Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39ov89nzxZBVRBel9ajJ1ox6VFM.cer
File: 39ov89nzxZBVRBel9ajJ1ox6VFM.cer (raw, json)
Hash identifier: zFvGFGxnoPNKDqZRHTuqcyFRfOIPAyLU84SclpPVFK8=
Subject key identifier: DF:DA:2F:F3:D9:F3:C5:90:55:44:17:A5:F5:A8:C9:D6:8C:7A:54:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018538D54EC3E878D342A703E6FF32602290
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/f72326-e47f-4436-b0f2-6bc5de79b54e/1/39ov89nzxZBVRBel9ajJ1ox6VFM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/f72326-e47f-4436-b0f2-6bc5de79b54e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 22 Dec 2022 07:56:21 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 200348
IP: 185.179.89.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:38:d5:4e:c3:e8:78:d3:42:a7:03:e6:ff:32:60:22:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 22 07:56:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfda2ff3d9f3c590554417a5f5a8c9d68c7a5453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:44:2e:f1:23:73:61:5e:b3:f4:82:c3:04:cd:
4f:d3:b0:f7:1c:02:f0:c0:31:8a:23:13:71:a2:68:
ca:bf:ba:90:b0:15:89:2c:24:36:40:f3:ea:4b:6d:
48:70:d1:6b:a7:ee:8a:1f:02:a2:85:88:81:63:d0:
0b:d4:30:2e:a5:b6:78:83:29:f1:20:af:7d:0f:23:
e3:84:8a:bc:7c:31:d4:96:f6:1e:17:06:3b:5d:b6:
f2:d4:9c:82:68:3c:2a:1e:e4:7f:1d:14:53:27:34:
5b:66:c5:78:26:c4:14:b0:9e:2c:ac:45:ae:16:b2:
4f:17:16:2b:82:c7:97:38:6a:00:90:52:eb:58:f3:
d5:dc:73:19:99:2e:c0:99:50:a2:c2:43:b0:32:9a:
b4:8f:db:b7:e0:ac:40:73:45:17:7d:4d:ff:4c:67:
97:b9:f0:a0:1f:a2:63:38:ae:68:60:89:66:fe:3c:
88:fb:a3:f7:6a:7f:dc:cd:c2:0f:ea:f6:8d:23:98:
16:13:e5:87:a6:1b:1d:49:c7:d2:28:5b:ca:55:e6:
ad:5b:d7:f6:ae:ec:0f:55:bd:33:19:19:61:31:d6:
77:3c:9f:94:4c:3a:1c:58:c7:9b:89:20:ff:da:26:
5f:02:10:fe:d2:d7:64:16:93:e9:4d:d3:57:5d:10:
ba:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DA:2F:F3:D9:F3:C5:90:55:44:17:A5:F5:A8:C9:D6:8C:7A:54:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f72326-e47f-4436-b0f2-6bc5de79b54e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f72326-e47f-4436-b0f2-6bc5de79b54e/1/39ov89nzxZBVRBel9ajJ1ox6VFM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.89.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200348
Signature Algorithm: sha256WithRSAEncryption
20:04:3c:bc:0e:a8:76:d5:c2:bf:78:16:d7:51:18:a2:2f:b9:
5d:eb:31:ca:28:1a:8e:67:fe:18:2a:8b:bb:7d:5c:ab:d7:2f:
09:20:2b:50:b7:a4:b8:74:d2:4c:9b:f9:fd:e7:85:92:fc:58:
f8:9e:20:b1:93:11:6d:5a:86:ca:e5:d5:bc:23:34:77:cd:cc:
90:45:c6:4a:cd:3f:ac:3f:2d:1b:df:8b:bb:c0:b5:e8:8e:0b:
4a:3a:29:6e:28:9e:7a:60:0a:ec:45:5c:7c:41:7b:03:64:3b:
c7:dd:2c:e8:56:da:38:f2:12:98:98:bd:e3:5a:4c:1e:32:00:
46:1a:33:81:51:f0:be:33:94:4e:6d:e7:d5:78:58:dd:4c:8b:
2c:4d:a9:49:66:a7:b5:78:c2:6f:6a:c1:fe:c6:7a:2c:63:d6:
3c:b8:f0:2a:04:7a:ed:96:4d:72:38:7e:81:2b:fd:63:c5:ca:
7c:7f:54:ba:bb:f7:50:97:d0:d6:d0:7f:24:cf:7b:4a:56:b1:
e7:05:52:3e:2b:d2:f7:2d:b0:c7:ae:9c:a0:5c:6a:11:84:65:
9b:7c:76:9e:32:28:d5:a7:b1:08:2a:4e:30:69:38:77:f2:6a:
a6:23:38:49:46:fa:2c:84:a6:d4:fa:4c:8d:26:42:6d:48:2f:
62:22:25:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:49 2024 by rpki-client on console-fra.rpki-client.org