Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2lf6wMpLuTJMlZKTKGFOAIr5J6w.cer
File: 2lf6wMpLuTJMlZKTKGFOAIr5J6w.cer (raw, json)
Hash identifier: K2NJi0556zCNuLT4szdOahLG4Pj1Eqk6TATpmQAddak=
Subject key identifier: DA:57:FA:C0:CA:4B:B9:32:4C:95:92:93:28:61:4E:00:8A:F9:27:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A13BA08B48
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/6e4f34-83f1-4009-aed5-691ff663cb8b/1/2lf6wMpLuTJMlZKTKGFOAIr5J6w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/6e4f34-83f1-4009-aed5-691ff663cb8b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:54:04 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 197976
IP: 91.230.246.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 692490111816 (0xa13ba08b48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:54:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da57fac0ca4bb9324c95929328614e008af927ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:46:2b:5b:d1:e7:5e:8b:5a:02:80:2c:71:02:
ee:41:69:95:d7:7b:0a:af:8f:0d:9d:14:92:cc:f5:
ae:54:fd:e3:17:82:06:2a:0f:68:70:98:b5:50:60:
c7:44:9b:74:8e:75:64:93:ce:a5:62:f9:8d:db:6d:
23:f4:a2:c3:e9:72:d9:54:cb:df:47:1d:e0:e1:52:
c8:aa:1f:3f:ae:2e:db:1c:e6:24:41:ef:87:fa:57:
5c:6d:13:66:16:81:a4:30:3a:5f:ef:45:ab:82:0a:
cb:a3:d2:b0:c8:0e:1a:ce:09:99:db:e0:4c:30:0c:
09:89:44:74:12:43:60:2b:00:da:d1:64:f8:cb:47:
dd:68:30:5c:d6:c8:9a:c7:f3:13:6b:9d:af:83:11:
11:8a:bd:7a:2b:fe:da:d8:e7:73:03:a2:4c:cd:4b:
78:12:c9:e8:26:eb:d1:47:74:09:14:18:f5:87:b0:
6e:33:04:33:55:08:c2:97:5d:ea:ed:96:93:89:61:
a7:6b:79:09:fd:3f:e4:37:af:bb:c2:26:9d:d0:75:
9e:c8:72:11:ab:fb:81:04:cd:f1:6c:f7:0a:23:e5:
89:f4:e6:fa:2a:71:eb:3a:c9:78:61:36:05:22:d0:
da:03:35:ba:30:c7:65:92:a0:b4:7d:75:67:f2:8e:
87:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:57:FA:C0:CA:4B:B9:32:4C:95:92:93:28:61:4E:00:8A:F9:27:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6e4f34-83f1-4009-aed5-691ff663cb8b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6e4f34-83f1-4009-aed5-691ff663cb8b/1/2lf6wMpLuTJMlZKTKGFOAIr5J6w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.246.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197976
Signature Algorithm: sha256WithRSAEncryption
36:24:09:2c:e1:01:a6:e6:d4:6c:ff:d1:70:89:53:5a:c7:f2:
87:8a:ae:21:67:f2:72:be:31:0f:38:b2:d7:2a:3e:86:5e:60:
1e:d5:c1:a7:c7:89:e4:f5:38:d9:14:8e:d6:f5:99:de:41:1f:
69:6c:d9:4c:5f:79:2f:9b:c0:9a:5c:30:4a:4b:8f:46:39:e2:
52:44:f3:a7:69:b6:58:7b:c2:e7:d0:cb:59:95:ad:69:1c:d6:
ff:7c:ac:24:d4:1f:5f:9a:84:77:db:40:c8:1b:35:1a:4e:0f:
80:cb:08:7c:b0:11:e4:1d:d5:b1:cb:78:f1:75:05:cf:2b:f4:
e3:0d:6f:9c:aa:89:e8:57:a6:e2:1d:3d:c1:80:02:35:07:db:
99:5d:f0:37:fd:6b:e0:c0:24:cf:7f:12:4f:d3:f4:89:bd:12:
1a:f8:50:34:6f:4d:fb:3d:ef:30:a0:8f:57:ec:f6:df:d8:95:
5d:b4:b2:b8:aa:73:8c:c4:f9:82:6e:4a:aa:06:73:58:23:0c:
38:59:7d:86:94:41:4a:ea:85:5c:8c:77:a5:06:d7:71:29:be:
fd:b9:b9:e0:74:dd:7a:71:26:02:bf:a0:ed:1c:a1:96:c1:3f:
a8:ad:a7:b7:3f:6c:56:41:dc:6b:97:44:68:b5:56:65:c9:02:
b6:d9:21:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:18 2024 by rpki-client on console-fra.rpki-client.org