Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dUyVnZTvjHy5bYbGxLkjbfEvqH0.cer
File: dUyVnZTvjHy5bYbGxLkjbfEvqH0.cer (raw, json)
Hash identifier: ZhcMErX4/ntaw8vO7ZV3La5B9u1QGQEi9H6mY0p3GuA=
Subject key identifier: 75:4C:95:9D:94:EF:8C:7C:B9:6D:86:C6:C4:B9:23:6D:F1:2F:A8:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AEF5F87ED2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/11281f-9af1-4150-9fb8-c8b975f0b107/1/dUyVnZTvjHy5bYbGxLkjbfEvqH0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/11281f-9af1-4150-9fb8-c8b975f0b107/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 22 Mar 2022 16:42:29 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 49792
IP: 2a0e:db40::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 751451012818 (0xaef5f87ed2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 22 16:42:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=754c959d94ef8c7cb96d86c6c4b9236df12fa87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:3f:e7:ec:27:cd:85:32:37:0f:f1:5a:ce:
36:f1:8d:c2:2f:f8:02:98:aa:a8:db:a7:9a:2f:c4:
ea:56:4b:aa:42:15:81:a6:2a:fe:4f:b2:eb:69:6e:
86:35:1b:6d:cd:cf:54:35:c7:2d:de:38:fc:21:24:
33:54:5b:68:b3:fb:90:e4:50:cb:19:8e:23:bf:4c:
47:b2:3c:2c:36:cc:e5:84:2c:f2:19:b0:1d:00:8a:
ef:90:79:5c:a9:32:2f:50:a8:01:15:61:27:41:9e:
b5:6c:8c:0b:f2:ca:73:31:ea:02:a2:c1:dc:25:ee:
52:85:25:16:f2:b9:9e:34:ae:6e:4b:87:18:5b:a6:
13:f3:0c:ec:96:31:74:e8:b4:fa:2f:2d:13:ca:cb:
6d:1b:87:52:b2:d1:cd:cb:ff:3a:20:53:da:9d:67:
e6:a7:1a:80:a0:7c:fa:81:74:c9:fc:dd:cc:17:d0:
04:7c:1f:8f:40:5e:7c:fd:ef:fd:86:15:d6:eb:4c:
bf:6f:60:00:46:5d:c1:18:5b:b0:b6:be:07:ad:9a:
72:63:8a:a9:02:d8:1e:42:71:c7:a1:4d:7e:b4:ac:
36:18:b9:b2:dd:31:14:76:15:fe:09:e9:6b:e6:57:
42:df:cb:e4:d9:3c:07:c7:37:80:45:04:bd:98:06:
e5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4C:95:9D:94:EF:8C:7C:B9:6D:86:C6:C4:B9:23:6D:F1:2F:A8:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/11281f-9af1-4150-9fb8-c8b975f0b107/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/11281f-9af1-4150-9fb8-c8b975f0b107/1/dUyVnZTvjHy5bYbGxLkjbfEvqH0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:db40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49792
Signature Algorithm: sha256WithRSAEncryption
75:dc:87:2e:7d:4a:dd:b1:83:be:55:d5:fe:28:da:0e:15:18:
8d:ad:8c:90:20:60:ef:03:0a:6e:39:0f:6e:4f:4d:b8:b1:83:
0f:1c:45:1d:28:69:9b:8a:7f:a5:3c:34:01:bf:a0:ea:54:d5:
9c:d2:8c:06:a6:38:a7:03:19:36:b1:74:54:3e:4d:b6:fa:04:
7d:ef:29:83:2d:b0:1a:fe:e1:a1:9d:79:10:66:b0:36:57:42:
9d:e0:ea:96:51:ad:6a:49:2a:b3:d3:5f:70:b6:c2:13:54:03:
3c:99:11:6a:77:4c:a1:f4:3f:d7:b9:a0:f6:f0:00:a3:22:c0:
de:48:4e:1d:46:05:c0:55:eb:a8:85:05:82:49:d8:2b:dc:55:
f1:59:78:26:b8:70:3e:db:a5:f6:8d:82:1c:ca:a5:eb:cc:f5:
a0:98:f7:e4:13:d9:39:96:da:73:ee:7e:6a:ea:61:d7:12:7d:
d4:2e:27:61:77:35:ff:ba:ef:f3:d0:37:8c:b7:fe:19:fc:03:
cc:2f:f2:29:e3:a6:8f:17:bf:69:e5:3b:6c:74:25:a3:84:fc:
1a:71:7d:c9:f7:fa:46:96:d6:03:3d:61:be:f4:fc:70:9c:44:
dd:f2:7e:42:e6:3f:94:e7:e1:1a:7c:4a:1b:f0:13:b2:46:5d:
56:7e:ab:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:21 2024 by rpki-client on console-ams.rpki-client.org