Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yVT21WJbksjySeqCsdUjZon3qJ4.cer
File: yVT21WJbksjySeqCsdUjZon3qJ4.cer (raw, json)
Hash identifier: sQQo4g0DOw1tPaOZhv1DRhciP5gOH0fekqb3afNs5wA=
Subject key identifier: C9:54:F6:D5:62:5B:92:C8:F2:49:EA:82:B1:D5:23:66:89:F7:A8:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AD216DFFCA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/ee264a-f83f-4135-84d7-3b57b295729a/1/yVT21WJbksjySeqCsdUjZon3qJ4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/ee264a-f83f-4135-84d7-3b57b295729a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 08 Feb 2022 23:53:43 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 208765
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 743590199242 (0xad216dffca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 8 23:53:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c954f6d5625b92c8f249ea82b1d5236689f7a89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:ec:5c:6e:41:02:96:9f:cd:9e:b0:47:ce:
1d:65:98:65:03:0e:c5:e8:72:55:8a:9f:dd:f1:3f:
ef:4e:85:10:27:4d:e7:fe:da:ea:d5:b6:d1:dd:3b:
d7:e8:ff:3e:cc:8f:5d:79:62:97:d1:ac:df:36:6c:
b9:bf:0d:07:bc:4d:22:94:69:99:cd:d3:6a:e8:fe:
d8:4b:18:19:c3:8c:c9:86:51:51:ca:8f:2e:22:81:
2d:6b:97:09:bd:95:be:01:73:59:2c:eb:16:0b:e5:
9d:43:b8:34:67:42:60:15:6e:44:7f:5b:0f:a5:92:
a1:ba:d9:34:63:87:58:ee:a1:7c:f1:38:e3:76:03:
6e:9e:10:a8:4c:a1:75:1e:13:88:3d:c2:c6:12:44:
59:99:dd:26:81:9d:46:07:f7:5d:19:58:45:89:68:
ce:8b:3b:00:44:0d:74:0c:90:55:08:ed:5b:18:8f:
be:ea:f4:f5:cc:0d:a6:c3:c0:04:48:bb:34:d4:ce:
eb:de:aa:82:29:fe:ed:ce:67:a4:dd:a1:26:e1:e8:
1f:b0:1b:8c:aa:d4:d1:cb:dd:7a:8b:7f:31:8e:be:
7a:4f:ed:88:75:bb:e0:bb:39:48:36:9f:dc:6e:0d:
fc:80:02:e8:f3:ed:66:8c:96:77:b7:ad:4a:17:51:
79:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:54:F6:D5:62:5B:92:C8:F2:49:EA:82:B1:D5:23:66:89:F7:A8:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ee264a-f83f-4135-84d7-3b57b295729a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ee264a-f83f-4135-84d7-3b57b295729a/1/yVT21WJbksjySeqCsdUjZon3qJ4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208765
Signature Algorithm: sha256WithRSAEncryption
3d:0d:54:2a:c1:b5:6a:3d:6e:2c:ee:86:5c:4e:3f:41:fc:90:
c6:93:9b:31:79:c3:4e:27:4e:b0:88:c4:3a:88:91:86:60:0e:
08:a6:01:29:d3:c6:5f:ca:22:f7:7f:85:a5:17:2b:43:8d:71:
af:69:63:16:44:83:40:3a:8d:87:78:d4:b8:e6:59:0f:7d:da:
99:dc:a7:dd:c8:94:1b:91:4a:a0:84:d5:45:0f:17:be:d6:bc:
5d:4a:b3:ea:d6:76:8f:1f:0a:88:ec:f8:99:54:00:9c:34:06:
fd:92:ea:1d:61:1f:a1:b6:71:de:10:d6:ab:20:7e:7e:b2:e9:
36:e4:53:f4:06:77:69:f2:20:f4:97:d5:a6:a8:5e:be:35:3e:
24:5d:d7:19:2d:64:31:98:b7:8e:de:fd:b8:59:bb:d3:97:77:
d3:36:27:d5:9d:75:32:8f:ab:10:29:83:a8:77:b5:58:b3:36:
00:5b:ca:61:0f:32:6f:c0:0b:f2:e8:05:d8:54:78:4e:3a:5b:
53:dd:a3:16:16:30:d1:2c:28:d9:3c:7a:21:20:ac:9d:9a:3b:
ab:f1:ae:be:f8:e4:88:cb:aa:84:fe:7c:c5:ea:65:dd:a0:e8:
3c:a2:cf:dd:c3:ad:b0:cb:33:0a:f7:6d:e6:bb:26:d1:b6:b3:
e4:81:70:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:27 2024 by rpki-client on console-ams.rpki-client.org