Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BwDF6aVgCe_qtB0vTtHb8OkX2XE.cer
File: BwDF6aVgCe_qtB0vTtHb8OkX2XE.cer (raw, json)
Hash identifier: 8gBG4LIY/PPZHj35W7LBlHnT7WYVaN4VJQg7JM4nIj4=
Subject key identifier: 07:00:C5:E9:A5:60:09:EF:EA:B4:1D:2F:4E:D1:DB:F0:E9:17:D9:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9935DCCF92
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/233276-6b6f-45c4-a56f-2fa6fb544147/1/BwDF6aVgCe_qtB0vTtHb8OkX2XE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/233276-6b6f-45c4-a56f-2fa6fb544147/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:54:52 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 211851
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658033659794 (0x9935dccf92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:54:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0700c5e9a56009efeab41d2f4ed1dbf0e917d971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6c:78:06:ad:fe:5f:ef:6b:f2:cb:27:bf:7d:
47:13:d8:63:b0:95:79:f3:4c:15:52:1b:29:a5:37:
b4:2b:92:b7:ff:97:10:a9:cf:4e:c3:f9:8d:de:7b:
9f:70:9b:94:91:c3:a8:d0:f4:03:ff:f0:a2:e4:15:
5c:20:4b:19:c9:97:0d:95:23:a2:0c:de:2f:82:94:
f2:a6:65:29:5a:f1:87:12:dd:a8:72:51:27:8c:59:
0c:8c:f8:52:78:19:60:5f:22:45:e9:2f:5a:94:07:
f4:b1:e7:fc:5e:03:84:4a:d3:a8:58:e0:40:4b:ba:
32:9a:0d:e1:f2:cd:7b:27:9b:a3:6e:6e:ec:45:a1:
73:1a:e7:aa:0a:7f:ec:7f:bb:05:8e:90:71:39:c9:
14:2f:8c:75:8e:db:40:f3:f5:eb:99:cc:0c:bb:7a:
b7:bd:f8:9d:23:e1:4f:ce:b6:00:4c:7f:57:bc:fb:
1c:43:2c:b7:f9:a8:04:23:85:cc:f0:97:30:42:ba:
eb:e2:a9:12:af:e1:e9:38:e3:73:f2:d3:0b:d0:84:
13:3b:3e:d7:ee:a1:f4:8f:7d:3e:1c:9a:6e:c6:9e:
0d:f4:e1:75:2e:1f:ea:06:74:c2:f4:5c:84:38:72:
3a:a8:ea:d1:83:db:d8:f7:9b:0d:ba:5f:10:47:ea:
27:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:00:C5:E9:A5:60:09:EF:EA:B4:1D:2F:4E:D1:DB:F0:E9:17:D9:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/233276-6b6f-45c4-a56f-2fa6fb544147/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/233276-6b6f-45c4-a56f-2fa6fb544147/1/BwDF6aVgCe_qtB0vTtHb8OkX2XE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211851
Signature Algorithm: sha256WithRSAEncryption
40:db:3f:0d:d0:e2:e4:e4:20:ea:86:1f:52:67:18:46:67:6f:
6a:0c:96:93:30:f0:d8:72:d6:ba:2e:2e:3c:fa:9e:0c:47:31:
a3:66:b9:5c:87:55:99:1a:16:bd:0f:79:d1:79:f2:2f:01:fc:
cb:16:fd:70:78:49:af:df:13:c3:c0:90:7b:30:22:61:53:8a:
60:c2:ae:4d:87:32:fa:f2:10:84:a4:ee:67:2f:b5:78:e6:5b:
dc:40:19:8c:93:d2:f1:c7:2f:92:23:a7:61:f9:6e:d6:12:f8:
c9:08:b5:8c:5f:79:c8:8d:ba:0f:bc:25:c5:7f:b3:29:2d:23:
73:6c:d0:a3:b0:f0:28:2c:5f:7d:cf:6d:88:1f:af:39:72:dd:
e6:6b:13:30:70:ba:d7:2b:50:3a:ae:80:09:a6:c0:cd:e1:84:
01:b7:8b:23:4d:ea:82:2d:11:21:a4:ef:36:c1:e6:a0:2b:75:
dd:d7:4d:2e:a0:10:ec:c0:f3:23:b7:b7:d8:6e:66:16:0e:8b:
0a:c7:37:a0:b5:16:43:7f:6a:14:28:67:10:91:77:23:38:7a:
0b:20:d8:52:11:d8:60:ad:4b:a9:df:ca:da:13:99:64:bb:db:
d2:e4:c7:4f:42:26:aa:d3:7f:8a:95:56:95:72:00:a9:c0:54:
82:8d:03:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:27:27 2024 by rpki-client on console-ams.rpki-client.org