Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BXoFJal4HCJlK5-9vwKYkA7uFhw.cer
File: BXoFJal4HCJlK5-9vwKYkA7uFhw.cer (raw, json)
Hash identifier: Q0XRVHsdoB/SoQU7gV9Cb43mOdpIiLIffNg/P7pQUac=
Subject key identifier: 05:7A:05:25:A9:78:1C:22:65:2B:9F:BD:BF:02:98:90:0E:EE:16:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A75EEE7218
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/BXoFJal4HCJlK5-9vwKYkA7uFhw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:59:16 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 44788
IP: 91.199.242.0/24
IP: 91.212.98.0/24
IP: 178.250.0.0/21
IP: 185.235.84.0/22
IP: 2a02:2638::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 718852223512 (0xa75eee7218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:59:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=057a0525a9781c22652b9fbdbf0298900eee161c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:28:4c:07:57:5f:03:47:03:11:58:6a:88:f7:
e6:e1:3b:08:2a:b6:ca:02:e2:1c:5c:a9:92:6d:55:
79:33:7e:37:19:e5:23:29:c9:c7:1d:95:f0:26:63:
7c:25:c3:c8:e9:b0:e6:2c:52:5a:c7:74:e4:b1:34:
01:ca:d3:e8:8c:ea:e7:3c:4a:c3:87:1f:43:8c:3e:
e2:3d:11:01:c9:69:9b:8f:e8:b2:6f:b0:b4:c5:01:
40:02:63:c7:b2:82:0a:e6:41:42:e7:b0:39:bb:69:
30:2c:00:cd:38:b1:8c:b5:69:4d:54:c1:bb:b6:a0:
f8:20:90:65:bd:8f:21:3a:5d:47:b3:d1:e8:8c:41:
e8:d0:84:0b:d9:88:c5:2b:2b:ce:b2:b4:a0:cc:9e:
32:7b:d1:7c:ce:c8:55:81:b1:47:fa:d0:00:ee:d1:
95:3f:90:69:c5:46:f6:11:67:ec:d7:90:1c:de:69:
6b:2c:51:2a:b2:3b:cb:9a:aa:2a:4e:ec:4a:7b:ec:
73:2d:57:ac:c6:c8:3c:05:b4:d3:2b:a6:77:97:d2:
b2:bf:ab:42:3b:e4:3a:2a:f1:45:33:e9:54:26:fe:
45:c1:4b:1c:62:6a:0b:24:0f:e3:f6:db:a9:43:27:
28:42:39:72:db:33:2c:07:7f:09:9e:5b:66:6f:3b:
01:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7A:05:25:A9:78:1C:22:65:2B:9F:BD:BF:02:98:90:0E:EE:16:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/BXoFJal4HCJlK5-9vwKYkA7uFhw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.242.0/24
91.212.98.0/24
178.250.0.0/21
185.235.84.0/22
IPv6:
2a02:2638::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44788
Signature Algorithm: sha256WithRSAEncryption
98:74:42:98:51:0d:77:1a:d1:c1:31:c0:12:43:cf:9f:98:bf:
ea:e2:ba:ac:5e:c3:60:d9:b5:14:42:69:0a:9c:df:82:c8:bc:
68:df:93:4f:44:82:34:c3:2d:89:7a:37:20:56:a8:34:b6:e3:
34:8d:b7:9b:12:18:44:5a:05:3d:d3:6f:3e:10:b0:4b:0e:e6:
f9:58:f4:db:c6:66:3f:2a:87:5f:d1:c8:3d:68:bc:d1:19:fe:
17:c5:f1:ef:e9:37:7c:93:ea:a1:6d:dc:e2:d5:7b:d5:db:9c:
bb:ba:5d:b7:78:b3:b5:af:1a:dc:71:db:2d:c1:c6:b9:8d:79:
80:51:54:e0:de:1e:fc:d6:23:6a:7b:c6:d2:01:94:c9:90:d2:
e1:6a:73:8f:6b:c6:e8:0c:4e:a0:86:a1:e7:c0:e4:4a:c4:d3:
0f:21:ef:f4:4c:f1:04:2b:68:16:11:f6:e5:b9:96:70:ea:e3:
8d:a8:86:12:31:af:c8:c1:66:26:b8:9d:33:97:8d:ec:0a:cd:
d2:e2:f3:ca:bb:d9:e4:de:e5:5c:43:d3:99:7f:91:b4:c0:76:
6a:db:a5:e2:aa:d9:0d:f3:9d:7b:f0:d7:ce:f3:d8:87:ac:23:
81:0f:e2:2c:19:5c:04:5c:59:aa:15:c0:39:a4:b3:39:80:5f:
6e:0c:f5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:27:19 2024 by rpki-client on console-ams.rpki-client.org