Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-ahadqGV4zgi8c6rFK9ZnvH28Vc.cer
File: 1-ahadqGV4zgi8c6rFK9ZnvH28Vc.cer (raw, json)
Hash identifier: 0XwiMN6wpxgWAJAyVwB0QWkP17v0D+shX8XgS7LJvTA=
Subject key identifier: F9:A8:5A:76:A1:95:E3:38:22:F1:CE:AB:14:AF:59:9E:F1:F6:F1:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7B327C8720
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/d59fee-b519-49fe-951b-498931e97916/1/1-ahadqGV4zgi8c6rFK9ZnvH28Vc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/d59fee-b519-49fe-951b-498931e97916/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 02:32:04 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: AS: 47343
IP: 194.39.44.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 529127999264 (0x7b327c8720)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:32:04 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=f9a85a76a195e33822f1ceab14af599ef1f6f157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a4:e7:8c:77:cc:e9:c8:38:42:69:19:2e:c3:
cd:8b:d5:d2:ad:3b:ab:64:ad:91:ad:9c:55:22:68:
19:74:00:3c:26:cc:75:20:4b:0f:62:96:26:87:09:
c7:3a:75:77:f2:2a:fa:47:de:06:18:eb:1a:68:52:
98:28:ee:24:64:49:6e:a3:81:49:8b:e5:d2:54:b3:
16:d6:63:df:8b:9c:ab:da:e4:8d:b4:ac:66:b5:4f:
66:48:ec:80:f8:c1:98:3e:56:8e:91:53:b1:7f:63:
db:bc:cf:09:65:4f:e2:ab:96:2a:7a:c1:de:dd:83:
e1:73:39:ef:e0:20:20:6f:e2:15:43:84:90:99:b8:
e7:dd:29:b0:cf:25:4b:86:a2:13:d7:86:c5:18:ba:
50:ad:17:e5:6a:f2:09:d1:93:55:62:77:79:a8:b4:
2f:fa:af:61:a7:d7:7a:6d:ae:ce:dd:74:e8:e5:f2:
dc:3e:2a:81:aa:3b:c9:cc:b7:cf:ec:65:b6:da:46:
ae:ec:32:67:a5:77:d8:95:a3:6e:24:41:87:e6:3d:
51:80:c8:31:ae:60:f6:aa:aa:68:29:0f:8d:15:08:
7c:a4:10:9d:9d:b7:20:f2:8f:32:a5:af:89:d0:20:
98:c3:ad:1f:56:d1:96:6f:1c:91:9a:78:c2:b1:02:
4c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A8:5A:76:A1:95:E3:38:22:F1:CE:AB:14:AF:59:9E:F1:F6:F1:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d59fee-b519-49fe-951b-498931e97916/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d59fee-b519-49fe-951b-498931e97916/1/1-ahadqGV4zgi8c6rFK9ZnvH28Vc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.44.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47343
Signature Algorithm: sha256WithRSAEncryption
57:77:ca:0e:4c:98:53:7a:f1:3f:61:af:3c:29:0f:63:ba:e7:
1c:06:74:f1:16:d2:d6:1d:b8:37:18:40:82:34:b3:b9:89:a1:
70:8d:76:02:51:f3:ba:10:cb:54:ab:98:92:18:16:5e:de:9a:
c9:95:b2:6b:25:e4:1d:dc:01:e0:8c:b5:66:72:ad:b3:b9:ed:
8e:21:21:f6:df:b7:24:47:b8:e3:fd:39:6c:c0:90:2c:a6:50:
89:a7:c6:f5:7e:19:fa:a7:b0:32:e5:6b:71:16:23:66:68:f9:
72:a5:c6:18:0a:f0:16:60:96:d4:25:49:89:0c:33:6e:85:f5:
ce:1d:27:12:32:aa:8a:54:df:f8:a4:49:9d:b6:f9:30:33:9e:
e8:cc:6d:42:23:8e:6a:5e:8b:b4:c9:4d:f6:f4:ba:ff:8c:00:
c0:f1:96:26:21:0e:20:51:2d:81:01:20:6c:e5:ab:f1:88:aa:
98:16:8b:b1:30:49:48:30:16:3c:3f:f2:a9:45:f5:c5:d0:c7:
b5:11:f1:08:6b:2f:e8:95:60:f1:b0:77:ad:6f:34:75:91:20:
e7:fc:5a:38:e2:35:44:2a:61:8d:da:04:49:4e:35:1a:ab:a3:
b6:9b:40:54:ff:86:da:60:be:77:9e:38:ab:2b:f5:bf:be:d2:
13:aa:42:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:07 2023 by rpki-client on console-fra.rpki-client.org