Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8FvZqSahl30RBByT6ZpwGSywCXU.cer
File: 8FvZqSahl30RBByT6ZpwGSywCXU.cer (raw, json)
Hash identifier: rEU9fJ/gClWMp5xEFf98N0sVPtXf5ofCe0htsk6hY1M=
Subject key identifier: F0:5B:D9:A9:26:A1:97:7D:11:04:1C:93:E9:9A:70:19:2C:B0:09:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 813140B790
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/fcad8f-91ad-46c0-bea1-94b14249bfc2/1/8FvZqSahl30RBByT6ZpwGSywCXU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/fcad8f-91ad-46c0-bea1-94b14249bfc2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 05:17:12 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: AS: 59926
IP: 185.183.220.0/22
IP: 193.31.68.0/22
IP: 2a0b:1f80::/29
IP: 2a0d:5fc0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554877106064 (0x813140b790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:17:12 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=f05bd9a926a1977d11041c93e99a70192cb00975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b9:c8:95:49:4d:7d:b8:c3:52:05:68:08:af:
9b:07:1a:4d:54:a4:db:57:93:ce:3d:58:53:28:92:
eb:dc:b1:14:3f:e9:f6:bc:7f:fe:db:0c:62:8c:2d:
cd:fe:47:03:93:80:72:ec:73:c9:4e:03:0b:87:52:
f6:e0:25:17:cd:d0:bc:12:bc:2a:95:e7:ae:e2:ff:
d1:cc:e6:e2:c3:e8:97:4b:cc:eb:d3:67:a8:3f:ed:
6d:61:2b:b0:5b:48:e0:da:4e:4b:07:e0:06:4b:3a:
65:45:86:46:dc:2e:48:38:cb:1b:1d:e5:6a:b6:63:
b5:6a:a8:22:a2:f0:5f:2b:b7:de:b9:39:f4:32:ba:
59:c7:6c:2f:e7:9c:14:5c:b4:2e:32:91:bd:14:af:
8f:82:29:08:dd:64:6a:b9:0f:4f:1b:c9:18:46:de:
72:3e:aa:84:85:d0:09:7d:9b:09:24:f6:54:ed:37:
86:16:61:9b:39:9e:28:7e:f4:ae:98:fa:b8:da:a8:
57:c1:e7:9b:c7:d5:af:f5:cc:5a:1e:6d:08:8b:1c:
45:79:9e:36:3a:5f:9c:86:ac:d0:5b:89:91:c7:7d:
3a:99:10:1e:69:7e:33:b1:5d:40:df:62:89:08:3e:
71:4b:be:19:48:44:ca:bb:a1:f3:96:78:95:fa:53:
49:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5B:D9:A9:26:A1:97:7D:11:04:1C:93:E9:9A:70:19:2C:B0:09:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/fcad8f-91ad-46c0-bea1-94b14249bfc2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/fcad8f-91ad-46c0-bea1-94b14249bfc2/1/8FvZqSahl30RBByT6ZpwGSywCXU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.220.0/22
193.31.68.0/22
IPv6:
2a0b:1f80::/29
2a0d:5fc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59926
Signature Algorithm: sha256WithRSAEncryption
94:50:05:a2:37:ff:bb:db:64:ad:11:ab:ef:95:19:89:87:31:
41:89:5c:d0:0c:5b:7b:b7:6d:30:58:14:88:00:f5:c1:8a:bf:
47:0b:86:64:e6:a7:3d:06:a4:2b:6d:20:8a:05:49:24:3f:71:
76:0c:82:55:94:1c:25:d6:33:50:0a:98:0c:6f:7c:84:e9:d6:
2c:93:68:76:13:99:c1:1a:62:f4:43:6f:02:c9:cd:dd:a3:27:
31:cf:2e:7a:b1:31:59:f9:5a:4c:aa:b5:00:55:6e:26:d7:bc:
cf:69:df:b4:fc:c8:73:ae:bc:09:85:f1:f0:53:68:3c:17:a0:
d8:1e:43:96:84:01:22:9d:2a:89:20:7f:5c:24:8b:ca:e7:e1:
ea:9f:19:ba:90:e1:20:23:39:29:ac:39:0d:3e:cd:f7:90:c2:
71:9d:f2:38:37:92:a2:dc:5e:cf:e7:d3:cd:da:c5:e8:d6:30:
fb:96:19:f9:20:d2:cd:bd:33:12:b6:e3:9d:39:24:4c:93:71:
a5:99:ad:7a:60:74:cc:77:32:22:53:fb:ae:30:9b:4d:b3:0b:
44:ec:2f:33:f7:aa:78:ab:e2:10:c8:bc:c3:aa:91:fb:c1:ad:
7a:f8:b6:71:37:90:d6:13:ee:83:95:7a:9f:9d:a1:19:17:e1:
19:65:7c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-ams.rpki-client.org