Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BggGRmtCkl2gmbRqGX3ebM9pVtg.cer
File: BggGRmtCkl2gmbRqGX3ebM9pVtg.cer (raw, json)
Hash identifier: eDVCWE6zsuMwVZWUsRZt9rZSHDsEN4l2AzVZCv09tcM=
Subject key identifier: 06:08:06:46:6B:42:92:5D:A0:99:B4:6A:19:7D:DE:6C:CF:69:56:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A276DB9A7A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/7f95ac-a4d4-4fd6-92ca-eb00aa1c2fdd/1/BggGRmtCkl2gmbRqGX3ebM9pVtg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/7f95ac-a4d4-4fd6-92ca-eb00aa1c2fdd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:55:05 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 44621
IP: 91.202.96.0/22
IP: 91.206.130.0/23
IP: 91.224.62.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697778805370 (0xa276db9a7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:55:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=060806466b42925da099b46a197dde6ccf6956d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bc:e9:33:11:f8:be:cd:58:3e:55:7b:ec:ab:
81:f0:b2:fe:b3:d4:43:80:5c:89:a4:42:1f:dc:93:
75:c1:3a:7a:02:09:a8:8d:c6:ee:ce:00:52:a0:ff:
74:ce:66:70:c1:da:45:dd:a7:26:92:3a:0e:f2:14:
0f:f8:99:64:ea:9c:69:50:8f:d1:f8:5d:1d:b1:d8:
fd:54:fe:e8:3d:ce:a1:f0:49:7f:e0:39:c3:29:2e:
61:1c:b2:3c:e8:9c:5c:dc:16:70:3f:ec:67:64:9e:
fb:7b:46:f0:92:01:33:90:a5:6d:cd:ac:25:c2:57:
ac:35:87:31:b5:7e:4b:91:8e:c8:b0:3f:8e:4b:cb:
50:0e:52:47:6b:13:36:10:2c:93:76:e7:a6:4b:08:
e1:cf:42:98:de:22:f7:36:b8:9d:09:65:91:a3:d3:
7f:18:49:20:30:e2:e4:8f:a5:61:bb:09:2c:4a:4b:
3f:37:88:16:b5:be:8c:5e:04:4d:c1:ec:94:88:83:
49:29:6b:e3:1e:2e:b0:ce:d2:2c:78:fa:fc:20:a9:
cc:67:c2:d7:03:8a:84:8a:ec:94:62:5f:5a:da:ec:
3f:4c:fe:43:37:33:c3:8f:47:7c:d0:d3:c1:ea:97:
d7:6b:28:25:32:00:b8:5c:01:ef:90:a7:8a:58:fb:
2a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:08:06:46:6B:42:92:5D:A0:99:B4:6A:19:7D:DE:6C:CF:69:56:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7f95ac-a4d4-4fd6-92ca-eb00aa1c2fdd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7f95ac-a4d4-4fd6-92ca-eb00aa1c2fdd/1/BggGRmtCkl2gmbRqGX3ebM9pVtg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.96.0/22
91.206.130.0/23
91.224.62.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44621
Signature Algorithm: sha256WithRSAEncryption
8b:f1:93:96:ff:8d:27:eb:57:04:6e:a6:74:93:bc:2c:5a:b4:
66:3e:8c:6c:2c:81:d1:0f:e1:05:a2:6b:3e:20:92:57:4d:23:
98:38:dd:3d:5a:9e:c8:50:c7:95:ca:13:1a:6f:0f:e8:22:8c:
28:78:d7:16:9e:b0:00:c4:f3:ca:3f:7e:d1:bb:89:d9:c7:61:
52:53:a5:0f:8d:46:d7:05:ba:ab:34:b4:68:0a:0f:8c:f8:c6:
59:50:23:44:15:88:c4:24:c1:5e:aa:3b:66:5a:2a:3a:08:a0:
53:bc:b0:34:8a:24:ab:33:39:cc:e6:4a:c2:44:73:f2:a4:a7:
a5:3b:a3:64:be:1f:b4:90:3e:c7:7d:3f:6f:de:84:b9:82:0e:
60:f7:c6:08:e0:95:8a:39:8c:e0:dd:83:2d:77:b0:dd:fc:fd:
ec:61:45:d0:fc:be:48:7b:9c:a9:c5:7c:39:f8:7c:ff:0d:d9:
37:90:20:52:40:81:eb:8b:8e:8d:3a:4c:fa:ee:74:80:93:26:
7b:d7:12:5f:3a:f6:df:ba:4a:7c:bc:cc:97:c0:ca:98:ae:5d:
82:02:c7:58:db:13:08:b6:a7:8f:fa:08:50:6a:b1:38:7c:10:
b9:30:03:c8:01:8f:02:ea:82:f4:5e:d5:76:53:d1:01:1c:1e:
8b:6d:39:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:27:22 2024 by rpki-client on console-ams.rpki-client.org