Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2BVD7C9y-PUV7BZPTtf75sDTVHQ.cer
File: 2BVD7C9y-PUV7BZPTtf75sDTVHQ.cer (raw, json)
Hash identifier: FiDQRoSiqbqsIvGS+rF5uQURJmAGrmlbTDELPJjG5M0=
Subject key identifier: D8:15:43:EC:2F:72:F8:F5:15:EC:16:4F:4E:D7:FB:E6:C0:D3:54:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 78DFE83DAC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/aa8194-0845-454c-82bb-9dc5f184bb49/1/2BVD7C9y-PUV7BZPTtf75sDTVHQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/aa8194-0845-454c-82bb-9dc5f184bb49/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 01:41:39 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: AS: 3204
AS: 35537
AS: 41767
AS: 205758
IP: 185.37.252.0/22
IP: 185.194.52.0/22
IP: 185.200.64.0/22
IP: 185.207.152.0/22
IP: 185.210.28.0/22
IP: 185.222.220.0/22
IP: 2a04:6f00::/29
IP: 2a09::/29
IP: 2a0a:acc0::/29
IP: 2a0b:2540::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519152614828 (0x78dfe83dac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:41:39 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=d81543ec2f72f8f515ec164f4ed7fbe6c0d35474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f6:e1:70:aa:2d:7e:1c:39:35:b5:50:3f:32:
49:74:c7:41:a3:16:86:43:07:18:be:c7:50:e9:e2:
7c:37:00:54:5d:19:80:9e:e4:64:cc:44:c5:7d:31:
e8:a3:35:d8:27:af:48:13:77:fa:ab:c4:63:3c:06:
4d:8f:6a:87:ce:98:d5:72:ee:ba:ea:24:e9:c8:3a:
1c:90:27:3a:c9:2e:a3:b7:3e:1f:d8:6b:84:c3:f2:
9d:11:af:92:cb:80:b4:51:61:47:db:c0:19:92:7f:
ee:03:a4:37:56:75:62:14:54:9b:35:5f:b0:7a:51:
e8:ff:ae:8a:b6:dd:de:16:5d:bb:ab:81:95:0d:cb:
07:19:bb:6c:c0:a8:f4:55:ed:a7:1a:39:bb:dc:75:
a3:db:11:5a:de:68:b5:db:9d:b5:c9:da:41:cd:83:
bb:93:13:83:f4:82:d1:67:7f:1d:c3:0d:b5:58:98:
4f:4d:29:68:07:be:10:2a:d6:74:fa:da:ef:aa:14:
c5:5e:5e:4b:4b:75:59:8a:1e:09:21:fa:44:5c:13:
5b:3c:d0:81:a9:f6:8c:a3:90:91:5e:76:df:6d:9d:
ad:8f:a3:8e:ad:c9:f2:a5:bf:0f:27:f6:c9:7f:45:
47:0a:ac:2e:63:61:d9:32:c4:6e:85:33:cd:e7:f3:
7f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:15:43:EC:2F:72:F8:F5:15:EC:16:4F:4E:D7:FB:E6:C0:D3:54:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/aa8194-0845-454c-82bb-9dc5f184bb49/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/aa8194-0845-454c-82bb-9dc5f184bb49/1/2BVD7C9y-PUV7BZPTtf75sDTVHQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.252.0/22
185.194.52.0/22
185.200.64.0/22
185.207.152.0/22
185.210.28.0/22
185.222.220.0/22
IPv6:
2a04:6f00::/29
2a09::/29
2a0a:acc0::/29
2a0b:2540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3204
35537
41767
205758
Signature Algorithm: sha256WithRSAEncryption
18:3e:db:fc:4e:a1:b6:e7:af:85:73:e3:69:98:d9:d6:4f:7d:
f0:7d:23:97:47:8f:8b:31:66:e1:94:95:9c:3c:33:e9:c2:a6:
7c:c4:f3:9d:3e:f4:a5:ed:8c:c0:8a:57:7a:c2:71:01:ad:2a:
0b:ae:bd:d7:68:54:bb:59:d3:36:50:cf:bb:22:47:8a:7b:b0:
6e:f8:f6:07:da:cf:c7:4d:0c:7f:3f:22:8f:62:4a:1d:e0:83:
c4:7c:f2:40:96:b3:50:55:bf:7e:7f:9f:1f:36:54:23:6c:b0:
56:25:77:79:d6:aa:10:6a:ad:47:1f:08:d7:1a:4d:09:b2:43:
a2:7c:04:1c:d3:9e:45:ab:ee:66:b5:18:c2:d6:71:6f:58:e0:
c9:99:f3:45:04:bb:1b:87:05:e0:1c:85:e2:05:d8:e0:0d:65:
68:dd:ff:5b:81:a5:49:7f:5b:73:7c:71:6e:f8:1e:66:20:36:
dd:46:9d:4c:21:f2:9c:f4:0f:23:0d:e5:21:2b:ce:2e:d1:f3:
b6:cf:8e:80:a9:a1:d7:69:73:76:b1:6e:d3:21:98:d8:15:06:
ae:15:b7:67:cb:0e:ef:b1:ce:57:dc:cf:4e:a5:3a:4c:50:90:
ec:ad:62:31:8d:20:4e:52:ab:ec:04:65:4c:78:8e:61:4e:a2:
f3:a8:8d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:41 2023 by rpki-client on console-fra.rpki-client.org