Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dQltLl-0AXsYtMRG8kQyzbZlhvc.cer
File: dQltLl-0AXsYtMRG8kQyzbZlhvc.cer (raw, json)
Hash identifier: 5fAC9zxqukBxKn2pRpwYHjivgDNTgZ4TRnmFTNpX0wQ=
Subject key identifier: 75:09:6D:2E:5F:B4:01:7B:18:B4:C4:46:F2:44:32:CD:B6:65:86:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A74C32CC50
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/19e565-f4aa-47b0-b8cc-9b20f03d32b0/1/dQltLl-0AXsYtMRG8kQyzbZlhvc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/19e565-f4aa-47b0-b8cc-9b20f03d32b0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:58:20 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 34768
IP: 185.94.204.0/22
IP: 2a04:e9c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 718537935952 (0xa74c32cc50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:58:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75096d2e5fb4017b18b4c446f24432cdb66586f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:04:35:c7:8b:bb:00:fd:10:a4:42:6d:c2:8e:
fd:fa:5d:06:85:e1:79:44:26:74:39:2a:3f:62:43:
18:c3:83:f5:6e:da:e5:cd:13:a2:a7:6c:a8:84:52:
bc:58:69:3d:a5:eb:f7:7c:97:82:69:4b:2a:24:91:
a6:22:0b:72:c1:a6:3b:0e:8c:17:6b:0c:6a:cb:d8:
b1:97:0a:f6:57:e5:19:4e:cf:a9:c9:da:22:48:99:
df:69:ea:f4:dd:57:95:b1:4e:82:a0:07:fa:e6:89:
02:33:f4:cb:46:4c:a6:13:1b:c6:28:f3:5f:fb:c9:
c4:d5:5b:64:43:c0:9a:d5:5b:37:df:09:5d:b5:6b:
71:26:d2:0c:c6:c2:ed:6f:dc:d0:c7:a0:63:15:16:
3b:d7:ef:d1:9a:e3:c2:8f:42:f9:1e:06:c0:01:58:
fc:94:43:13:7b:5b:e8:63:9d:13:e1:6d:43:d8:89:
37:a2:a7:e5:09:2b:50:e9:dc:94:4b:e3:e5:11:36:
b7:aa:36:7d:db:3a:1b:db:f7:20:2d:7b:08:03:6b:
22:3e:80:70:fb:45:54:65:1e:9f:c6:cf:ed:ef:15:
66:4f:cb:3e:88:79:63:e8:3b:ce:92:5d:b2:82:c7:
0c:a8:3d:61:31:9a:0f:dc:bd:9b:7c:fd:49:f2:76:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:09:6D:2E:5F:B4:01:7B:18:B4:C4:46:F2:44:32:CD:B6:65:86:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/19e565-f4aa-47b0-b8cc-9b20f03d32b0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/19e565-f4aa-47b0-b8cc-9b20f03d32b0/1/dQltLl-0AXsYtMRG8kQyzbZlhvc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.204.0/22
IPv6:
2a04:e9c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34768
Signature Algorithm: sha256WithRSAEncryption
08:0f:33:af:3a:27:88:b4:4f:c1:7a:6d:51:ef:56:91:00:d1:
af:a3:54:43:c3:f5:f6:d3:fa:a4:a0:f2:be:b9:68:a8:5a:74:
86:36:60:7e:59:38:58:16:7c:10:ee:ee:c9:83:52:48:83:d6:
62:07:fa:77:3b:4e:c3:bf:09:28:e8:5d:53:62:7b:97:88:a7:
40:3d:86:46:79:48:b9:0c:32:fa:4a:b9:d7:e6:b3:aa:0c:17:
d3:b0:a2:22:c3:03:5b:04:23:d4:d3:65:be:22:cc:0f:31:8c:
48:6f:65:05:10:3e:dd:2c:3b:ed:ea:6d:26:c2:c4:e2:69:0f:
d7:4c:be:77:b5:4f:d4:04:8d:e0:8c:cd:b9:0d:92:66:7b:ba:
11:ef:47:ad:26:06:fa:eb:cb:ed:9c:36:c5:94:50:08:73:92:
b0:f6:a2:1e:5b:84:e6:7c:6d:74:0c:ae:6e:68:d2:42:ce:c5:
2b:e6:7c:30:81:c3:72:28:60:05:ff:23:94:49:5f:de:a4:2e:
07:0b:c2:2a:09:67:20:1c:26:2c:19:29:42:ec:0d:f6:12:1f:
4e:73:ba:b9:5f:96:a9:a9:31:04:16:cb:ec:73:b3:85:bc:fc:
1e:65:6c:db:f2:a1:f3:a6:29:16:00:c5:77:78:50:67:a9:81:
b5:98:ec:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:00 2024 by rpki-client on console-fra.rpki-client.org