Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ar5dNhCJbI4y85xoCW1anc_dABA.cer
File: Ar5dNhCJbI4y85xoCW1anc_dABA.cer (raw, json)
Hash identifier: 1Zvs7LFChAOOKb5nzqr4QoSXUpj740PMDfm1pQT916g=
Subject key identifier: 02:BE:5D:36:10:89:6C:8E:32:F3:9C:68:09:6D:5A:9D:CF:DD:00:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018418C406D2FF598C31958CB368E40CC288
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/49347c-0ca7-4793-b264-fc4fe209a305/1/Ar5dNhCJbI4y85xoCW1anc_dABA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/49347c-0ca7-4793-b264-fc4fe209a305/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 27 Oct 2022 09:26:50 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 50320
IP: 193.104.206.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:18:c4:06:d2:ff:59:8c:31:95:8c:b3:68:e4:0c:c2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 27 09:26:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02be5d3610896c8e32f39c68096d5a9dcfdd0010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:45:1b:1c:e5:f8:22:99:06:a3:3d:0e:01:2b:
64:fb:94:9a:73:39:a0:2d:33:9e:de:7e:e0:e3:25:
aa:4a:df:f2:f7:20:32:11:c9:91:10:84:4d:83:f2:
21:05:ae:c2:95:5d:0d:46:1e:a2:cf:83:48:32:26:
9a:c0:69:9a:ba:5a:34:0b:f8:23:ed:de:4b:94:dc:
cf:1c:06:95:2d:2e:cf:31:14:6b:20:3e:ba:2b:fa:
61:ed:d6:b3:a0:82:f5:37:4e:3e:b4:4e:01:db:f0:
42:f2:5c:17:b7:42:89:5c:6a:d0:f7:87:0b:27:c1:
50:7b:5d:b7:b5:9d:ad:31:d8:e3:27:36:55:82:d9:
1d:ff:ea:45:69:f1:b3:ef:36:ab:29:bb:87:88:6e:
92:3b:f7:79:30:f2:cd:4d:a6:5d:7d:07:d6:b6:a3:
aa:75:87:ca:9f:dc:92:98:53:dd:e0:7e:ae:37:fa:
fc:c6:e7:3f:07:81:80:c7:8e:a1:be:0a:69:11:98:
d1:a0:59:19:a2:81:47:86:1f:72:bf:7a:5d:b9:d7:
0b:8a:f2:eb:3b:00:c6:24:a5:bc:79:d5:0b:64:2a:
b6:81:b0:dd:de:04:69:20:6e:b5:95:24:02:11:88:
41:a9:45:94:f4:32:21:b7:84:f7:2d:64:b1:37:b2:
63:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BE:5D:36:10:89:6C:8E:32:F3:9C:68:09:6D:5A:9D:CF:DD:00:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/49347c-0ca7-4793-b264-fc4fe209a305/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/49347c-0ca7-4793-b264-fc4fe209a305/1/Ar5dNhCJbI4y85xoCW1anc_dABA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.206.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50320
Signature Algorithm: sha256WithRSAEncryption
23:63:22:2e:64:88:fd:a5:0c:43:89:5f:42:ec:ba:7c:fe:80:
ba:a3:ba:e1:9b:ef:13:a3:cf:92:d2:79:db:1e:04:cc:0d:b7:
c5:80:43:75:52:c2:31:aa:34:f2:29:0d:18:94:9d:ac:54:09:
b6:9c:55:d8:7a:18:2d:3a:97:c7:8f:bf:1f:f8:9c:19:b1:1f:
94:a4:14:b3:b4:e1:55:94:46:9f:b2:8d:e2:ef:26:50:da:57:
0c:48:b8:2d:80:77:6b:48:a3:f1:5a:bc:0f:c5:b3:f2:c8:1c:
33:b2:bd:7b:d5:78:a3:cc:89:69:fb:97:64:8f:ef:9c:d1:9e:
63:3b:c9:d2:70:41:ba:c3:3e:7f:c0:2e:c7:72:39:e9:0f:e1:
fd:36:2e:13:5b:09:84:8b:7d:ce:84:37:72:f9:e6:fb:53:0e:
55:db:6d:5b:00:91:a2:74:83:32:e0:f5:21:0a:5e:27:a2:69:
6f:95:a7:15:8b:c0:3d:fa:0f:ab:7a:c9:e5:37:c8:c7:b7:f2:
77:61:a5:ab:d8:b2:49:53:a1:63:bd:75:02:6f:60:8e:02:df:
d1:7e:bb:84:a3:63:01:18:46:d0:46:92:f8:0c:88:be:68:fc:
2a:87:86:db:bf:89:4c:4b:eb:af:cf:bf:86:fc:e7:ce:e8:69:
17:25:21:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:33 2024 by rpki-client on console-fra.rpki-client.org