Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/abNNjF5AOJgMfI71jWz09bajBgU.cer
File: abNNjF5AOJgMfI71jWz09bajBgU.cer (raw, json)
Hash identifier: 2YHELXIHBm17iAt+8K8lHhZwkTU6nmTnj5A96PtjYNs=
Subject key identifier: 69:B3:4D:8C:5E:40:38:98:0C:7C:8E:F5:8D:6C:F4:F5:B6:A3:06:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 753617E3F8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://nostromo.heficed.net/repo/1123752/0/69B34D8C5E4038980C7C8EF58D6CF4F5B6A30605.mft
caRepository: rsync://nostromo.heficed.net/repo/1123752/0/
Notify URL: https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before: Fri 01 Jan 2021 00:01:40 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: AS: 43177
IP: 2.57.20.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503418708984 (0x753617e3f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:01:40 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=69b34d8c5e4038980c7c8ef58d6cf4f5b6a30605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cd:0f:8b:ad:8d:25:03:e3:fe:bb:e2:4c:44:
a1:65:ed:33:5d:54:84:94:6f:89:1f:09:05:1a:23:
a1:3e:9e:f2:aa:e8:67:4b:24:50:0a:e6:41:b1:13:
b9:2e:ac:da:7c:78:58:86:c9:80:06:ea:37:af:c1:
71:78:d6:b2:7a:c7:a0:72:9c:3a:51:19:4d:38:56:
40:e4:db:23:1b:a6:6e:07:32:a8:ce:8d:fe:7a:73:
f5:92:c4:bd:dd:4f:c2:8a:47:a6:5d:d5:d7:61:e2:
a7:0d:0b:ec:bd:06:93:80:6e:fd:0c:94:a7:ab:d5:
0c:93:0d:e6:48:b4:bc:c9:a8:7d:98:6d:fd:65:f6:
71:3d:54:50:69:9a:5c:b1:3c:08:bd:27:7d:ed:05:
c7:aa:08:77:a2:0c:4c:1d:1b:8d:f6:d4:27:36:82:
45:59:6e:22:d5:85:1d:25:6f:cf:70:fd:95:b9:74:
39:5f:12:80:33:be:45:0a:ff:22:bf:fb:93:ce:36:
56:67:11:64:d4:d8:a6:2d:a0:93:96:78:2f:e4:ef:
ad:18:e3:10:2c:9d:a9:7a:5d:eb:3d:02:af:ec:a9:
db:b8:a1:15:c5:f2:1b:38:e5:46:f8:ee:fc:d7:2e:
d3:e1:b5:b4:70:00:fb:80:2c:11:cb:f9:b9:eb:5d:
7e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B3:4D:8C:5E:40:38:98:0C:7C:8E:F5:8D:6C:F4:F5:B6:A3:06:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://nostromo.heficed.net/repo/1123752/0/
RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123752/0/69B34D8C5E4038980C7C8EF58D6CF4F5B6A30605.mft
RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.20.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43177
Signature Algorithm: sha256WithRSAEncryption
44:a9:52:8d:a5:d0:96:7f:30:40:6c:62:b1:d9:62:b8:b9:dc:
54:e2:74:de:b1:ab:dd:91:3c:95:15:4b:1f:3e:a3:e0:29:7d:
8d:c4:be:b1:b2:d0:b6:98:27:8b:f2:d5:f1:74:e2:10:a3:e3:
5c:01:9a:ac:d2:fe:73:86:e3:77:03:ad:b2:e6:59:fe:82:e6:
35:d0:5e:3b:1d:c4:a8:65:00:7c:79:56:77:94:8a:94:b2:5a:
88:6c:16:be:53:e9:11:b1:49:c4:20:7d:8b:91:bd:cf:b4:32:
ea:97:0d:38:40:6e:f8:b9:fd:74:0a:49:94:0f:fd:ff:08:95:
1d:02:1d:f2:0a:7c:d8:6c:5b:2a:2e:aa:f5:6c:d8:82:bb:99:
6c:70:6c:f3:43:40:58:23:93:22:f0:72:ad:4e:cf:b6:00:c4:
9b:4d:f7:2b:44:17:ab:5b:b6:a5:e5:ca:29:f5:5f:1d:01:db:
36:1c:4c:84:ea:31:fc:a0:33:fa:20:6a:6b:c8:98:90:95:b9:
52:5e:88:5c:a1:4d:4e:ec:5b:14:0f:fb:1b:85:60:e7:cc:bc:
0a:37:05:e0:66:d1:92:c9:9b:bf:ef:13:32:d4:59:f9:f0:24:
1e:96:bb:8c:35:5b:1f:3e:26:f1:12:64:dd:71:16:bf:9d:ee:
bd:76:ba:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:58 2023 by rpki-client on console-ams.rpki-client.org