Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3YWrPBOactiZPJrUrZQTd0gf-7w.cer
File: 3YWrPBOactiZPJrUrZQTd0gf-7w.cer (raw, json)
Hash identifier: D0BgcEWD79zhJPE+X8ZHygvp+KiJvSNBI+agrEUJD58=
Subject key identifier: DD:85:AB:3C:13:9A:72:D8:99:3C:9A:D4:AD:94:13:77:48:1F:FB:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AFD826D84B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/cab3d1-d978-4b84-bfa6-1e7cb3618e44/1/3YWrPBOactiZPJrUrZQTd0gf-7w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/cab3d1-d978-4b84-bfa6-1e7cb3618e44/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 08 Apr 2022 09:16:48 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 202420
IP: 194.49.0.0/22
IP: 2a0c:c840::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 755245701195 (0xafd826d84b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 8 09:16:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd85ab3c139a72d8993c9ad4ad941377481ffbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bb:5b:76:67:c9:9d:78:1a:11:40:76:79:fa:
d1:bd:2f:34:d9:2a:bc:59:ac:93:99:7b:15:13:23:
2b:46:10:7a:6d:fa:ac:48:7e:7d:ee:ca:d6:b7:91:
43:7e:92:26:9d:18:94:02:d7:21:45:42:d3:b9:6c:
d2:e1:2d:22:2e:68:d0:0e:f4:4a:e8:5b:76:c2:d9:
ba:f3:c9:2e:8f:85:7e:fb:8d:01:7f:c5:2a:4a:1c:
75:14:ac:ab:53:02:7b:f0:07:cd:5f:09:c8:c9:58:
25:eb:2a:6d:1f:9f:aa:92:40:94:5e:21:8f:19:6e:
81:f8:a0:aa:42:5d:77:a2:2a:da:d1:14:41:da:b3:
7b:25:27:d9:81:8f:87:25:ce:3e:01:99:c2:ac:57:
6d:e5:76:da:35:57:48:70:06:9f:79:84:04:58:d3:
e0:02:7d:6a:1f:de:34:02:b4:08:a2:50:66:e9:88:
f9:0c:c5:da:df:8a:a0:d7:36:6f:98:32:0a:4f:7a:
39:2b:2a:7a:61:72:80:fb:93:2e:4f:ab:25:93:d9:
09:0b:31:88:82:e9:69:04:b7:ce:24:12:24:0f:29:
34:3f:8c:4a:d1:e4:11:45:af:55:0b:30:bd:70:bc:
02:12:c3:85:b9:bf:d7:a2:ab:17:05:3f:12:a3:46:
03:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:85:AB:3C:13:9A:72:D8:99:3C:9A:D4:AD:94:13:77:48:1F:FB:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cab3d1-d978-4b84-bfa6-1e7cb3618e44/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cab3d1-d978-4b84-bfa6-1e7cb3618e44/1/3YWrPBOactiZPJrUrZQTd0gf-7w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.0.0/22
IPv6:
2a0c:c840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202420
Signature Algorithm: sha256WithRSAEncryption
56:45:bf:89:df:b9:64:df:d2:7b:d2:08:1b:06:17:09:30:37:
b9:bc:ab:ad:d1:6f:6a:f8:d3:58:1c:80:6f:5e:ed:f7:92:75:
d2:5d:2d:88:ed:39:c5:5b:cd:e8:b9:84:9b:da:af:eb:1f:b7:
09:d3:23:87:63:ad:1f:47:1b:31:8e:d4:ca:ce:c4:d3:4d:48:
4a:80:5a:cf:f3:ae:6d:b8:46:43:cf:88:24:c4:18:e5:65:67:
d6:e7:12:b1:fd:5e:38:9e:a4:06:19:97:af:b2:4f:78:7a:86:
37:18:6e:26:6b:f8:ee:44:10:a3:0b:4b:25:ac:e8:a6:fc:f0:
de:4d:ec:6a:bd:27:e0:a8:7e:21:ce:21:e7:1b:5b:f0:84:63:
1b:af:72:9a:0a:90:b6:8c:a0:d4:64:06:5f:de:1f:41:7e:bc:
2b:bc:83:84:2a:a6:bf:2c:c7:f5:0c:5c:1a:66:c0:5a:c8:ac:
29:8d:d8:e1:bb:bd:60:bc:b4:00:b8:79:6b:49:c3:79:bf:7c:
92:cf:19:c0:5b:2f:a7:b1:1d:6f:84:e6:fd:45:a7:78:0b:6a:
96:04:b1:c6:45:46:50:b8:b1:b9:f5:af:13:42:92:71:03:18:
29:78:ff:64:a1:9d:c8:6a:23:f6:24:f9:aa:b3:a1:44:16:8e:
89:2d:c4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:49 2024 by rpki-client on console-ams.rpki-client.org