Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9dZ6v9tfYejsZ9dcjEZN3-Liok8.cer
File: 9dZ6v9tfYejsZ9dcjEZN3-Liok8.cer (raw, json)
Hash identifier: IYVISGB37BLL/L0+wwW46RJcpdclZAy2NA/9PiLS1aI=
Subject key identifier: F5:D6:7A:BF:DB:5F:61:E8:EC:67:D7:5C:8C:46:4D:DF:E2:E2:A2:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7DB408176C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/5d28ed-afc4-4f4d-a836-e4aa207f1318/1/9dZ6v9tfYejsZ9dcjEZN3-Liok8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/5d28ed-afc4-4f4d-a836-e4aa207f1318/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 03:33:19 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: AS: 13101
IP: 82.97.128.0/18
IP: 86.103.0.0/16
IP: 185.118.20.0/22
IP: 213.158.96.0/19
IP: 213.178.64.0/19
IP: 217.70.192.0/20
IP: 2a00:12d0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539891341164 (0x7db408176c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:33:19 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=f5d67abfdb5f61e8ec67d75c8c464ddfe2e2a24f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:4f:4d:a4:fe:6f:a2:92:8f:4a:19:a9:88:
3e:5e:39:09:5f:e0:75:27:35:62:7f:d4:8c:e2:32:
9c:fa:63:81:03:47:c0:27:80:e0:21:22:42:58:36:
74:f5:42:c0:ad:93:20:92:8a:38:e4:e7:17:3f:89:
d6:7b:9a:9f:d5:d7:30:9a:e8:df:dc:a8:16:67:36:
89:da:1e:50:7e:70:fd:f7:fd:dc:05:23:eb:78:fd:
6c:4a:2a:58:9c:61:5d:f1:75:6f:6b:d2:0f:3d:b3:
b2:59:13:1c:5c:5a:e2:fa:9f:1d:c4:1f:fd:c6:63:
2f:3e:f3:71:af:15:d0:26:5f:7c:51:7f:9a:55:af:
af:28:fd:be:54:57:bf:5d:5f:9d:f8:1c:a6:12:58:
0f:28:34:15:5c:ae:bb:57:99:a1:51:62:34:2d:34:
7c:28:9b:bc:e4:eb:ea:f3:9f:77:e3:9b:b6:60:94:
9f:a8:85:a5:6d:58:1a:d1:26:31:01:56:bf:55:26:
d4:7b:c4:1a:6e:fa:a1:c5:7e:dd:36:db:48:cd:1b:
80:20:7c:50:da:6a:9d:b6:0d:a8:db:db:2a:8c:91:
b0:92:90:c1:c4:c5:07:3f:22:af:6c:17:97:d7:02:
ae:02:78:34:8a:8a:21:73:80:61:7a:b5:01:88:00:
02:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D6:7A:BF:DB:5F:61:E8:EC:67:D7:5C:8C:46:4D:DF:E2:E2:A2:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5d28ed-afc4-4f4d-a836-e4aa207f1318/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5d28ed-afc4-4f4d-a836-e4aa207f1318/1/9dZ6v9tfYejsZ9dcjEZN3-Liok8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.97.128.0/18
86.103.0.0/16
185.118.20.0/22
213.158.96.0/19
213.178.64.0/19
217.70.192.0/20
IPv6:
2a00:12d0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13101
Signature Algorithm: sha256WithRSAEncryption
71:ca:7d:20:5d:12:a9:da:84:5c:fd:11:3f:1a:bd:e6:10:1f:
d9:e5:ce:66:2b:fb:df:54:9d:d7:ef:31:cf:26:37:55:98:9c:
a1:2c:5e:9b:0d:a4:e1:f2:e2:d0:4a:33:9e:02:12:cc:09:94:
df:6d:ef:b0:bf:36:31:49:61:2c:a1:3e:5f:28:c4:97:ed:8a:
d6:49:6c:88:2a:af:8f:d7:8c:8d:ee:46:59:70:ee:6a:89:20:
09:80:2d:e9:37:0c:0b:de:dc:94:7c:28:de:2b:68:90:c0:0f:
9d:ee:f7:c2:4d:64:1a:4a:25:70:85:bc:ee:9e:ec:c3:74:de:
3f:86:2f:d7:fd:2d:cd:4d:e2:62:77:7a:37:fb:1d:07:8c:c5:
9d:53:80:5a:65:69:76:92:ac:b9:11:8a:f1:6d:18:0d:84:64:
21:28:86:df:1e:46:ef:da:66:aa:5e:43:90:8c:28:f9:67:e2:
71:01:3b:36:ae:e5:2a:bb:46:72:d1:77:8c:fa:f1:2c:aa:36:
89:d3:34:1e:51:9e:84:c0:01:ad:2d:3e:62:e5:84:52:e0:1a:
71:7f:13:87:fc:60:4d:95:e3:c4:ba:35:ea:e5:42:c1:fe:8c:
99:86:f1:7a:ea:56:b6:ae:4a:16:4d:09:61:50:00:63:ba:65:
7f:82:7a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:51 2023 by rpki-client on console-ams.rpki-client.org