Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-JKzk46wudJnVsM4HJJdvb2JrAE.cer
File: 1-JKzk46wudJnVsM4HJJdvb2JrAE.cer (raw, json)
Hash identifier: 1nvqnRmNO86uvDsj7fXn7xeJbAPDydhugtL92rlBFK8=
Subject key identifier: F8:92:B3:93:8E:B0:B9:D2:67:56:C3:38:1C:92:5D:BD:BD:89:AC:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9C72C70383
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fd437-e682-4625-9ee6-40b369bfcc2c/1/1-JKzk46wudJnVsM4HJJdvb2JrAE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fd437-e682-4625-9ee6-40b369bfcc2c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:51:57 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 210877
IP: 195.225.232.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671940543363 (0x9c72c70383)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:51:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f892b3938eb0b9d26756c3381c925dbdbd89ac01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8f:12:a7:81:00:7d:f2:7c:61:6c:1d:16:15:
8d:1a:ec:75:6f:33:44:87:e5:96:57:57:c4:60:71:
aa:29:b3:b8:22:46:a7:31:50:49:43:f9:62:2e:01:
21:b8:91:ee:43:17:18:3c:22:97:b5:25:5f:fa:65:
b0:90:c1:49:29:f8:d1:89:1b:b5:2d:d5:75:33:23:
e2:04:af:3c:9f:02:b1:a4:8b:ca:cf:7f:3a:98:47:
f4:4c:77:55:71:de:06:06:3f:74:bb:4e:5f:3c:82:
0a:49:58:fd:cf:c7:0e:ff:a2:a7:58:96:eb:38:cc:
d3:05:06:c6:58:2a:ac:a4:f7:77:b2:63:24:95:a2:
37:26:88:93:b6:85:d2:5d:c4:51:68:68:08:d7:6b:
c0:42:c0:9a:0b:1e:a2:b1:8a:3d:15:b6:85:4f:12:
86:3b:12:1e:89:d4:71:09:44:bd:a1:0d:2c:3d:92:
47:b3:4b:c3:33:45:52:c4:f7:f4:71:ab:8e:cb:88:
83:6d:f7:6a:e3:48:77:4d:fb:26:d5:5c:a7:34:0a:
a4:4f:b9:4f:29:d5:85:88:b4:18:88:68:b4:ae:c8:
8b:5a:ae:eb:a2:5d:ac:6c:e3:8a:03:f7:fd:1a:04:
40:12:3b:20:ad:bc:c5:fc:9f:aa:45:85:b8:b1:85:
6b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:92:B3:93:8E:B0:B9:D2:67:56:C3:38:1C:92:5D:BD:BD:89:AC:01
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fd437-e682-4625-9ee6-40b369bfcc2c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fd437-e682-4625-9ee6-40b369bfcc2c/1/1-JKzk46wudJnVsM4HJJdvb2JrAE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.232.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210877
Signature Algorithm: sha256WithRSAEncryption
98:26:03:0f:df:9a:78:84:a5:f7:8f:62:05:30:ea:f6:0f:a1:
bb:de:7b:d2:2d:0d:39:4b:d1:b5:2d:ad:ab:f0:b5:a8:4b:23:
20:ce:59:8b:46:d7:04:87:6e:ed:44:2f:8e:ec:21:2d:e0:f7:
a0:16:36:44:0f:1a:af:46:93:18:ce:3d:62:b3:9f:aa:b0:93:
b8:03:88:64:41:5e:73:a2:ce:33:c1:6b:4a:7a:78:2e:0b:e8:
fc:31:00:a8:24:37:87:65:e9:9e:1a:34:32:97:83:12:5d:80:
12:7e:ed:92:28:50:86:38:21:46:d9:8e:81:01:fc:7b:0d:d7:
15:a8:dc:fa:0d:40:97:a5:a2:dd:9e:b2:93:b9:a3:ff:40:84:
e1:5a:e3:93:30:b2:d9:0a:25:e4:d9:c5:86:29:ff:0e:23:bf:
d2:00:05:83:05:51:30:c0:7c:d6:12:9f:9d:c5:99:72:50:41:
8a:9a:91:cb:61:d2:d7:76:26:5c:3e:35:ba:b3:e2:62:53:73:
bf:84:3a:cd:5b:5d:e9:00:e2:5b:db:45:85:01:a4:d6:a0:50:
30:7a:0e:2d:75:24:ef:e1:00:9f:c8:cb:62:9f:d7:6e:1e:b8:
68:fd:07:74:b5:35:d0:85:ae:fe:38:3d:8c:de:29:e4:76:df:
3f:ab:39:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:06 2023 by rpki-client on console-fra.rpki-client.org