Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43nYPSKgvuuGyH4Vpstsab1CkD8.cer
File: 43nYPSKgvuuGyH4Vpstsab1CkD8.cer (raw, json)
Hash identifier: 049phVbiRG6o/2DtbNnLZvV0UXkaYIn5Jt5cAYuOxxw=
Subject key identifier: E3:79:D8:3D:22:A0:BE:EB:86:C8:7E:15:A6:CB:6C:69:BD:42:90:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9A8420A132
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/43nYPSKgvuuGyH4Vpstsab1CkD8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:55:52 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 43288
IP: 185.188.28.0/22
IP: 2a0b:b480::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 663641694514 (0x9a8420a132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:55:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e379d83d22a0beeb86c87e15a6cb6c69bd42903f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cc:f5:99:85:68:d0:0d:d0:17:12:dd:ff:19:
37:08:f1:42:16:6d:0f:91:4d:78:05:39:42:7a:6a:
2c:3d:af:67:59:4b:d7:8a:65:38:e9:35:78:90:60:
ec:f4:57:0c:37:eb:a1:fb:df:0d:cc:48:8c:4f:af:
d8:11:44:37:46:b8:28:b2:85:44:92:20:31:ae:bb:
eb:1d:82:d5:16:9c:71:1a:38:bb:d0:b1:07:44:99:
7c:90:e1:b4:d7:f4:bc:15:3f:95:d8:7e:78:4d:3c:
b3:c8:31:77:1b:a5:9e:9d:3a:bb:ef:79:21:e7:4a:
73:85:81:48:d8:ac:1b:40:6d:0a:5c:46:7e:76:47:
0a:d2:37:2e:d0:7f:07:f5:5e:1f:db:81:e3:fb:aa:
87:99:58:8f:1c:ab:d9:4e:9c:99:a1:33:65:ac:d9:
18:88:c0:bb:b0:59:a7:00:43:46:97:bc:50:13:d0:
c0:aa:c4:37:6a:90:f1:89:ae:e4:68:1b:a7:4e:f0:
36:f6:b1:a4:f4:fa:a1:f9:71:ff:d2:c8:32:af:85:
dd:c9:c1:d9:95:8c:79:f5:66:09:3f:dd:4c:76:0f:
6f:f9:eb:7c:00:92:6c:76:13:ab:28:42:f8:d2:d2:
6c:3e:78:c7:a3:9e:c4:a0:ba:74:1e:7a:2f:63:29:
c8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:79:D8:3D:22:A0:BE:EB:86:C8:7E:15:A6:CB:6C:69:BD:42:90:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/43nYPSKgvuuGyH4Vpstsab1CkD8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.28.0/22
IPv6:
2a0b:b480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43288
Signature Algorithm: sha256WithRSAEncryption
3c:ec:64:ee:4f:e7:21:ea:dc:18:dd:1e:dd:89:c2:0f:34:fa:
db:ab:b9:96:99:6f:28:55:48:77:46:20:38:01:d1:09:9e:da:
c0:51:d2:6a:0a:c7:fa:25:d7:da:39:d2:c9:d0:dd:57:5d:42:
8b:b4:8a:e5:9b:fb:20:fa:f2:1a:0e:a7:c1:b2:8d:74:b0:2f:
0f:e2:fe:7b:92:0d:a3:32:67:3b:71:0c:b8:a1:5a:78:a7:5f:
92:fd:83:a5:aa:1d:a0:bf:50:03:5d:7d:9c:cf:2a:9b:7f:67:
d5:71:1f:eb:3f:6a:2e:a8:88:d2:10:c3:c4:03:cf:08:52:7b:
62:ba:fc:a1:df:fc:c7:70:3f:d5:18:4a:5f:b5:92:aa:41:71:
34:20:02:33:98:d2:39:d4:5d:d3:73:fc:6d:ce:be:d2:d6:32:
f2:89:57:bf:95:16:48:21:5b:00:e0:2a:7d:03:1d:c8:2a:c9:
cd:66:01:94:b5:3b:ba:87:22:ba:9c:04:8f:91:df:49:29:a8:
13:85:d6:b1:e1:e8:de:af:1f:1a:26:ca:82:83:d8:42:33:bc:
51:bf:83:be:98:b8:ea:8e:93:b1:32:26:22:66:83:ef:e5:ea:
17:86:e2:32:28:a3:60:ee:e7:9a:89:30:93:35:4d:1b:67:52:
f4:a5:62:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:16 2024 by rpki-client on console-fra.rpki-client.org