Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ABbk9ZPuc41MCEyYkrPgoOXhbAc.cer
File: ABbk9ZPuc41MCEyYkrPgoOXhbAc.cer (raw, json)
Hash identifier: NrPzro5Q/rH+jsfqoXXhyHc1XjctOeshJiitsL4p8tk=
Subject key identifier: 00:16:E4:F5:93:EE:73:8D:4C:08:4C:98:92:B3:E0:A0:E5:E1:6C:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7876E3D371
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/919f1c-899a-4e0c-84da-08df8511bfdc/1/ABbk9ZPuc41MCEyYkrPgoOXhbAc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/919f1c-899a-4e0c-84da-08df8511bfdc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 01:32:25 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: AS: 207342
IP: 45.158.136.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517390717809 (0x7876e3d371)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:32:25 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=0016e4f593ee738d4c084c9892b3e0a0e5e16c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:40:8f:4d:a9:b2:49:78:df:6f:91:62:b7:d3:
3f:83:8d:e3:61:01:1c:05:0d:b7:30:c0:e1:af:65:
df:99:52:eb:1a:7e:6f:12:79:14:bd:1d:16:3f:e5:
7d:6d:ff:44:5c:3b:ad:a1:89:60:50:eb:01:5e:3d:
16:f1:41:90:1d:09:dc:53:a9:b6:d4:cd:fe:27:1c:
26:40:5d:3e:7f:1e:cc:46:fa:96:39:ca:e5:5d:ee:
9a:e8:9e:ac:49:ac:3d:77:cf:a3:1a:bb:c5:b5:3d:
fa:fa:f6:ce:a9:9a:84:d7:c7:20:e0:24:86:5c:93:
96:a3:ad:8c:6d:9b:18:0c:c8:1d:9a:8d:07:e9:14:
d0:cd:b7:c3:f2:cf:8b:95:3d:0e:44:b1:f8:d1:f8:
59:50:e3:7e:b4:c6:e0:7a:82:3b:ac:17:5d:92:6c:
fd:63:8b:01:4c:28:36:2b:35:b2:05:0f:8a:7d:a0:
08:88:b7:e9:fb:ba:98:ae:9c:b7:16:96:0d:54:6e:
8e:22:26:48:59:04:3b:10:2e:00:65:77:2b:6e:9d:
d9:7e:7d:ae:c0:d6:86:82:17:48:e5:3e:cc:1d:a4:
46:58:fd:3d:ce:65:f2:c8:3b:13:e0:46:ca:1b:d1:
37:df:30:75:88:ce:df:56:a9:1e:ae:58:29:7e:ec:
c2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:16:E4:F5:93:EE:73:8D:4C:08:4C:98:92:B3:E0:A0:E5:E1:6C:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/919f1c-899a-4e0c-84da-08df8511bfdc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/919f1c-899a-4e0c-84da-08df8511bfdc/1/ABbk9ZPuc41MCEyYkrPgoOXhbAc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.136.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207342
Signature Algorithm: sha256WithRSAEncryption
66:37:09:42:87:f9:21:d1:1a:de:4b:38:1f:5b:06:2b:c7:be:
7f:9b:e3:6a:05:8d:0a:2b:0b:c8:45:76:cd:35:75:65:f2:de:
4b:13:9c:91:64:7b:eb:74:f9:33:ef:0e:90:e9:ab:84:94:66:
67:bd:b9:2d:0f:f7:23:84:33:b5:bd:4f:94:f2:21:c9:51:a3:
88:1d:3d:71:ee:5c:1e:ed:8b:d5:92:aa:8c:0c:47:ad:17:5e:
39:29:c1:7d:25:20:56:df:ef:94:9c:b6:86:b4:e7:b3:cf:d1:
12:81:16:a2:8f:0f:c7:aa:70:d3:96:ca:37:93:20:1b:7c:eb:
3f:2b:02:d7:ea:54:e7:ab:ba:3d:bc:f7:aa:9e:37:b6:a7:37:
34:b9:04:3f:0c:e2:51:4f:dd:76:00:dd:3d:22:15:2d:93:4b:
af:ac:5e:3d:12:f6:fe:fb:3a:28:0e:c0:ed:dc:af:5d:ab:20:
2d:ea:97:61:a9:df:ad:77:25:41:88:ec:c3:dd:57:cb:da:ee:
f7:5a:13:87:47:47:8c:54:39:07:6b:ac:54:f4:c2:ed:7f:52:
f6:e0:00:c7:ef:ec:c6:9b:1e:f9:cd:a2:27:8b:2d:aa:56:56:
cd:e0:e9:91:b3:af:cd:f9:fb:9a:27:91:f6:4b:de:85:9f:33:
a2:e4:d2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:58 2023 by rpki-client on console-ams.rpki-client.org