06fc283e1c29538ff037b113816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:6c:25:47:15:23:bd:b1:5e:56:34:2a:eb:
64:f1:8f:0f:d8:5c:0b:87:3b:b0:22:8c:ec:15:47:
a7:e1:a9:ff:60:2a:53:be:19:27:1c:51:e3:11:80:
6f:86:35:f0:bd:c3:ef:9b:49:29:35:62:c0:dd:5f:
71:8b:84:48:ca:45:2d:74:98:98:ce:71:6f:21:fc:
71:8d:6d:1a:e5:65:70:dd:eb:7d:0c:60:c5:f6:06:
a4:5d:25:78:d3:b0:b7:bc:43:85:a3:0a:f4:52:38:
be:51:06:37:c8:f1:ec:cc:0c:7d:8e:32:c4:4f:0b:
e1:c3:6a:b6:92:88:1a:e1:90:7b:17:15:7a:54:9e:
92:97:37:13:23:34:9f:26:81:5b:2d:04:3e:1e:41:
ea:2b:cc:54:3d:8c:6b:90:95:90:e4:83:02:c8:cf:
5f:27:07:81:5a:e6:64:d9:27:d7:14:f4:58:7b:32:
37:11:87:3b:fa:31:07:3c:eb:cc:23:08:4c:5a:a8:
23:2a:b6:7a:37:e3:33:87:de:a8:c6:6a:fd:48:06:
79:ad:2f:a7:6e:b7:5e:73:d8:93:1c:c2:78:b8:51:
92:c9:8d:99:23:f5:3b:bb:2a:ce:73:1c:03:06:dc:
6a:f3:bd:ac:85:8d:6c:78:61:f0:65:e3:47:dd:58:
9c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A8:8B:EB:60:1A:C0:6F:C2:83:E1:C2:95:38:FF:03:7B:11:38:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a6c6e-5aa5-4aaf-99a2-273d8a51a9f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a6c6e-5aa5-4aaf-99a2-273d8a51a9f6/1/_KiL62AawG_Cg-HClTj_A3sROBY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.200.0/22
IPv6:
2a0f:2c00::/29
Signature Algorithm: sha256WithRSAEncryption
6b:de:fc:5a:b5:64:4d:78:87:18:c4:e6:92:35:96:ac:ef:b8:
1d:2e:e2:0a:b2:e0:c7:f1:d2:3c:be:ed:25:2d:41:e4:b6:fb:
8e:ce:87:c7:3a:0c:c5:74:0f:a7:56:8c:64:9d:d6:41:f0:77:
7a:e2:32:9b:51:24:97:bd:94:d1:97:9d:78:24:6c:d4:28:14:
70:82:ed:a4:d0:37:21:e0:e3:22:98:e8:c7:72:6d:13:d1:60:
8e:5a:85:86:8b:3d:86:ea:f5:0a:be:34:65:17:22:82:fd:c3:
9f:f7:ed:7e:21:5d:dd:df:03:89:9b:9f:21:82:6d:50:5d:30:
78:4b:49:9b:ab:ea:f5:8f:2e:ec:46:e2:1e:56:82:ca:38:d2:
9d:ca:d5:41:e8:3d:7d:3f:0b:a0:8e:71:3e:83:5a:7c:7c:4b:
0b:94:18:a7:c3:e2:5a:eb:14:62:ce:91:9d:86:de:f1:7f:2f:
38:4e:b4:6d:7e:3d:72:25:d5:44:c4:16:e5:4e:74:0a:af:0d:
e5:eb:35:55:5b:dc:b1:1f:c7:7d:8c:0e:27:63:85:1b:44:9f:
6f:e9:2c:b1:5e:cb:3d:cf:3d:18:38:1a:67:51:8e:b1:91:03:
c0:59:46:49:d5:ee:c6:bd:8a:79:76:5c:bc:d4:be:eb:fa:c4:
31:39:72:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:44:28 2023 by rpki-client on console.sobornost.net