Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3xjF9mdTaHBrCMwnE5rt9yEPr0c.cer
File: 3xjF9mdTaHBrCMwnE5rt9yEPr0c.cer (raw, json)
Hash identifier: DLcjmBXuBJwhm9dfT9H2TQ7dfUzaMBSy9L0OyRlcMjo=
Subject key identifier: DF:18:C5:F6:67:53:68:70:6B:08:CC:27:13:9A:ED:F7:21:0F:AF:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9C9A0CBB9E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/61c951-ea02-46c0-b6a3-acb4271def7f/1/3xjF9mdTaHBrCMwnE5rt9yEPr0c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/61c951-ea02-46c0-b6a3-acb4271def7f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:53:28 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 12570
IP: 80.78.144.0/20
IP: 88.83.224.0/19
IP: 89.190.40.0 -- 89.190.63.255
IP: 109.105.32.0/19
IP: 185.8.188.0/22
IP: 212.4.128.0/19
IP: 212.96.160.0/19
IP: 213.211.32.0/19
IP: 2001:4ba8::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672599423902 (0x9c9a0cbb9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:53:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df18c5f6675368706b08cc27139aedf7210faf47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:5c:ef:5c:77:0d:6b:ac:da:b9:74:5e:69:
b9:ba:5b:0e:64:a1:07:2f:9b:03:16:30:bd:73:4d:
58:c8:51:ad:3e:0a:23:a7:89:ae:22:53:e2:a1:3b:
22:9d:a6:d2:93:5e:60:16:ea:8f:a0:1c:7f:e5:25:
27:7e:8d:dd:e1:a2:a1:61:e0:d2:7c:af:56:dc:8d:
c7:97:61:44:68:cc:ad:06:64:61:3d:4e:0c:ac:07:
04:eb:e7:91:1f:5f:3a:a6:f1:b9:32:9d:4d:ed:a2:
5a:f7:d1:a5:55:87:15:c6:24:bb:16:73:76:e4:62:
4e:0e:a4:4e:25:7e:95:14:19:7e:2f:6f:55:76:62:
25:90:47:a5:2c:a6:74:64:23:c3:85:2f:fd:b7:d5:
92:f1:2e:30:a6:e2:b6:98:ec:4e:44:d5:ec:e1:86:
aa:16:8b:92:73:9c:99:0e:2d:c4:63:f7:45:30:92:
05:64:f1:91:00:fd:b4:82:6c:76:1b:8f:d8:05:3a:
ae:55:81:4d:09:bd:3d:5c:c5:ef:6c:70:de:61:92:
6b:53:d5:1e:48:39:51:cc:6f:19:df:93:a3:eb:7a:
a1:e4:2b:f5:df:01:a0:6e:7b:8b:50:40:8b:da:42:
32:59:96:23:bc:a2:c8:2c:bf:86:ba:29:ad:08:e1:
62:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:18:C5:F6:67:53:68:70:6B:08:CC:27:13:9A:ED:F7:21:0F:AF:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/61c951-ea02-46c0-b6a3-acb4271def7f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/61c951-ea02-46c0-b6a3-acb4271def7f/1/3xjF9mdTaHBrCMwnE5rt9yEPr0c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.78.144.0/20
88.83.224.0/19
89.190.40.0-89.190.63.255
109.105.32.0/19
185.8.188.0/22
212.4.128.0/19
212.96.160.0/19
213.211.32.0/19
IPv6:
2001:4ba8::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12570
Signature Algorithm: sha256WithRSAEncryption
07:3e:53:ca:ca:57:55:87:6e:ba:83:1c:76:88:14:85:c0:0c:
a8:cc:8c:e8:3a:46:a3:d4:57:ab:fb:32:e3:e5:f4:a9:bf:69:
e2:53:1c:76:f5:74:ba:37:96:72:36:83:38:fd:5d:07:40:c7:
f3:15:ae:66:e4:26:61:c3:f0:f6:1a:e9:c9:71:6e:ea:d6:7c:
a2:dc:e0:a0:71:21:1a:83:75:2e:5b:73:36:cb:d6:a2:c8:9c:
6a:22:8e:56:cc:c3:6a:82:83:b2:4d:88:2b:36:ac:a1:ad:99:
1f:7b:70:dd:12:e5:cf:53:5f:ea:37:96:38:3c:0b:27:a6:17:
9a:f4:f6:84:49:e6:e6:97:7d:0a:7e:d2:27:5c:c7:62:cf:70:
3b:01:b3:db:00:59:c5:70:97:61:0e:84:16:72:9b:2e:ad:7b:
98:8b:c0:82:82:e7:8d:0f:ad:94:e7:ef:5b:f5:6c:d7:5e:b9:
5f:35:b5:c9:2d:0d:64:d9:4d:37:12:11:c6:21:2c:7d:20:0c:
56:44:93:04:6c:c0:ba:67:2b:ce:c9:c8:06:a6:41:8a:8a:31:
e4:d9:52:ce:60:35:24:58:5d:16:35:ca:68:1f:6b:9a:a9:23:
48:c2:02:d0:b7:bc:01:df:b9:d1:f7:7f:9d:02:38:c9:37:d5:
94:3f:98:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:01 2023 by rpki-client on console-fra.rpki-client.org