Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Bz6eOoXUUJo2tlJ2h6hKexFUYLc.cer
File: Bz6eOoXUUJo2tlJ2h6hKexFUYLc.cer (raw, json)
Hash identifier: 5sx0f+Sipp4Q2T/m7bi9zjnsV1i3K7rZXGSbAITwO4g=
Subject key identifier: 07:3E:9E:3A:85:D4:50:9A:36:B6:52:76:87:A8:4A:7B:11:54:60:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571685A57F3721D6EB069AE6B44752879
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/c89c9e-8623-4572-af80-7e51a2cdf813/1/Bz6eOoXUUJo2tlJ2h6hKexFUYLc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/c89c9e-8623-4572-af80-7e51a2cdf813/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:35:42 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 196704
IP: 195.88.130.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:68:5a:57:f3:72:1d:6e:b0:69:ae:6b:44:75:28:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:35:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=073e9e3a85d4509a36b6527687a84a7b115460b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ab:5a:cf:1c:54:a9:d7:04:91:21:ad:fb:32:
7b:01:04:26:21:c1:0a:40:1c:6e:4b:4b:d5:a9:fc:
9d:05:59:55:51:91:47:27:8d:a7:ec:23:81:a8:4c:
2f:ad:3c:a7:6f:b0:52:02:67:f0:03:e8:02:07:4d:
45:e8:d6:00:b6:bb:ee:e3:f3:44:64:93:fe:2c:ce:
82:b8:36:ea:e4:fa:42:62:1d:51:11:21:18:12:f4:
f4:9e:02:25:b6:6e:aa:15:85:49:61:87:0b:a9:f6:
46:3d:6f:a1:92:c1:43:08:64:d2:6a:d5:02:09:ff:
91:93:8f:27:30:e6:15:96:1c:14:0e:43:68:bc:bb:
1d:66:3f:1f:c0:25:42:3d:4c:df:76:62:63:6a:98:
5a:38:ac:7b:fc:84:dc:07:a3:67:2d:75:ff:52:0b:
9f:75:a5:5d:86:c3:b1:93:d4:c1:59:b1:54:c5:26:
ab:0e:77:0d:35:db:94:e0:36:3f:10:cf:90:2b:10:
9c:03:43:c2:3f:d8:03:19:93:7d:c2:4c:6c:e4:06:
70:bf:d7:1a:c1:36:80:73:e9:14:b8:52:24:73:71:
c0:92:09:c5:39:69:78:ec:35:86:68:e0:03:a4:58:
12:21:b0:b7:e9:74:37:e5:9e:e0:dd:4e:6c:ec:06:
c1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3E:9E:3A:85:D4:50:9A:36:B6:52:76:87:A8:4A:7B:11:54:60:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c89c9e-8623-4572-af80-7e51a2cdf813/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c89c9e-8623-4572-af80-7e51a2cdf813/1/Bz6eOoXUUJo2tlJ2h6hKexFUYLc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.130.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196704
Signature Algorithm: sha256WithRSAEncryption
3d:04:e0:0f:77:d5:bd:98:2f:71:d2:b6:81:56:de:13:6d:82:
ca:08:0c:e4:af:61:df:de:ad:e8:3d:03:97:c5:55:5f:58:9c:
72:02:89:7a:79:bc:74:1a:9c:e0:56:28:a8:c7:34:dd:e2:50:
5e:2f:6d:12:16:3e:24:b8:ee:e6:57:07:d4:0d:32:56:dc:f0:
59:d3:c0:43:52:5a:da:d6:a2:86:07:5b:fd:4c:a4:89:0d:6c:
d2:57:d9:ab:05:4d:56:80:62:37:1f:f1:c3:22:0a:2e:70:91:
60:32:59:4b:b9:00:93:fc:87:4f:cd:84:69:e3:c8:c8:14:19:
62:b9:3c:f2:34:ee:99:7d:a6:de:f8:5f:f9:95:75:16:88:79:
0f:67:50:99:d2:e8:30:a9:67:27:de:90:65:18:f5:b7:11:3c:
f4:00:7b:d9:5f:68:6a:35:24:23:c7:30:56:ed:a3:6d:3f:33:
a6:d6:74:88:84:41:4a:d0:8e:21:fa:e0:fc:69:e0:c8:63:a6:
f5:65:b1:63:47:b3:89:73:5d:5e:cd:3e:e3:a4:fd:69:eb:0b:
b5:eb:ca:26:ab:be:b3:01:ce:bc:db:3d:80:81:3a:cb:b3:45:
1b:1f:62:d2:5a:9e:c5:85:25:82:ed:7c:e7:93:bc:00:ba:00:
58:bd:d2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:15 2025 by rpki-client