Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jIHo5cVnBFYadHedccArylGrcps.cer
File: jIHo5cVnBFYadHedccArylGrcps.cer (raw, json)
Hash identifier: YsCFzZXOVL8RJ/m5E6IvB/ErjabM9xQuNT36nQmOxVE=
Subject key identifier: 8C:81:E8:E5:C5:67:04:56:1A:74:77:9D:71:C0:2B:CA:51:AB:72:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A5001BC80F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/a07926-169c-4f3a-93d5-8fbc840e28ed/1/jIHo5cVnBFYadHedccArylGrcps.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/a07926-169c-4f3a-93d5-8fbc840e28ed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:57:25 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 59631
IP: 176.121.64.0/21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 708671424527 (0xa5001bc80f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:57:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c81e8e5c56704561a74779d71c02bca51ab729b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:71:67:66:0d:df:73:e5:7d:55:6e:70:71:
b3:67:4c:e8:a8:29:1d:63:9e:87:02:2d:05:9d:fe:
56:d0:d9:1a:6f:4b:c3:a7:66:11:33:6e:f9:76:46:
bf:b1:86:08:1b:aa:68:b0:85:01:40:85:1a:65:4c:
41:a5:71:46:79:62:cb:bd:e7:57:ad:9c:80:46:71:
74:43:d1:eb:55:b7:52:71:fc:19:f4:97:76:b0:e3:
1a:6f:66:51:06:e5:85:10:fb:74:f2:72:37:12:85:
e5:af:b4:98:fe:8f:78:e5:d2:78:b2:83:57:e6:e8:
91:18:36:9b:16:dd:6a:d2:73:2c:f9:ae:0c:be:31:
20:65:fd:3c:6f:70:f0:ea:e0:34:06:7f:27:e5:74:
7d:ad:8e:ea:37:ea:1b:4d:11:85:c0:b3:b5:44:74:
e8:56:db:05:4f:5c:f6:16:3c:53:5c:94:74:21:22:
35:ec:f6:ba:f7:22:b4:60:e5:48:bf:4d:23:66:2e:
87:7d:e3:b0:fc:43:f7:86:07:e9:67:72:66:7e:b4:
f0:a4:0f:e6:c8:61:2c:c3:dc:65:37:7c:4a:bb:c8:
79:e6:fd:bc:3a:d2:ab:de:26:d3:d9:78:6b:c8:85:
3e:64:7f:2b:3d:f9:f3:d2:ed:22:b8:3a:e8:1e:00:
bf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:81:E8:E5:C5:67:04:56:1A:74:77:9D:71:C0:2B:CA:51:AB:72:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a07926-169c-4f3a-93d5-8fbc840e28ed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a07926-169c-4f3a-93d5-8fbc840e28ed/1/jIHo5cVnBFYadHedccArylGrcps.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.64.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59631
Signature Algorithm: sha256WithRSAEncryption
64:3d:f2:29:8b:91:60:5e:04:15:b5:37:c0:99:cd:c9:95:eb:
54:89:e9:4e:ec:31:9a:70:aa:6a:78:20:ca:42:e0:16:d3:fe:
ba:58:45:b3:f4:a3:8d:93:fe:6f:74:40:82:fa:4a:ce:a9:9b:
47:a2:f7:19:e0:f8:90:10:4a:3b:59:9f:fb:e4:59:8c:14:8f:
8b:c1:6f:09:5d:58:b5:67:5f:4d:26:c3:1c:84:aa:23:ec:30:
0d:e3:c8:f1:ee:77:91:07:f8:09:d1:b4:a5:0d:81:22:8f:56:
71:72:29:7b:ce:56:0b:f6:43:d7:6d:e8:d2:ed:9c:4c:ea:c5:
63:9f:f4:59:2a:3e:38:f1:c8:47:f0:08:49:55:51:48:ce:57:
07:da:13:9c:14:21:47:e5:47:91:26:0a:0a:bb:34:ad:ca:aa:
f3:5f:21:04:e2:c8:d5:d5:01:57:a4:98:93:86:8e:7f:5e:c7:
02:80:50:ab:99:6f:e5:84:92:de:ef:53:50:20:07:2b:40:02:
98:12:02:99:b2:03:dd:be:21:83:6a:db:a0:f4:b0:72:23:8e:
c5:0c:8c:fc:28:df:c5:fa:34:68:e8:5a:25:e6:7b:69:f2:b7:
f5:0b:69:bb:b6:49:9c:ce:25:4f:c4:cf:cb:d1:ca:dc:4a:15:
d9:cf:9b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:47 2024 by rpki-client on console-fra.rpki-client.org