Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1fVn6sZ_baCZHP2Mbnnv3dbSTxE.cer
File: 1fVn6sZ_baCZHP2Mbnnv3dbSTxE.cer (raw, json)
Hash identifier: mBZqC+WIvPnaUMZdPwRcbBE0AeiC0UWYark5sVze/n8=
Subject key identifier: D5:F5:67:EA:C6:7F:6D:A0:99:1C:FD:8C:6E:79:EF:DD:D6:D2:4F:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9D7E20F580
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/0903b7-c45b-4970-835d-0184bc9a62eb/1/1fVn6sZ_baCZHP2Mbnnv3dbSTxE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/0903b7-c45b-4970-835d-0184bc9a62eb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 04:04:03 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 202147
IP: 88.98.112.0/20
IP: 91.245.200.0/21
IP: 185.51.108.0/22
IP: 188.241.96.0/21
IP: 2a04:c300::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676425954688 (0x9d7e20f580)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:04:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5f567eac67f6da0991cfd8c6e79efddd6d24f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bc:e8:5a:8f:df:8a:53:08:57:81:5d:c9:79:
23:68:ee:ff:50:f8:e2:62:74:c4:4a:b5:8b:3b:62:
05:d9:8c:2e:46:59:36:a5:eb:c6:ff:ae:b2:52:9a:
29:c0:a9:6c:c7:51:9a:c5:3e:54:ba:42:73:30:16:
93:db:24:96:c9:80:69:93:75:a2:77:7c:8f:8d:37:
bb:3e:87:36:27:f3:da:5d:13:f2:68:0b:d4:07:fa:
55:db:e4:9d:1b:dd:1e:40:75:df:68:e7:99:7a:f8:
94:b9:9e:34:77:2b:95:44:21:3a:b2:01:3e:7f:79:
55:b6:f8:6f:58:1e:cc:03:9e:96:53:a3:85:32:88:
85:1e:73:46:54:53:37:0e:52:ca:c3:00:cb:ea:58:
cb:48:bb:a7:d2:9d:5d:c9:cb:72:43:20:96:80:59:
28:20:3c:c1:d0:1e:70:be:52:f4:f4:b3:86:fb:1c:
ed:46:6e:38:00:fc:92:49:8b:78:6b:d5:97:7b:67:
07:55:4e:f0:7b:14:80:84:e4:bb:ff:09:64:da:04:
6c:bb:c8:49:ed:a5:18:1a:19:25:d0:fd:a3:42:a2:
2b:9a:ef:76:37:02:4c:71:c4:9e:f5:0d:66:d1:39:
2a:a3:d3:22:ac:fa:f2:32:6e:bb:77:ec:8b:e5:b8:
5a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F5:67:EA:C6:7F:6D:A0:99:1C:FD:8C:6E:79:EF:DD:D6:D2:4F:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/0903b7-c45b-4970-835d-0184bc9a62eb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/0903b7-c45b-4970-835d-0184bc9a62eb/1/1fVn6sZ_baCZHP2Mbnnv3dbSTxE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.98.112.0/20
91.245.200.0/21
185.51.108.0/22
188.241.96.0/21
IPv6:
2a04:c300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202147
Signature Algorithm: sha256WithRSAEncryption
13:4f:54:79:1a:4e:fa:99:31:02:47:db:c4:f2:50:98:fb:48:
6b:1f:61:59:90:68:5b:c3:cb:7f:5d:ac:25:2d:3d:86:21:55:
1e:23:38:c9:03:5f:85:85:25:8e:22:4e:d3:cb:d1:50:c1:9c:
16:ce:e1:6e:8e:25:6f:94:75:30:27:01:ea:03:f8:8d:9b:70:
3b:2b:b0:68:88:9e:2b:56:65:74:49:f1:07:61:a0:47:d5:97:
4a:31:5e:cb:57:53:a2:fd:4a:5b:98:7a:f2:35:6b:03:f3:a0:
b1:df:f7:1a:9d:2d:02:9f:52:15:d4:c3:97:00:cc:a6:55:a3:
df:b8:4b:45:0e:ca:c6:e1:4d:9e:2a:c9:0d:59:36:25:1d:53:
d3:08:ff:b9:05:99:0f:9f:58:03:b6:72:63:73:23:47:49:4d:
40:09:5b:c4:3a:5d:47:07:00:cf:f8:91:d0:b8:b5:da:23:ad:
61:e6:c5:f7:01:b9:ae:fd:ec:10:72:4c:a3:ae:a2:c4:80:bf:
5a:b8:8d:a6:b1:ef:a3:98:24:4f:20:f2:3c:1a:3e:6d:0e:ee:
82:0b:c3:dd:da:70:e3:62:70:10:92:cb:76:ae:27:45:ba:84:
56:93:bf:5e:09:30:2d:eb:04:2c:9d:8a:64:74:b6:6d:ab:05:
31:08:a8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:55 2024 by rpki-client on console-fra.rpki-client.org