Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Aa3RqvfZbu-7qs0XSNFAYyZZEs8.cer
File: Aa3RqvfZbu-7qs0XSNFAYyZZEs8.cer (raw, json)
Hash identifier: H6pIpYMCmQY31M6n6gvxqpUpz31eHiNPealQUrEQzpw=
Subject key identifier: 01:AD:D1:AA:F7:D9:6E:EF:BB:AA:CD:17:48:D1:40:63:26:59:12:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9A50D0868B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/cfb07d-7e6d-4e0b-8135-e539a7c82033/1/Aa3RqvfZbu-7qs0XSNFAYyZZEs8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/cfb07d-7e6d-4e0b-8135-e539a7c82033/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:53:47 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 47446
IP: 93.93.0.0/21
IP: 2a0a:abc0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662780806795 (0x9a50d0868b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:53:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01add1aaf7d96eefbbaacd1748d14063265912cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ee:d9:61:5b:69:93:53:66:6a:11:7a:92:fa:
63:a2:fa:16:77:61:ff:54:24:1f:83:02:a0:a0:2c:
a7:15:3a:24:3c:5b:8e:0c:63:98:d7:6e:b0:22:9a:
8f:dd:5a:40:7e:ef:90:18:82:50:ae:cf:4a:35:eb:
ed:91:f8:f5:d9:f0:37:f8:f9:e5:68:2b:eb:0a:b2:
f4:81:71:e4:4d:0c:0e:44:2c:32:a1:5a:60:45:f7:
3f:df:38:2f:7c:92:79:01:6a:b7:f4:9d:e5:f8:eb:
a5:84:9b:14:e5:b4:6a:97:bd:c6:b3:4c:b1:c4:01:
2f:4e:70:d2:48:42:f2:39:95:b1:5a:ea:a5:e9:a7:
f1:c5:ee:7d:67:57:ea:9b:c3:e2:cd:9f:e9:90:d2:
7d:4b:ba:99:6b:c5:bf:cc:ad:74:32:1a:80:27:5c:
8c:96:72:1c:c7:56:47:2c:28:b9:25:cb:79:92:a6:
a9:0f:55:22:85:12:6d:8e:4d:05:d6:44:b0:0b:cd:
df:9e:f0:93:1c:9f:51:b6:17:3f:cf:2c:fd:f5:8e:
7d:e1:6d:44:10:a4:40:4d:a0:3f:e5:06:78:95:ab:
cd:3d:8d:5f:92:ea:e1:cf:e5:13:18:3a:f7:bc:0f:
cd:e1:65:0a:79:d2:e0:89:7e:a5:d3:a2:1c:a7:bf:
5f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AD:D1:AA:F7:D9:6E:EF:BB:AA:CD:17:48:D1:40:63:26:59:12:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cfb07d-7e6d-4e0b-8135-e539a7c82033/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cfb07d-7e6d-4e0b-8135-e539a7c82033/1/Aa3RqvfZbu-7qs0XSNFAYyZZEs8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.0.0/21
IPv6:
2a0a:abc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47446
Signature Algorithm: sha256WithRSAEncryption
0f:9b:25:f9:ec:5c:6c:bb:92:7d:34:e9:dd:60:34:cc:98:2b:
df:21:ef:c1:f4:33:d2:d0:4c:eb:6f:2d:cd:ba:6b:2b:dd:42:
2e:e8:f5:1a:e9:54:e6:fd:14:42:2c:5c:13:a5:dd:9e:86:40:
54:e3:bc:cf:1c:13:38:7b:75:c3:f8:f4:4e:2d:28:1e:8d:f7:
4e:16:df:c9:63:e0:d0:cd:8a:18:20:7e:cc:b5:f3:71:92:81:
0f:e3:34:30:66:ee:e1:d7:cd:f6:24:c8:97:f8:54:f9:66:3a:
06:e9:53:21:b1:68:76:ad:bb:72:96:e0:ee:87:cc:28:38:d4:
7c:60:64:d5:f3:80:e9:e0:b6:a2:ac:de:3d:2d:0d:ea:94:64:
ec:f3:08:a5:2d:e0:2b:9e:d9:e6:f7:e4:20:d8:00:3c:cd:ad:
7b:94:ef:b9:e1:5e:aa:16:3e:95:8f:45:47:28:c1:1a:6d:31:
9c:26:a6:97:a6:67:1e:5e:5f:d2:2d:28:d7:db:20:1d:f8:e1:
80:24:4f:60:e8:8f:d3:60:72:4d:08:fc:7c:59:aa:a9:d5:67:
b4:8c:35:19:6c:4d:be:fd:74:70:90:c1:14:cb:38:5e:87:1c:
a3:05:10:3d:b8:8f:a5:cb:fa:eb:47:11:72:6b:c3:e7:6b:9d:
ed:12:ef:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-fra.rpki-client.org