Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4em1d4ab3KsAXeULMnxIcNR3-hk.cer
File: 4em1d4ab3KsAXeULMnxIcNR3-hk.cer (raw, json)
Hash identifier: rlmVLeGLTL2fZ+m/qKPPxzt5X94UFMxP48pSIiwtQxE=
Subject key identifier: E1:E9:B5:77:86:9B:DC:AB:00:5D:E5:0B:32:7C:48:70:D4:77:FA:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A646FD5C9F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/d40eb5-9d23-4fad-886c-130e90fdeb8c/1/4em1d4ab3KsAXeULMnxIcNR3-hk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/d40eb5-9d23-4fad-886c-130e90fdeb8c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:59:51 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 200877
IP: 185.91.124.0/22
IP: 2a05:e940::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 714155580575 (0xa646fd5c9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:59:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1e9b577869bdcab005de50b327c4870d477fa19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6e:54:67:61:b2:6f:43:a4:8a:10:e3:71:c9:
4a:7f:c8:98:f9:85:b1:59:17:68:d7:12:39:5c:18:
01:f7:27:d6:2a:39:fe:f6:cc:73:a7:79:8b:cb:6c:
0a:14:42:e3:91:31:17:0a:13:28:36:78:fe:66:86:
64:62:bc:7a:bf:89:93:1a:85:e6:46:e3:81:1a:2e:
27:66:6d:91:69:bc:92:54:a9:12:54:cd:2e:b2:6c:
94:04:7c:fb:cc:b2:b7:43:00:34:be:ad:9e:64:3d:
5d:3f:95:f5:a8:cb:27:f4:4f:46:52:d9:b6:70:56:
e6:51:9d:f3:79:5d:6c:3a:98:8e:a7:34:64:d2:9c:
58:00:26:85:06:4b:00:4f:84:78:d8:6f:41:d7:6d:
e3:07:a2:21:d5:a3:ec:aa:12:ec:21:25:4f:6a:8a:
db:62:e8:16:33:bf:85:01:98:57:a3:92:d3:e4:41:
26:a1:3a:63:aa:74:7a:2c:05:e0:6b:66:2e:6d:f9:
ca:17:b4:a4:be:ae:ab:46:32:80:07:68:e6:99:c6:
d0:5f:62:aa:98:27:71:8c:f6:46:c9:ba:be:92:fd:
0c:b2:87:b3:d0:fe:ce:d5:88:78:42:13:6d:e8:a7:
56:3f:50:ae:fb:4f:80:86:8f:7a:98:05:ea:7c:c6:
c0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E9:B5:77:86:9B:DC:AB:00:5D:E5:0B:32:7C:48:70:D4:77:FA:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d40eb5-9d23-4fad-886c-130e90fdeb8c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d40eb5-9d23-4fad-886c-130e90fdeb8c/1/4em1d4ab3KsAXeULMnxIcNR3-hk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.124.0/22
IPv6:
2a05:e940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200877
Signature Algorithm: sha256WithRSAEncryption
7c:53:96:0e:84:ea:8b:ec:cc:15:f2:de:a8:ab:d7:24:d6:01:
e3:c2:e7:75:b4:ac:69:b5:2a:80:7e:2f:fd:0d:40:96:d2:3d:
fa:e2:0a:1c:cb:ab:36:f3:b2:02:39:a4:7d:f6:e7:38:55:6b:
a5:d4:c1:c0:40:0c:1e:58:4f:aa:c7:1f:50:b7:ed:30:f4:6c:
72:08:83:a1:7e:85:50:60:70:5d:35:ef:b6:7a:3e:84:ee:0c:
64:7b:6c:7a:36:22:b0:e5:c2:ce:0c:4d:a9:c7:20:7b:93:84:
fe:71:92:2f:1d:73:e4:0b:9b:de:22:79:fe:6c:fd:62:6b:5a:
13:b1:2f:24:0f:48:93:45:17:65:2c:02:4f:fd:cf:32:54:49:
f5:d4:79:44:99:6d:81:a7:02:42:20:3c:53:7d:e8:37:fd:85:
ef:83:c1:d2:b6:77:09:4c:ff:f9:4e:0b:05:7a:3a:57:34:2f:
10:54:db:36:a8:5d:d3:5a:38:2e:33:37:6b:57:17:f6:b3:fd:
d6:2f:6f:f0:7a:b3:2b:2b:88:2f:16:43:28:e2:98:2d:13:0d:
83:4f:a6:99:e6:ca:be:9b:49:4a:8c:b0:c8:b2:8a:dd:21:ed:
2c:95:65:30:e8:99:74:ff:fc:41:56:1a:67:68:7d:33:cf:0a:
ce:49:5b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:59 2024 by rpki-client on console-fra.rpki-client.org