Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-n__DCBnMMSVzkTAHNd8lJoOPmc.cer
File: 1-n__DCBnMMSVzkTAHNd8lJoOPmc.cer (raw, json)
Hash identifier: Hw2llO3j1fUizYLIjWguJqifOqmUf9sWVy8QeYJwi1s=
Subject key identifier: FA:7F:FF:0C:20:67:30:C4:95:CE:44:C0:1C:D7:7C:94:9A:0E:3E:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0184ED33E38D9445907D2548513A17D105B5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/1e9e81-e97c-4a5d-a54c-0fba1420c4c9/1/1-n__DCBnMMSVzkTAHNd8lJoOPmc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/1e9e81-e97c-4a5d-a54c-0fba1420c4c9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 07 Dec 2022 15:28:31 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 48205
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ed:33:e3:8d:94:45:90:7d:25:48:51:3a:17:d1:05:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 7 15:28:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa7fff0c206730c495ce44c01cd77c949a0e3e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e2:87:15:96:92:60:7d:41:a2:06:6d:9f:ee:
40:a7:b1:68:da:d9:cb:aa:38:6a:2d:bb:cc:af:d8:
f3:db:ff:bf:82:29:99:66:90:7e:4e:b0:94:5a:81:
75:76:6a:59:0d:f5:a8:85:e4:40:d9:12:6f:36:9a:
dd:9b:bb:61:3d:72:0b:08:0b:9d:0f:d5:e2:22:e7:
a8:9f:0e:a0:a8:8f:34:29:43:6c:1d:43:94:d4:17:
c5:a3:b3:73:b2:aa:93:c8:ec:0c:cf:9f:2a:dd:84:
22:3f:7c:89:5d:cd:52:01:cc:60:b8:df:04:c0:30:
c7:dd:70:a4:4c:a3:36:fe:0c:50:4c:ff:d6:3b:f4:
00:87:0d:d0:72:42:38:08:1a:fa:2b:ef:42:ab:22:
6f:3f:a3:42:d5:f0:54:86:34:c4:88:ba:e7:81:32:
37:b8:ab:16:b4:fa:79:fc:73:27:86:d0:5f:b5:1d:
f1:13:90:0a:22:57:eb:e9:a5:57:5c:aa:17:6d:5b:
59:db:be:4c:e4:35:cb:33:bf:a1:dc:99:2d:b1:67:
7e:08:72:15:b1:f2:09:14:3a:ad:e2:69:ee:aa:4b:
15:ba:e6:a5:fc:d9:ea:a9:eb:de:81:8b:2c:bb:a4:
0f:dc:68:a4:2b:a1:b5:5a:be:00:22:40:a3:7b:32:
ed:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7F:FF:0C:20:67:30:C4:95:CE:44:C0:1C:D7:7C:94:9A:0E:3E:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1e9e81-e97c-4a5d-a54c-0fba1420c4c9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1e9e81-e97c-4a5d-a54c-0fba1420c4c9/1/1-n__DCBnMMSVzkTAHNd8lJoOPmc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48205
Signature Algorithm: sha256WithRSAEncryption
4e:54:31:79:e5:d2:a3:26:d8:e9:5f:4f:c8:a0:46:12:c4:37:
0c:c3:9d:d5:fb:6f:7d:61:ab:86:fa:f3:cb:eb:d2:e0:07:47:
8a:72:96:d3:c7:3c:82:59:21:f6:90:0f:63:de:19:3e:7d:74:
d5:b4:b2:a9:12:09:d4:6a:40:cf:34:b4:02:d7:05:89:ca:5d:
9b:f1:6d:d7:4a:46:6b:fb:d4:a7:45:27:dd:8d:bb:74:49:5b:
0b:7d:05:84:21:af:0c:fc:51:1b:f6:6a:b4:2b:d5:e1:55:a4:
1f:72:ba:a8:48:c9:e6:e9:b6:40:15:74:94:42:26:90:e1:a7:
cb:43:87:9f:53:0b:2c:a0:61:fb:2a:bb:cd:41:a7:de:8b:37:
61:cd:64:d4:26:39:ce:cd:30:3e:bc:dd:87:c9:b9:4c:54:f7:
44:bb:e8:5d:b8:9d:a8:57:d4:17:a9:45:a3:12:c4:f8:e0:b5:
cc:6a:20:45:68:16:99:14:79:92:80:30:46:7b:e9:7c:52:d5:
fd:20:a6:07:d1:6d:f8:4d:9d:98:1c:aa:0b:e7:98:08:02:fb:
88:be:55:6a:2e:9f:88:41:a9:7f:c3:d0:08:d2:30:c1:19:43:
f3:98:dc:0d:75:00:de:71:0f:83:90:d4:95:ac:ad:10:2a:d6:
48:6c:76:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:45 2024 by rpki-client on console-ams.rpki-client.org