Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ApPcZgWWmicThZ_I5LuY2ATOeSo.cer
File: ApPcZgWWmicThZ_I5LuY2ATOeSo.cer (raw, json)
Hash identifier: WJXrzaF/lHwiFsE98Tb6bNsHgeKN0p7CjKYSFEflUQM=
Subject key identifier: 02:93:DC:66:05:96:9A:27:13:85:9F:C8:E4:BB:98:D8:04:CE:79:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9B374F0197
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/851b31-7b43-4d7d-abe4-ddc5ad93fa25/1/ApPcZgWWmicThZ_I5LuY2ATOeSo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/851b31-7b43-4d7d-abe4-ddc5ad93fa25/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:51:09 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 208861
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 666647855511 (0x9b374f0197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:51:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0293dc6605969a2713859fc8e4bb98d804ce792a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:ec:46:1b:bc:a7:96:63:8e:5f:3f:5f:94:
dc:e3:f9:c4:c1:41:19:f5:22:45:8c:dd:88:c1:c8:
d9:4e:31:24:c1:6c:89:c9:23:72:a1:ed:7f:43:19:
a5:42:dd:f4:f7:18:2f:f2:65:f0:71:2d:f9:ce:81:
d9:88:19:1c:ff:2f:3a:d3:e6:09:d3:13:e6:2f:39:
80:a6:94:ce:08:c3:06:1d:6f:61:49:29:91:d6:40:
00:15:71:b1:51:76:16:d8:40:ee:10:f6:81:81:09:
b1:7d:62:f8:35:32:3b:4a:1a:3e:8a:4f:43:18:47:
35:27:de:49:cd:e2:ce:ad:1f:e9:d3:e0:b9:33:54:
a9:2e:76:ee:55:77:14:de:ee:93:49:f3:47:18:25:
ac:80:1f:56:ec:94:9f:58:94:b0:de:87:f4:02:db:
23:42:dc:52:cb:07:8a:d0:06:d9:f8:4e:2e:4d:9d:
f8:a2:3d:76:d9:4d:c7:cb:a0:f3:c1:60:0a:2c:a8:
02:95:8b:38:b7:6d:f4:b8:2d:24:65:bd:98:f3:25:
79:21:d0:c7:ca:57:73:9c:52:72:be:a7:30:b5:38:
0b:91:5d:98:4a:ba:fc:c5:db:d0:18:c1:5b:ca:ea:
e7:7c:e1:8d:21:36:3b:53:02:34:ed:71:63:e6:1d:
b6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:93:DC:66:05:96:9A:27:13:85:9F:C8:E4:BB:98:D8:04:CE:79:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/851b31-7b43-4d7d-abe4-ddc5ad93fa25/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/851b31-7b43-4d7d-abe4-ddc5ad93fa25/1/ApPcZgWWmicThZ_I5LuY2ATOeSo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208861
Signature Algorithm: sha256WithRSAEncryption
a9:b2:04:ac:3d:ab:17:dd:1a:38:d8:85:9c:1d:94:b2:5f:99:
f0:0c:12:b1:36:94:41:08:0a:39:17:ce:46:fa:a2:1d:06:ba:
71:e1:fb:82:7e:5c:a1:30:c3:6e:74:cd:c3:a3:e2:36:df:80:
53:8b:ca:72:b3:ea:96:e2:a6:ce:41:2e:2f:af:84:83:37:53:
8b:fa:f2:9e:b8:53:a6:6c:0a:fb:5c:8c:ce:93:b7:89:e7:13:
72:48:bb:45:0b:a1:34:2b:84:4e:e8:ad:d2:27:95:11:52:cb:
d9:5f:f0:41:15:75:ef:91:50:7b:70:dd:7b:f6:d4:71:01:6d:
e6:da:5c:d5:1e:24:bf:c2:25:24:90:c3:70:5b:80:fa:a5:1c:
39:d9:bd:a9:e4:67:16:34:04:31:35:6b:d5:14:ee:ec:63:38:
ad:1d:be:85:b3:9a:ed:08:d0:72:d3:29:aa:80:ea:92:28:10:
6c:81:57:ab:15:89:d6:b7:c8:04:52:76:d6:cf:b2:13:e9:c8:
ad:20:1d:d0:ee:2b:bf:0b:54:9b:ab:36:6a:41:57:6e:54:4c:
36:86:16:04:0a:52:ce:8a:a5:ba:c7:00:72:1f:f6:94:15:91:
49:22:fd:34:29:ac:9e:ba:d1:a3:49:d5:74:d7:4d:b1:f2:e1:
fe:d7:3a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:27:04 2024 by rpki-client on console-ams.rpki-client.org