Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15cqcr_Pm8EYBz_dfPtmC-hjsow.cer
File: 15cqcr_Pm8EYBz_dfPtmC-hjsow.cer (raw, json)
Hash identifier: hDeDmtg2bfI7RzlNBsDyQHghKumG6887cr4YFWbF9E4=
Subject key identifier: D7:97:2A:72:BF:CF:9B:C1:18:07:3F:DD:7C:FB:66:0B:E8:63:B2:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A1C30159AC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/053e2e-795f-434c-a623-900eace52766/1/15cqcr_Pm8EYBz_dfPtmC-hjsow.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/053e2e-795f-434c-a623-900eace52766/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:00:25 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 57665
IP: 31.222.16.0/21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694761380268 (0xa1c30159ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:00:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7972a72bfcf9bc118073fdd7cfb660be863b28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:01:e0:4d:a2:d9:6c:42:45:11:0c:dc:ab:10:
b5:91:e8:23:76:ce:c2:47:aa:be:4f:0e:85:7e:aa:
21:f4:8d:d1:db:bb:ee:f8:71:80:39:e5:ee:1a:ef:
07:f7:a5:d8:15:7f:05:bc:2c:ae:2b:83:3c:55:11:
d9:0b:3d:a0:a4:b7:fb:5f:20:25:08:42:64:c2:55:
9f:7d:08:d4:4a:92:95:10:50:bd:18:f5:b7:68:85:
07:71:2b:c5:9a:32:8f:85:9f:0d:64:2d:f6:7c:a1:
5f:eb:d9:4f:53:29:03:25:e0:82:c4:1e:43:78:85:
98:ee:ed:d7:b3:07:63:a9:6f:ad:d8:7b:2b:8e:35:
61:5e:98:1c:fb:17:85:57:1e:e6:12:d5:88:41:60:
2c:9c:7f:40:fb:cc:37:3d:67:18:ee:a3:3f:d5:6b:
f9:ff:db:93:f2:91:47:12:3a:3d:d7:f8:fe:cb:35:
f1:bf:8f:68:dd:da:3f:f4:7c:6e:ab:26:8d:67:3f:
8b:af:b8:14:22:3b:12:fa:b4:9b:95:b1:cc:88:83:
00:e2:df:19:98:54:d6:a1:44:b5:df:61:0b:ed:79:
5b:81:4b:40:29:f6:9a:2f:05:11:98:8f:05:b2:a9:
b2:e2:17:04:fa:b7:0a:1a:86:1b:be:5c:25:35:25:
69:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:97:2A:72:BF:CF:9B:C1:18:07:3F:DD:7C:FB:66:0B:E8:63:B2:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/053e2e-795f-434c-a623-900eace52766/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/053e2e-795f-434c-a623-900eace52766/1/15cqcr_Pm8EYBz_dfPtmC-hjsow.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.16.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57665
Signature Algorithm: sha256WithRSAEncryption
0e:8f:72:22:0b:67:45:75:90:0e:2a:9c:68:f4:57:63:1a:a8:
f0:21:b8:a5:03:b8:b5:81:a3:e7:a4:80:f1:60:cd:32:9b:4f:
2d:d1:10:15:e8:aa:4a:89:60:66:63:c1:cc:ca:58:8e:9c:e5:
9d:0b:67:07:75:08:ef:83:94:c6:f5:87:41:c4:e3:4c:07:e5:
7c:e1:b4:4b:79:a9:3f:a8:2b:9b:22:8f:d4:9c:57:8b:dc:01:
cc:4b:c0:08:6b:ca:49:ca:36:67:a7:d3:2f:06:9e:2d:91:ab:
2a:88:75:c9:7e:50:05:53:e8:c2:df:6b:09:87:e9:13:95:e1:
fa:80:7f:93:75:66:61:32:3c:68:05:c0:5a:05:95:96:e2:3d:
84:6b:c8:e2:7b:66:64:e8:eb:3d:18:60:0a:1b:e2:03:39:35:
12:55:d0:31:c0:77:e0:4c:97:f3:97:5e:49:8f:47:5e:e1:97:
1c:29:ec:78:66:cb:fe:07:9a:fd:c1:62:13:5d:5e:21:d1:78:
2c:bf:40:af:1c:5a:97:0a:66:8f:b9:4f:48:a6:7c:02:34:11:
eb:49:64:ff:b7:71:70:58:4b:b8:25:f4:c6:c1:5d:e8:73:41:
0c:53:49:6e:34:2d:64:87:aa:eb:95:65:19:7f:79:ad:0f:0b:
f9:ec:6e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:27 2024 by rpki-client on console-fra.rpki-client.org