Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A5SjxG7Ah7DQl3DRhwYQfSx8F9o.cer
File: A5SjxG7Ah7DQl3DRhwYQfSx8F9o.cer (raw, json)
Hash identifier: ZU1ou0i46WlSD6zgwf/VikQHh/x+EbDCisE/bxSLgJc=
Subject key identifier: 03:94:A3:C4:6E:C0:87:B0:D0:97:70:D1:87:06:10:7D:2C:7C:17:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A123F295A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/1b7a59-2df6-4740-b719-608033efc335/1/A5SjxG7Ah7DQl3DRhwYQfSx8F9o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/1b7a59-2df6-4740-b719-608033efc335/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:53:11 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 57722
IP: 37.26.64.0/21
IP: 185.248.172.0/22
IP: 2a07:b200::/31
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 692092835240 (0xa123f295a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:53:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0394a3c46ec087b0d09770d18706107d2c7c17da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:75:de:50:10:66:da:30:13:51:82:1e:24:0c:
a7:7c:0f:54:d3:48:64:da:d0:11:d4:dd:f2:cc:10:
eb:cd:5a:32:d2:bf:40:65:56:c6:c7:55:b9:87:cd:
62:69:80:79:00:78:92:ef:2b:63:f6:2e:a0:04:cf:
78:12:77:65:bc:db:dd:cb:95:f3:eb:0d:2b:75:22:
44:31:9c:26:38:c7:f9:13:05:f9:99:b3:4b:23:51:
2d:e1:e2:d2:76:29:ce:ba:0d:de:33:04:fd:1a:69:
80:75:fe:26:6e:a5:e9:87:47:2f:85:08:ea:af:c5:
46:bc:cd:0a:bd:a8:e6:ff:4c:5a:99:3c:34:02:2b:
bb:b4:dc:58:86:25:b4:dd:ec:ad:fd:81:84:3e:4a:
93:71:96:c9:ec:44:75:8e:22:67:af:01:5f:b1:a7:
18:25:6e:ab:64:63:70:2c:74:5d:63:ca:87:55:48:
2d:96:b3:ba:b5:e3:f5:57:5a:72:ac:a1:6c:c9:7c:
f1:d4:85:05:21:31:f0:31:3a:a1:3a:4b:11:e2:fe:
a4:f6:56:01:b9:40:b3:8b:fa:69:f0:e6:35:12:8f:
ad:ae:52:95:c6:0e:5b:47:13:c0:ed:0f:51:c8:19:
a9:32:c7:05:f2:99:d6:94:83:0d:23:23:ff:a8:7a:
67:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:94:A3:C4:6E:C0:87:B0:D0:97:70:D1:87:06:10:7D:2C:7C:17:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1b7a59-2df6-4740-b719-608033efc335/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1b7a59-2df6-4740-b719-608033efc335/1/A5SjxG7Ah7DQl3DRhwYQfSx8F9o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.64.0/21
185.248.172.0/22
IPv6:
2a07:b200::/31
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57722
Signature Algorithm: sha256WithRSAEncryption
02:07:e7:7c:7b:87:8a:02:5b:ef:65:91:c4:71:14:66:63:d6:
1d:db:24:b1:bd:58:88:cf:4d:9d:e0:75:b2:84:a9:be:53:fb:
9e:67:ba:38:23:81:4b:10:c2:bf:64:13:66:44:cd:09:00:9f:
8c:0d:83:54:54:95:2a:4b:39:ff:83:8c:b2:f3:12:d1:d1:b5:
26:18:64:e7:ea:33:1d:2c:63:eb:e3:b2:3a:0f:53:25:3e:b4:
b7:d4:c8:33:93:67:c3:ba:cf:08:4b:39:a8:13:eb:08:2a:3f:
3e:ef:6a:20:75:ad:3e:da:4c:78:04:bb:18:05:46:06:74:3f:
f8:f1:17:02:f5:50:35:5e:83:97:78:e3:23:29:ab:25:76:1b:
e8:db:33:fe:0a:2d:af:fa:c6:f2:57:a8:18:6a:ce:65:e8:aa:
ad:fa:66:18:93:48:d8:3d:00:27:43:b0:ff:64:0b:ca:ee:2c:
6d:c9:97:6b:4d:46:f7:87:e1:3a:ac:56:98:a4:71:6b:ba:2c:
0b:c7:85:6c:3c:e6:61:19:a2:95:e1:50:f1:14:b4:6b:b1:1c:
f8:f3:57:22:70:ca:f1:6b:e3:20:86:7d:db:15:fb:c9:bd:97:
6f:df:c0:32:b1:04:0a:80:51:81:06:05:70:09:15:09:22:e3:
9d:42:1b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:22 2024 by rpki-client on console-fra.rpki-client.org