Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6t9rgm3mhaLJdWjF6m6B9oiQAKw.cer
File: 6t9rgm3mhaLJdWjF6m6B9oiQAKw.cer (raw, json)
Hash identifier: O/vhoIes4H3OLvhYNNBXBaZN3WoPcsUEUt1PuXugryw=
Subject key identifier: EA:DF:6B:82:6D:E6:85:A2:C9:75:68:C5:EA:6E:81:F6:88:90:00:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 58E62479A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/fa458a-efc8-499d-86db-eb5473d854ae/1/6t9rgm3mhaLJdWjF6m6B9oiQAKw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/fa458a-efc8-499d-86db-eb5473d854ae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 24 Feb 2020 14:41:34 +0000
Certificate not after: Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources: AS: 58045
IP: 37.209.240.0/21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381818272166 (0x58e62479a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 24 14:41:34 2020 GMT
Not After : Jul 1 00:00:00 2021 GMT
Subject: CN=eadf6b826de685a2c97568c5ea6e81f6889000ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:33:14:dc:a6:b8:63:84:fb:cf:ac:8b:3a:c3:
2c:13:b4:f7:ac:e3:1c:ce:a6:fb:4f:8d:1f:e5:d0:
8f:e4:73:3f:ed:25:5d:e1:db:89:89:7b:ba:72:e7:
83:af:5c:cd:35:2d:ae:1f:33:31:70:29:25:b6:b9:
a2:56:08:4f:86:6b:88:ed:fc:90:16:62:89:46:f2:
a2:1a:be:75:06:45:bc:8e:bd:16:b1:e5:97:22:f3:
52:b4:91:08:50:af:3e:a5:71:5b:20:e6:4a:56:06:
e6:e6:e9:fb:b2:e6:cf:e5:57:6e:35:cf:8d:d3:24:
2c:51:56:c7:38:8e:72:2f:47:fc:f8:4d:c8:c3:be:
7c:70:0e:ec:0e:1c:24:30:8a:d4:4f:90:dc:10:de:
38:45:1b:07:d6:b0:e5:65:fc:2b:0f:c1:1d:2f:8c:
b7:20:42:4a:ae:56:85:fe:55:1d:54:30:d3:ad:24:
91:d0:a4:4f:fd:49:64:25:af:77:d2:ca:d6:7a:4e:
62:3a:62:aa:91:71:a7:ce:20:c2:fe:a0:19:f2:00:
de:20:67:e2:d5:9e:cf:a6:17:07:31:fd:e5:3b:81:
95:a1:9c:e0:5e:09:9b:e4:78:d6:9a:14:58:94:a1:
70:6f:ff:02:e5:4d:eb:67:fe:81:7e:22:8d:e1:97:
a7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DF:6B:82:6D:E6:85:A2:C9:75:68:C5:EA:6E:81:F6:88:90:00:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fa458a-efc8-499d-86db-eb5473d854ae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fa458a-efc8-499d-86db-eb5473d854ae/1/6t9rgm3mhaLJdWjF6m6B9oiQAKw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.240.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58045
Signature Algorithm: sha256WithRSAEncryption
00:ef:70:3a:2f:1f:51:c0:0a:57:d7:2b:99:b7:6c:09:86:52:
7d:c5:26:0b:4e:fc:12:30:91:35:af:c1:5f:ae:df:cb:4b:8d:
b8:44:fb:ef:0f:15:8f:5c:cf:9c:c7:f3:54:e9:d5:74:9f:6d:
df:fa:e8:aa:8c:c9:f9:35:72:7b:8e:82:8e:88:7b:91:d6:27:
4c:7e:60:b2:dd:3d:0c:6c:8b:f5:2f:de:31:b9:9f:25:96:3e:
8c:86:eb:d8:86:74:27:72:1d:52:04:7b:77:c2:90:1b:e6:b2:
11:fb:71:dc:56:6b:72:c5:20:2c:57:d6:ad:99:2a:07:a4:a9:
83:4a:33:aa:f6:c7:a6:bd:f5:4a:4d:dc:31:fc:42:cb:12:b4:
86:44:7d:e0:82:e9:79:05:fe:48:4f:7c:44:91:d9:de:97:d6:
dc:a2:36:99:8c:48:af:17:83:fe:bb:0a:4e:5b:1e:69:ee:fe:
65:93:8e:12:71:99:32:40:1a:7c:77:e2:6b:6c:0e:21:12:a4:
8a:e0:82:9f:be:b4:79:85:65:aa:d6:ae:ea:93:c3:f2:4a:1c:
b4:4e:45:a2:36:0a:f8:ce:d9:ac:70:9c:fd:a9:f7:1d:ea:cc:
08:12:67:76:58:ab:1b:34:fd:00:67:96:df:6d:12:f0:45:d4:
6e:93:bb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:23 2023 by rpki-client on console-ams.rpki-client.org