Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5Y-itJalDrgQ8KT0rw4T_t1dGj8.cer
File: 5Y-itJalDrgQ8KT0rw4T_t1dGj8.cer (raw, json)
Hash identifier: YrdSGaDGUOazIqW23iPWboQ2JO4eGTpaxavgNDCQutY=
Subject key identifier: E5:8F:A2:B4:96:A5:0E:B8:10:F0:A4:F4:AF:0E:13:FE:DD:5D:1A:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 996239FEC3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/2a82bf-5548-4ef0-8be0-7541650076fc/1/5Y-itJalDrgQ8KT0rw4T_t1dGj8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/2a82bf-5548-4ef0-8be0-7541650076fc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:56:22 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 207118
IP: 93.187.132.0/22
IP: 185.81.132.0/22
IP: 193.0.146.0/23
IP: 193.0.164.0/23
IP: 2a05:8740::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658777964227 (0x996239fec3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:56:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e58fa2b496a50eb810f0a4f4af0e13fedd5d1a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:45:0b:67:62:20:b9:73:39:14:cb:c4:33:
0c:95:fd:bb:30:91:70:b7:8e:43:54:33:43:af:cd:
ac:f1:b1:e1:a2:92:88:8e:20:38:9f:14:81:1e:a4:
09:76:5b:32:c0:1a:32:93:f1:ea:0f:b8:42:bd:ce:
3c:ea:64:f3:33:41:a0:68:09:f5:ab:fa:fd:06:c2:
af:b8:d2:7a:e9:f2:78:ee:17:72:1b:99:c7:dc:64:
c6:a1:a6:56:b0:5d:24:92:60:5d:7d:43:a3:67:c5:
56:bd:bc:bd:24:8d:32:80:6d:d3:69:14:f7:59:fe:
36:3a:ad:30:d7:66:8a:1f:25:1f:9c:ba:5b:59:3e:
97:8c:03:5a:7c:2d:3a:8b:52:0f:e8:f7:13:48:e7:
0e:0a:89:9f:17:e5:42:37:1d:48:7c:8f:e5:5c:23:
3a:ec:ce:e6:99:e1:b8:aa:70:0b:1b:31:ee:0e:a7:
06:9e:0d:4f:17:07:0c:25:d2:79:97:6b:37:54:e9:
4c:c0:ed:2d:42:93:a0:40:d8:bb:61:d9:b3:b3:24:
43:a7:05:81:e8:ed:fb:b5:e2:06:c5:a0:b9:2f:26:
f5:e8:52:a9:2f:3b:fc:11:fc:5b:e6:87:53:68:78:
15:65:61:47:8a:92:9e:e2:85:bd:c0:0c:99:8c:f8:
67:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8F:A2:B4:96:A5:0E:B8:10:F0:A4:F4:AF:0E:13:FE:DD:5D:1A:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2a82bf-5548-4ef0-8be0-7541650076fc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2a82bf-5548-4ef0-8be0-7541650076fc/1/5Y-itJalDrgQ8KT0rw4T_t1dGj8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.132.0/22
185.81.132.0/22
193.0.146.0/23
193.0.164.0/23
IPv6:
2a05:8740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207118
Signature Algorithm: sha256WithRSAEncryption
a1:60:75:ac:62:9a:21:26:af:d0:ec:6f:31:2a:3a:4c:0d:16:
6d:e4:22:5b:4f:bf:73:11:aa:9a:4c:73:fb:c7:1c:1c:bc:11:
db:31:9d:ef:02:ae:f7:93:04:31:98:00:46:01:79:65:a3:52:
24:96:5d:09:65:83:23:fa:03:06:96:70:d9:d1:94:03:9d:5f:
88:36:93:c1:ea:07:29:7f:ea:47:85:c8:a9:8d:7e:c4:ca:35:
64:0e:58:93:e3:7d:ae:5b:b4:9e:d9:b2:a6:59:a2:51:e2:1b:
8b:8e:52:da:15:01:7c:83:f6:cc:46:fa:00:37:cd:ba:7e:c2:
c0:15:97:f9:ae:d3:1c:fc:85:b7:b0:7b:85:b8:25:79:76:60:
9b:cc:7b:a0:d6:35:aa:a9:09:f4:e3:9e:0a:fe:6f:9d:8a:e2:
81:27:d7:37:14:99:f9:d3:82:30:d4:94:5c:25:e3:f5:64:2d:
2d:51:0e:0c:b5:fe:7d:55:41:12:fe:13:a2:4a:d0:af:b1:2b:
d4:bf:0b:36:95:3a:06:e5:83:f1:d3:20:22:0b:28:3c:a8:7c:
48:df:8d:16:5f:ed:b1:8c:2e:70:d8:11:7e:cf:24:f6:1b:82:
84:0b:1b:b7:07:1a:f2:30:26:de:56:34:c4:62:32:ae:0d:04:
79:e9:09:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:35 2023 by rpki-client on console-ams.rpki-client.org