Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jSSbLuoNkYwRqRjEWOhCLqtFT-E.cer
File: jSSbLuoNkYwRqRjEWOhCLqtFT-E.cer (raw, json)
Hash identifier: UKsyK0BunjZxr2DNJxg6WAf/4+xc7ou3mYiMLyHZ+tc=
Subject key identifier: 8D:24:9B:2E:EA:0D:91:8C:11:A9:18:C4:58:E8:42:2E:AB:45:4F:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A7E4DA2F84
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/bc6be9-16f0-444b-b876-5671be0bac57/1/jSSbLuoNkYwRqRjEWOhCLqtFT-E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/bc6be9-16f0-444b-b876-5671be0bac57/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:06:20 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 39664
IP: 185.229.132.0/22
IP: 2a0d:9600::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 721099042692 (0xa7e4da2f84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:06:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d249b2eea0d918c11a918c458e8422eab454fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:59:f5:a5:98:d8:6d:ad:5f:18:21:95:ce:6a:
97:86:1f:5e:f5:27:59:b3:9f:14:ad:58:15:21:37:
c2:dd:d5:96:23:85:dc:4f:a3:43:a0:b5:cd:f2:16:
50:7b:6d:ef:40:86:34:de:ca:28:63:b8:e6:c2:d6:
1b:36:cc:62:de:58:2e:ae:d5:47:75:ad:21:18:0e:
0a:34:44:fc:54:27:98:a2:c6:08:09:bf:74:ca:9d:
3e:b9:51:54:c7:63:d7:02:c8:24:7b:64:af:a4:2e:
ba:9a:af:ca:27:46:ff:65:81:4e:f5:ac:7a:ff:03:
46:68:7c:a1:af:2d:63:f4:b0:a3:46:91:04:81:a5:
c6:f0:dd:4c:44:c5:f7:f2:0f:2b:87:2f:58:2a:72:
4e:69:e4:99:55:9e:82:80:71:d9:46:41:bd:76:ac:
4a:53:8b:51:0a:ec:60:93:45:a1:cc:9f:8f:1d:48:
30:6e:0a:3b:6b:21:b0:8c:e2:a1:d4:16:11:e9:5c:
cf:66:af:c6:1d:0a:a2:ed:7c:bd:25:4d:5f:d4:73:
d9:f0:b2:a1:46:50:aa:a6:9f:40:4f:98:9f:d8:a3:
6c:09:38:e7:e8:9f:b7:63:90:b0:be:63:d5:5a:56:
02:01:d7:d9:1c:68:75:ab:84:dd:13:7d:a8:e2:4a:
0c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:24:9B:2E:EA:0D:91:8C:11:A9:18:C4:58:E8:42:2E:AB:45:4F:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bc6be9-16f0-444b-b876-5671be0bac57/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bc6be9-16f0-444b-b876-5671be0bac57/1/jSSbLuoNkYwRqRjEWOhCLqtFT-E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.132.0/22
IPv6:
2a0d:9600::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39664
Signature Algorithm: sha256WithRSAEncryption
0a:e9:55:07:c1:bc:57:1e:9c:6c:09:34:8c:d6:3f:1f:2c:6d:
65:99:3b:d2:9f:f5:ff:f5:e6:e0:6c:fa:53:b2:5d:df:88:18:
21:1d:38:dc:03:29:c8:5c:97:a3:f0:65:8d:26:ed:c0:8b:d3:
2c:08:88:ad:bb:1f:17:2b:95:0e:a1:8b:ab:15:ac:6a:16:1f:
e3:ff:73:5c:c8:a0:1c:54:1d:f4:06:3c:6f:6e:79:42:8e:02:
43:46:77:f2:fb:b3:6d:3b:da:86:85:ce:f7:39:12:b8:6c:13:
fd:d1:c2:9c:53:51:7d:f3:55:18:99:fb:d3:47:19:b1:b5:15:
69:c2:0d:84:d7:41:0f:81:b3:3b:ca:7e:b9:e1:93:81:86:ed:
da:ba:65:ab:e1:8f:98:81:bd:64:e1:9a:9f:3b:b6:73:37:e3:
09:11:a4:e3:a9:97:21:87:eb:37:74:6e:af:50:e8:eb:ba:2f:
cd:f8:79:bb:17:01:2f:38:67:f1:89:6a:22:1b:b9:80:2c:29:
1a:94:7f:b6:eb:e6:ad:f1:94:2f:bb:1c:1c:7e:ca:f6:27:60:
a0:5a:f2:89:9e:0b:9a:c4:b0:84:fd:9a:3c:6a:14:55:6b:3d:
be:3a:38:60:0a:f2:34:a1:0e:ce:57:91:02:7d:b8:92:06:3b:
37:d5:9c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:39 2024 by rpki-client on console-ams.rpki-client.org