Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-OSEgFiQHT9WTygJT9Ulgb8W1qQ.cer
File: 1-OSEgFiQHT9WTygJT9Ulgb8W1qQ.cer (raw, json)
Hash identifier: bmJF5oR8pcU6ANe+9hCERfGm/BITac3RG0o/ixqt7LE=
Subject key identifier: F8:E4:84:80:58:90:1D:3F:56:4F:28:09:4F:D5:25:81:BF:16:D6:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B1A35C4DF7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/304d31-7ea1-43e4-8bc9-39068576ff0f/1/1-OSEgFiQHT9WTygJT9Ulgb8W1qQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/304d31-7ea1-43e4-8bc9-39068576ff0f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 12 May 2022 13:07:07 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 50135
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 762949946871 (0xb1a35c4df7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 12 13:07:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8e4848058901d3f564f28094fd52581bf16d6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3d:02:1b:1e:bc:92:97:88:c6:a0:bd:23:44:
c8:12:a3:fc:0d:78:ef:7d:85:a4:d2:85:2b:79:fa:
15:0f:80:a8:79:e2:36:cf:f2:da:5b:99:55:2d:07:
6d:e1:0f:90:3c:ff:96:b7:22:ff:8f:13:0c:50:41:
b9:eb:37:34:1f:5d:b5:47:4a:78:19:21:5c:e0:39:
e4:4c:b9:7d:8e:7c:40:c9:ba:96:13:3a:04:65:ec:
7a:22:73:ff:58:00:e8:18:7c:f9:b3:94:4c:60:c3:
96:28:1e:6c:10:82:79:6a:e6:b2:d3:6d:48:df:c2:
34:59:a9:5d:1c:fc:bf:98:8f:ca:34:98:9d:2c:76:
7c:ad:89:a7:44:2d:2a:25:60:09:8f:18:03:b7:95:
d7:93:a5:1a:6c:31:71:7e:63:c1:93:b6:d3:bb:cb:
0e:ee:bf:89:f1:ca:90:8a:a0:82:00:57:b1:65:7e:
0a:38:49:9b:18:74:0a:59:b9:f4:3e:d8:0c:09:78:
a5:e5:1a:61:77:84:39:31:2d:2c:ad:d6:24:c6:b0:
18:11:20:77:83:aa:c9:46:25:99:6a:ad:7f:b7:61:
94:89:97:c3:b4:c9:fa:c7:19:a6:e7:9a:ca:0e:63:
a1:a1:c0:b4:88:41:65:db:a5:63:3d:19:b3:9e:37:
46:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E4:84:80:58:90:1D:3F:56:4F:28:09:4F:D5:25:81:BF:16:D6:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/304d31-7ea1-43e4-8bc9-39068576ff0f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/304d31-7ea1-43e4-8bc9-39068576ff0f/1/1-OSEgFiQHT9WTygJT9Ulgb8W1qQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50135
Signature Algorithm: sha256WithRSAEncryption
9e:78:7f:02:e1:33:89:3f:d3:59:eb:7d:c9:b1:6e:90:e7:41:
a3:b8:cd:df:28:cf:8b:ba:2b:66:84:b8:fe:f6:43:f8:1a:e3:
b0:d0:24:fc:62:7e:89:fb:b8:7e:ac:b4:78:97:d5:5c:7d:31:
55:da:9a:0d:f3:08:3e:45:dc:1c:c4:cb:6e:f6:7f:12:1b:53:
49:81:b7:64:88:91:f1:1d:fd:8e:ea:54:eb:15:ce:b8:7e:13:
85:d4:9d:8b:16:52:b9:77:9d:5e:dc:d6:a2:4f:26:18:b3:eb:
83:46:9f:b3:0f:e6:1a:31:ce:3a:73:12:c9:95:00:41:c4:ba:
5a:7c:27:26:97:f9:46:70:75:e5:8b:79:2a:94:1e:60:14:53:
87:91:54:d5:30:19:00:8f:a6:a1:4a:03:c6:8a:d6:88:df:e0:
f2:12:8d:06:5a:93:b1:40:a0:f0:ae:82:cd:35:4e:3a:97:50:
f5:15:ce:41:94:2a:45:e5:78:fb:de:d5:66:57:c8:08:18:61:
87:5c:1f:63:bc:10:54:e3:d6:5d:d1:3d:42:f8:02:2d:8c:e4:
13:d2:ab:b8:bb:03:be:ab:f1:c5:fe:cf:ec:c7:98:b6:0b:67:
09:c6:ac:b1:86:93:07:68:1e:c0:f0:95:dd:b2:73:5e:cb:1f:
a7:0e:73:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:18 2024 by rpki-client on console-fra.rpki-client.org