Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AOLTwIAHdZOUcGr3TGHSsMJ2Ysc.cer
File: AOLTwIAHdZOUcGr3TGHSsMJ2Ysc.cer (raw, json)
Hash identifier: gxWYVhDHMgZSMIRnQ9/WhNJ1RyBgQCeX7eAijCRCFQM=
Subject key identifier: 00:E2:D3:C0:80:07:75:93:94:70:6A:F7:4C:61:D2:B0:C2:76:62:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AA8162F491
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/397e09-113b-4708-aa8b-4396af7d7709/1/AOLTwIAHdZOUcGr3TGHSsMJ2Ysc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/397e09-113b-4708-aa8b-4396af7d7709/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:56:14 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 7007
IP: 204.152.98.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 732315186321 (0xaa8162f491)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:56:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00e2d3c08007759394706af74c61d2b0c27662c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:63:89:0f:02:91:66:02:9a:a6:cb:e3:a4:11:
12:c2:d6:54:b4:a1:42:bf:08:fe:96:27:27:9b:c6:
b2:b7:17:fd:40:6e:f4:1e:b2:d1:d4:30:42:3f:65:
ec:7d:48:d2:c9:64:1b:be:a2:55:56:64:59:74:99:
12:d4:bf:60:0e:2b:c3:ff:41:78:fb:a9:ca:71:90:
0d:b0:94:05:4f:87:45:52:71:38:de:c5:6e:a7:ef:
08:7f:97:ea:71:e3:4a:89:7c:4f:96:19:b7:34:5b:
48:d6:41:cf:fd:57:58:6e:86:f0:88:28:dc:49:e7:
c6:56:5a:c1:fe:44:a3:b5:cd:7b:8b:7f:5b:cf:f2:
6d:76:c1:fb:fb:a6:bb:28:bf:1a:64:8c:bd:24:9f:
ca:4f:1a:d3:4d:fb:b9:f4:6f:7f:6d:ba:8a:22:d1:
99:26:3e:c7:9d:a0:be:00:36:ab:4e:da:3b:2f:15:
44:e3:1a:10:12:3b:ff:8c:bd:31:ed:f5:e0:23:93:
64:cb:20:6a:ac:68:05:b4:20:2f:bc:4b:95:a4:69:
fd:99:40:4c:bc:36:cf:5a:08:be:00:8a:05:f4:1e:
a9:a2:ed:46:74:b9:92:a1:8f:8b:64:16:1f:02:40:
6e:0a:ff:c6:0a:38:1b:ff:93:52:3c:1e:6e:45:d0:
b1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E2:D3:C0:80:07:75:93:94:70:6A:F7:4C:61:D2:B0:C2:76:62:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/397e09-113b-4708-aa8b-4396af7d7709/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/397e09-113b-4708-aa8b-4396af7d7709/1/AOLTwIAHdZOUcGr3TGHSsMJ2Ysc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.152.98.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7007
Signature Algorithm: sha256WithRSAEncryption
4a:c4:97:54:c0:c7:b9:e2:af:d9:ee:fc:bb:81:c3:64:17:6b:
34:8b:a0:cb:d6:fb:85:bb:42:f6:a7:c2:4d:6a:ed:ed:ed:46:
39:3e:44:1b:50:48:3e:90:2d:7c:70:31:ee:09:23:41:98:fb:
38:35:ec:f8:ff:67:97:0f:19:ed:77:e9:64:1d:e3:16:86:3c:
3d:fb:11:60:bb:9c:09:85:80:fb:a4:87:f2:36:40:ac:9f:bc:
bf:ec:fd:d0:79:a1:8e:e2:09:2e:ec:6a:db:f3:12:09:30:60:
bb:4a:a2:25:b1:b3:0b:d9:c3:9b:29:3a:6b:58:a9:59:53:87:
a0:69:48:05:8a:db:2f:de:a4:f0:3a:1f:84:c6:ed:ad:30:90:
b1:13:d8:b4:2d:2e:cf:a6:cf:cc:68:e8:7a:20:9d:26:f5:b6:
81:ba:40:01:07:68:e3:da:4b:a3:f5:aa:a1:3a:18:2d:02:49:
f6:54:00:4b:f9:72:bf:95:2f:79:0f:a0:b5:61:c1:d9:9d:53:
89:30:24:d7:01:c0:cb:52:2b:89:78:ea:73:0b:66:e4:49:71:
f3:ef:ed:22:e0:a9:8b:70:16:64:29:4e:b0:75:30:24:aa:e0:
99:63:a8:6d:99:1d:9f:68:45:f3:87:5a:95:25:99:00:d6:09:
b6:c2:62:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:26 2024 by rpki-client on console-fra.rpki-client.org