Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7OeVDYUbrn1-JUf7mB9Cckr-PXk.cer
File: 7OeVDYUbrn1-JUf7mB9Cckr-PXk.cer (raw, json)
Hash identifier: KtoIoFRYbdGKUguW5mt4Es7eyfjhUdcRAD/ToBBf3uA=
Subject key identifier: EC:E7:95:0D:85:1B:AE:7D:7E:25:47:FB:98:1F:42:72:4A:FE:3D:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 99F1435E91
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/e79c67-9a8b-45f6-bd82-cd610ecc81b9/1/7OeVDYUbrn1-JUf7mB9Cckr-PXk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/e79c67-9a8b-45f6-bd82-cd610ecc81b9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:03:28 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 44056
IP: 31.135.224.0/20
IP: 46.148.128.0/20
IP: 83.97.104.0/21
IP: 91.195.130.0/23
IP: 109.196.64.0/20
IP: 176.125.192.0/19
IP: 195.2.238.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661177720465 (0x99f1435e91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:03:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ece7950d851bae7d7e2547fb981f42724afe3d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5f:f1:4b:95:74:06:8a:72:ba:e3:79:4a:c1:
21:19:24:2b:55:ac:40:f6:73:d4:dc:bf:1c:ce:5a:
5c:7b:2b:8e:2e:1b:ed:20:c6:44:b5:f9:b0:d3:22:
0c:31:be:fa:80:b0:e8:75:be:ca:4c:84:93:b7:40:
91:44:cf:1e:22:cc:ec:80:09:1d:f0:1a:3a:dc:44:
1f:21:5c:89:77:cf:5f:ac:c1:1c:ca:73:3f:93:db:
9d:ef:d6:62:c8:c7:4c:ff:5e:8d:c4:78:1f:51:6e:
b5:ab:e7:c1:42:70:1c:e1:7a:3d:5e:40:8f:a7:e8:
e4:54:df:b7:ea:4e:5b:91:f2:9b:77:e2:07:3b:ad:
ab:82:e8:f3:ea:c6:40:94:f0:51:7d:af:a7:ae:0b:
b4:f2:ef:d7:02:b5:9b:d4:c9:7f:ea:1c:aa:b4:35:
a4:53:74:b4:ae:9d:2a:db:43:3a:5d:62:6b:cc:13:
45:63:00:11:48:16:6a:55:02:de:8a:6e:86:8c:fa:
32:95:c1:ee:8a:68:68:7e:29:39:94:4f:a4:4b:70:
34:ac:e3:99:86:b5:54:eb:af:5a:90:1c:58:52:c5:
53:e2:9c:39:1a:ff:28:18:fe:5d:42:c3:a3:15:f9:
a3:68:ad:a6:57:c4:72:b2:ae:a1:54:43:c3:3e:b6:
70:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E7:95:0D:85:1B:AE:7D:7E:25:47:FB:98:1F:42:72:4A:FE:3D:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e79c67-9a8b-45f6-bd82-cd610ecc81b9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e79c67-9a8b-45f6-bd82-cd610ecc81b9/1/7OeVDYUbrn1-JUf7mB9Cckr-PXk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.224.0/20
46.148.128.0/20
83.97.104.0/21
91.195.130.0/23
109.196.64.0/20
176.125.192.0/19
195.2.238.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44056
Signature Algorithm: sha256WithRSAEncryption
88:37:21:95:d4:17:56:f9:83:5f:68:c6:45:d5:07:e7:a5:6e:
a5:90:c2:df:e9:87:89:f0:b3:53:d5:b1:3d:8f:1f:45:b5:97:
9e:ff:1e:30:4f:a8:ac:8c:f5:c3:dc:53:1b:23:31:54:a6:f9:
03:44:cc:3d:6c:98:66:4d:c6:e3:c2:e0:28:51:2a:35:91:94:
42:52:12:1f:a5:be:21:fa:58:ad:b1:c0:51:6b:d4:18:53:37:
7b:68:4a:4d:3e:24:62:63:06:fd:72:b5:ab:f9:dc:a3:0b:82:
63:7e:4f:bd:97:de:90:32:68:72:b6:62:dd:45:4c:fa:8a:10:
3f:41:e7:90:ad:2d:59:ae:3f:9c:15:ea:b1:6d:b0:45:69:97:
a0:34:b5:16:34:b1:16:0d:51:ea:dd:86:54:98:e8:c9:4e:e8:
13:f2:e3:d4:a4:6e:6f:d7:5e:bd:cb:d0:1c:45:ff:69:b9:f8:
ba:82:1e:42:57:04:5c:1f:f4:30:4f:a9:8a:0a:5a:41:ad:1f:
7b:10:31:5b:0b:9a:9a:40:35:98:3a:00:a9:b2:41:57:89:b3:
91:b3:f9:ef:97:85:2d:ff:3a:53:2d:54:95:c1:8e:7b:50:db:
5e:b4:b3:ed:f1:d6:5b:d8:eb:e0:82:ae:e1:5b:0a:f4:58:38:
b1:73:78:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:52 2023 by rpki-client on console-ams.rpki-client.org