Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B9N-2Mm8BedXKpB_xiq7Le3slTc.cer
File: B9N-2Mm8BedXKpB_xiq7Le3slTc.cer (raw, json)
Hash identifier: l6Bo/ggakNr1EWFg0cdmLgc4R8jsjCnmuKp1a2NXgeU=
Subject key identifier: 07:D3:7E:D8:C9:BC:05:E7:57:2A:90:7F:C6:2A:BB:2D:ED:EC:95:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9F4FA56E50
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/59dad2-e6eb-44f5-9e3a-69ac4d9d5f88/1/B9N-2Mm8BedXKpB_xiq7Le3slTc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/59dad2-e6eb-44f5-9e3a-69ac4d9d5f88/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:59:33 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 50986
IP: 31.170.24.0/21
IP: 178.236.64.0/20
IP: 185.27.96.0/22
IP: 193.34.202.0/24
IP: 2a02:1610::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684236041808 (0x9f4fa56e50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:59:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07d37ed8c9bc05e7572a907fc62abb2dedec9537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:88:e4:27:bc:99:69:39:b3:16:6b:6e:21:ef:
a4:88:3b:8a:00:15:2e:09:3d:f2:5f:cd:b3:58:26:
c8:aa:19:40:e4:5a:60:1c:c6:70:94:0d:c4:2d:d5:
3a:84:8d:63:b0:df:f5:c7:4a:da:ef:e3:19:0f:08:
29:19:68:71:47:6b:50:d5:66:f6:29:07:91:5e:16:
26:e5:49:cf:96:33:36:41:02:01:d4:62:f2:89:1e:
3e:04:4d:6e:6f:85:a1:89:65:16:05:54:3b:55:77:
80:46:9c:3d:d4:5d:d9:55:e6:4f:b0:40:9a:53:d2:
d0:91:9d:5d:fa:9b:97:1c:c5:ad:29:81:ca:b0:53:
4c:8e:6f:5c:bd:38:04:c9:4e:c7:98:5d:5a:99:cd:
0c:0b:3b:72:70:01:3b:c2:17:f5:e0:ac:c0:13:b6:
5a:dd:f5:3b:f2:15:79:f6:c6:ab:c9:3f:fd:14:f8:
02:cc:e2:e5:b7:40:69:80:82:4e:6d:e1:fd:0e:2b:
3e:08:88:ca:71:36:b8:db:58:51:e3:92:f6:0c:ce:
4b:c4:88:16:c0:56:dc:ea:b3:a7:bd:4a:69:65:68:
a6:90:f2:5c:34:63:7e:9f:a0:4e:6f:9d:9a:6b:76:
82:d9:43:df:8b:15:b1:a4:05:a6:14:93:8c:7d:cb:
61:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D3:7E:D8:C9:BC:05:E7:57:2A:90:7F:C6:2A:BB:2D:ED:EC:95:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/59dad2-e6eb-44f5-9e3a-69ac4d9d5f88/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/59dad2-e6eb-44f5-9e3a-69ac4d9d5f88/1/B9N-2Mm8BedXKpB_xiq7Le3slTc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.24.0/21
178.236.64.0/20
185.27.96.0/22
193.34.202.0/24
IPv6:
2a02:1610::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50986
Signature Algorithm: sha256WithRSAEncryption
a2:10:1c:b9:fc:7a:58:21:bc:8d:ee:bc:24:9e:d5:1d:a3:6d:
d9:b5:19:a8:6b:79:38:c7:2e:20:75:c8:d1:7c:75:7f:2e:73:
c9:a2:36:be:34:f0:7d:4d:30:84:ab:a3:b6:6d:b2:e6:7f:ae:
06:5e:4a:a3:1b:fb:c1:3e:ab:86:8f:ad:e5:af:c2:5b:88:4b:
69:9f:f9:ad:b2:8b:86:ca:93:1e:e1:c9:98:ab:1b:0a:9a:f4:
1b:7b:03:c0:ec:e3:21:5a:16:62:30:79:2b:f9:77:93:de:78:
b1:31:a3:37:8f:97:12:7f:74:13:44:1e:0f:db:ac:94:b9:40:
ce:d8:f0:a9:f1:27:00:d5:f0:59:5e:51:b7:e3:69:3e:be:f5:
7e:be:d9:36:6e:91:74:28:35:3c:6c:be:3b:68:b9:89:90:68:
83:8d:fc:29:76:67:a0:6c:3d:fe:2b:c2:74:53:db:2f:4a:cd:
d2:5b:27:c7:e0:8d:ab:f4:b8:0f:5c:96:20:73:cd:d5:90:0a:
20:69:9f:59:fd:c1:6c:61:ea:23:d8:15:81:e0:0c:3b:d8:08:
75:62:2c:b3:3c:d6:a8:c6:4b:3c:83:71:3c:9b:31:f2:3a:af:
f8:54:0e:9d:56:a5:01:fc:9b:18:ab:ce:ca:5c:a9:ee:cd:05:
cc:88:7f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:38 2024 by rpki-client on console-fra.rpki-client.org