Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8JoeSo93dkz9xMATvkEnAPcK0mg.cer
File: 8JoeSo93dkz9xMATvkEnAPcK0mg.cer (raw, json)
Hash identifier: ys/q5pJzfaXNXLmJCAPxGLNm6zfGqUTPUOrpzao7kmE=
Subject key identifier: F0:9A:1E:4A:8F:77:76:4C:FD:C4:C0:13:BE:41:27:00:F7:0A:D2:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9C426E0904
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/81328a-f211-4218-bf24-297d82fec207/1/8JoeSo93dkz9xMATvkEnAPcK0mg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/81328a-f211-4218-bf24-297d82fec207/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:01:43 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 51426
AS: 56412
IP: 46.175.112.0/21
IP: 85.209.36.0/22
IP: 91.217.18.0/23
IP: 185.225.108.0/22
IP: 193.35.1.0/24
IP: 193.35.24.0/24
IP: 193.35.61.0/24
IP: 193.35.63.0/24
IP: 2a0d:bc00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671129405700 (0x9c426e0904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:01:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f09a1e4a8f77764cfdc4c013be412700f70ad268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:53:96:dd:98:8c:45:94:03:32:97:2c:7d:
8a:45:88:d5:87:79:89:b1:5a:a7:44:1d:a4:e2:d6:
c1:8f:49:1e:f2:db:19:04:14:65:74:05:de:1d:c8:
ec:6b:17:7c:4b:ca:16:29:b6:2c:33:51:e0:8b:12:
49:79:90:8e:8b:1a:9a:45:c7:2f:3a:42:00:a9:f9:
16:20:50:70:c3:83:7f:00:46:1f:1a:c5:4a:b3:16:
32:26:c7:78:f6:5b:29:fc:d3:c0:45:9c:e5:0b:12:
21:f7:cf:56:7a:56:b3:d3:13:7b:21:1a:b2:2d:4a:
7b:b6:37:6c:d8:94:4c:78:08:97:a4:7a:4f:54:44:
f9:34:6c:e4:93:97:1a:be:24:a7:d0:0d:0a:4b:8f:
e5:d7:ad:0e:2e:18:73:b6:47:57:ad:b2:1e:4d:d2:
f3:d1:97:ab:c2:90:16:a0:24:c3:2c:e6:b1:41:c2:
be:b8:e9:03:fb:57:aa:10:1e:f4:60:a7:da:17:80:
97:ef:81:ef:95:cf:bc:82:33:ed:5d:c5:39:e5:67:
e2:96:fb:e1:d1:5e:f4:f6:03:af:83:59:fe:23:89:
47:ae:47:50:74:db:e2:91:9d:a0:54:3e:10:a5:ce:
cc:bb:81:ae:6e:b9:4e:8f:60:64:ec:d4:e0:17:85:
3a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9A:1E:4A:8F:77:76:4C:FD:C4:C0:13:BE:41:27:00:F7:0A:D2:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/81328a-f211-4218-bf24-297d82fec207/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/81328a-f211-4218-bf24-297d82fec207/1/8JoeSo93dkz9xMATvkEnAPcK0mg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.112.0/21
85.209.36.0/22
91.217.18.0/23
185.225.108.0/22
193.35.1.0/24
193.35.24.0/24
193.35.61.0/24
193.35.63.0/24
IPv6:
2a0d:bc00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51426
56412
Signature Algorithm: sha256WithRSAEncryption
91:89:7b:6a:6e:43:d8:e5:f2:cb:df:55:e0:8f:e9:49:a5:fa:
ab:a3:a9:3d:b1:e5:5b:ee:fb:8a:82:44:ce:21:6a:d8:94:e7:
ff:a8:df:45:1a:f6:f1:41:dd:01:e5:45:d9:b9:f5:11:54:38:
49:ea:7b:07:77:36:8e:b5:9a:c7:f1:42:31:45:3e:b4:55:8c:
26:4c:32:9b:52:1c:2f:b0:31:40:7b:81:e7:12:a8:59:d7:21:
14:d7:88:9c:20:73:1d:25:b9:83:ca:95:f4:b7:1b:f1:42:79:
d8:14:c6:c2:10:6e:74:d9:40:3e:43:72:4d:06:18:5e:f4:7f:
4e:4f:3c:86:b9:c7:c4:ac:fd:40:df:c3:4c:19:d4:5d:79:74:
28:b0:75:bf:a8:49:ac:bb:2c:09:dc:85:40:11:cb:26:4f:ac:
ba:1a:8d:32:c0:df:d3:a8:5f:6c:38:a4:d6:a1:1c:b8:87:41:
ed:09:38:c0:93:7f:81:02:9c:4b:e7:9f:c2:be:52:a0:ba:d4:
11:ab:86:de:7b:50:46:b6:3c:ab:ad:73:67:31:5e:fb:e2:c4:
99:88:17:b5:cd:21:43:60:54:a6:08:df:18:99:78:87:bc:c7:
a3:1c:ec:36:24:69:3b:49:93:35:c6:cc:eb:a1:88:93:25:38:
11:d5:19:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:11 2024 by rpki-client on console-ams.rpki-client.org