Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AvGOFDOMk9WP0vR6gyBQtldsR3E.cer
File: AvGOFDOMk9WP0vR6gyBQtldsR3E.cer (raw, json)
Hash identifier: 7cs2nEr5UMQeUUNg5SPqxk/RNnRSsVZ7GikXYWUfKKA=
Subject key identifier: 02:F1:8E:14:33:8C:93:D5:8F:D2:F4:7A:83:20:50:B6:57:6C:47:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 98AE979506
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/10/02F18E14338C93D58FD2F47A832050B6576C4771.mft
caRepository: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/10/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Sat 01 Jan 2022 00:00:10 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 208051
IP: 2001:678:b34::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655764198662 (0x98ae979506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:00:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02f18e14338c93d58fd2f47a832050b6576c4771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:36:22:57:b2:ba:36:a7:1d:bf:9f:26:25:
91:d9:fd:69:e0:b3:e8:79:16:93:6e:58:8f:6f:6c:
6d:e9:48:a6:40:8f:a1:6f:6b:33:bb:ea:66:75:38:
3b:a9:1a:1a:da:1a:b4:94:e8:9e:0e:2e:36:b9:6e:
9a:15:dd:27:94:9f:ec:04:7a:a3:0a:3a:73:71:86:
5c:1f:ca:68:64:ac:98:2d:ce:7f:c2:8f:78:b0:df:
1d:8d:c4:f0:42:e5:3e:ea:d6:f1:d1:6f:92:fe:3d:
50:55:06:74:e2:c4:2f:5c:3c:2a:8d:1c:d4:51:9d:
b5:fc:03:3e:e5:ff:1a:20:b5:04:f8:cc:a6:14:9f:
0f:99:1e:d1:2a:bb:d5:98:bc:08:56:dd:fb:51:78:
ce:c8:22:ab:68:03:a3:2a:c1:0d:7c:fc:21:59:4e:
05:b4:fd:86:80:0a:68:e7:9e:ae:94:0c:0b:6e:d3:
dc:83:4d:77:f8:2b:2f:be:94:ba:10:c0:4d:84:c1:
47:57:98:bb:6e:77:1a:23:cb:52:65:22:05:1d:5e:
46:ec:93:6c:3c:a0:f2:01:77:78:3a:c7:6d:da:43:
14:7c:e5:b4:ee:23:72:1e:08:89:bc:e3:2c:e9:d5:
0e:e7:c8:56:b6:e8:44:24:09:ed:77:3c:ed:ec:0a:
04:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F1:8E:14:33:8C:93:D5:8F:D2:F4:7A:83:20:50:B6:57:6C:47:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/10
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/10/02F18E14338C93D58FD2F47A832050B6576C4771.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:b34::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208051
Signature Algorithm: sha256WithRSAEncryption
22:0e:ee:67:0d:f1:bd:ee:d3:2e:70:ea:90:02:82:ec:ab:0d:
2c:ea:a6:99:8f:ec:77:42:f0:e9:4d:eb:42:64:69:32:8a:08:
9a:3a:ac:28:ab:02:d1:02:97:1f:61:bf:f0:74:a6:36:fc:a6:
ed:de:fb:51:e6:78:6e:32:a0:8e:a2:21:17:3a:bd:f8:23:49:
a1:5e:85:b2:44:81:ed:29:d4:f5:c5:21:13:68:18:d6:b9:59:
e4:2b:90:58:a9:fd:86:66:e3:d0:42:6b:ff:4d:af:15:5c:19:
13:c4:f4:6a:13:2d:06:90:97:09:51:82:56:0c:09:23:94:ff:
93:17:46:99:fb:72:4c:5e:24:73:d5:24:d4:ad:7a:07:5b:b4:
83:01:fb:d5:48:7a:70:b0:c5:f9:d2:34:13:5d:95:6e:43:69:
b4:e7:b4:80:ac:74:1b:81:47:61:6e:ae:af:c6:40:6e:56:11:
29:03:06:a9:4f:d0:13:e8:ae:47:af:47:59:91:7f:08:bf:33:
32:70:68:72:de:fe:73:28:86:38:32:fb:96:fd:f7:47:2f:ae:
f7:48:f4:8b:8d:88:e4:65:06:97:1b:62:6f:04:a2:a8:1e:46:
d5:92:51:52:91:ff:a4:ef:35:f6:30:d0:8d:9d:6f:83:fd:3d:
0d:de:17:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 14:21:14 2025 by rpki-client