Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uoP__Og5Lqg_uMvjawToYIhHxHk.cer
File: uoP__Og5Lqg_uMvjawToYIhHxHk.cer (raw, json)
Hash identifier: rCAzwBQKIqAWBIr3Dbyd6WuIdt+C/v2Hai6xblYs24M=
Subject key identifier: BA:83:FF:FC:E8:39:2E:A8:3F:B8:CB:E3:6B:04:E8:60:88:47:C4:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 99A77DB92D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/47a11a-3708-4cc7-b815-d96b659e18b4/1/uoP__Og5Lqg_uMvjawToYIhHxHk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/47a11a-3708-4cc7-b815-d96b659e18b4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:58:49 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.157.100.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 659940030765 (0x99a77db92d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:58:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba83fffce8392ea83fb8cbe36b04e8608847c479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:47:14:e9:4f:dd:92:63:dc:d3:09:47:3e:
ae:2f:c0:e6:fd:1a:79:ee:9e:88:e1:77:fe:6c:eb:
2b:39:4e:bf:42:d7:6e:e8:c0:7d:7c:60:4d:71:c8:
45:6e:c8:a8:dd:c8:0a:65:36:57:dc:da:b9:76:2a:
6a:90:d2:f2:d3:88:00:ef:68:ac:f0:82:5b:09:4d:
37:b5:0e:80:cd:9c:4d:97:b9:92:47:11:30:6c:2b:
47:b1:8f:4c:30:c8:95:77:65:1d:54:e6:23:06:63:
cb:4e:29:8f:35:00:d3:ff:e5:46:cb:be:69:77:ec:
e7:e1:51:34:6e:ea:07:d1:e0:67:eb:5f:8a:ea:7c:
97:e8:46:20:91:8c:d0:21:b1:a9:42:62:20:b2:4d:
2f:d9:46:fe:4b:3f:dd:a7:bf:f6:3e:0a:db:65:91:
97:d4:1f:0f:85:38:17:b6:9e:10:54:8f:27:1b:a0:
00:ec:16:fa:59:b1:f1:96:94:47:7e:f5:4a:04:bb:
85:67:af:a0:6e:3f:b5:de:26:9f:b3:3c:d2:b0:3f:
3c:e2:fc:c9:5e:cb:1c:d5:5d:ed:05:00:c7:54:f5:
09:b3:79:26:d6:91:8a:92:16:6e:76:62:41:ac:8d:
e8:3c:57:59:93:99:c5:f0:87:57:fb:29:80:df:97:
a8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:83:FF:FC:E8:39:2E:A8:3F:B8:CB:E3:6B:04:E8:60:88:47:C4:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/47a11a-3708-4cc7-b815-d96b659e18b4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/47a11a-3708-4cc7-b815-d96b659e18b4/1/uoP__Og5Lqg_uMvjawToYIhHxHk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.100.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:0d:86:e7:e6:f8:56:f2:e1:fe:1d:04:1a:12:d2:ed:10:2b:
66:a2:4a:52:74:a9:3d:e8:0e:4c:d0:39:03:dc:7d:ea:fe:eb:
74:e5:a6:e1:a0:b9:f6:f0:49:2c:1f:85:16:06:65:cb:7b:bf:
66:8e:ee:6b:32:8d:cb:4f:de:d5:71:33:29:eb:5a:55:6f:f1:
20:46:5d:de:a1:49:2c:68:77:5a:71:4d:85:79:24:ed:e3:5d:
58:6a:64:d9:ef:6b:02:a8:a9:ed:c5:b0:1c:f1:e8:68:9e:a2:
15:46:df:3d:fe:e7:63:97:61:64:f3:99:72:c3:1d:be:83:ea:
1f:29:9b:c9:2d:60:a9:02:62:24:a5:17:20:75:57:f5:66:76:
88:66:30:2c:98:a0:33:5f:27:6b:18:2f:8d:80:f8:fe:22:13:
51:a6:67:39:0d:81:30:dd:0a:6a:42:de:e2:c1:06:a5:e2:56:
80:cf:ac:76:0b:fd:0f:a2:6b:1a:e3:86:40:8a:d9:78:3c:5c:
a5:93:1a:06:61:dc:ee:72:99:d3:b2:5d:33:58:a0:a6:f5:4b:
e1:0f:4b:fb:30:d6:bb:5f:47:56:55:b0:a8:f2:cf:d9:9a:b9:
9d:27:da:03:c4:8c:86:cf:26:d1:d0:f6:41:c7:48:ef:5f:3c:
50:bd:df:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:33 2023 by rpki-client on console.sobornost.net