Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CUoDHux9kfbZVJ3sODH3jXEU620.cer
File: CUoDHux9kfbZVJ3sODH3jXEU620.cer (raw, json)
Hash identifier: GuNkl7FXFbQbsQNm+CtFL+JkBquZZ6iB/V4BK4UbMrc=
Subject key identifier: 09:4A:03:1E:EC:7D:91:F6:D9:54:9D:EC:38:31:F7:8D:71:14:EB:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A448E66A4B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/47a087-55df-4172-a338-78c84622c0ec/1/CUoDHux9kfbZVJ3sODH3jXEU620.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/47a087-55df-4172-a338-78c84622c0ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:03:26 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 12459
IP: 185.119.88.0/22
IP: 2a06:97c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 705597696587 (0xa448e66a4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:03:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=094a031eec7d91f6d9549dec3831f78d7114eb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:59:fd:65:3d:c2:35:b5:cb:84:bd:ec:60:
f9:9e:0e:20:c6:b7:35:53:2b:74:60:f1:2b:d2:da:
35:85:09:2d:b0:24:47:6a:74:db:08:07:0e:ee:bd:
7c:9a:de:e9:e5:19:7d:ca:87:65:fc:b4:8b:69:c2:
d0:78:34:5b:0b:6f:c4:68:ad:37:c5:a2:cd:fd:80:
f2:b5:66:ad:63:ba:45:e3:8a:96:6c:b7:f6:c1:5f:
a2:58:a6:8f:33:9b:c0:2c:a9:6d:bf:46:d2:f9:ef:
a1:54:dc:17:f7:03:2c:92:0f:a1:6d:c3:a1:73:31:
e6:71:45:6c:24:c7:14:06:65:d5:4f:02:c4:80:be:
61:74:3d:24:6f:2d:1f:69:4b:08:e6:22:c6:3d:21:
2d:41:8d:f9:91:63:26:b7:4a:58:4c:e7:c6:0b:2a:
08:76:0b:d4:1e:1c:ca:bb:3f:72:a4:b8:4c:ed:f0:
eb:2c:22:e3:bd:41:62:3d:98:51:2d:e0:3b:5a:c8:
bc:ec:87:d4:bc:e0:8b:af:b8:bc:62:ce:a3:8a:03:
6c:bb:14:45:17:e1:8e:50:9f:a9:32:b6:cf:a2:f4:
82:0b:42:32:84:e7:0b:b3:65:ec:64:b4:7e:5d:8d:
fa:84:1f:e9:a6:0c:47:51:5a:73:a1:ff:70:ee:bd:
ea:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4A:03:1E:EC:7D:91:F6:D9:54:9D:EC:38:31:F7:8D:71:14:EB:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/47a087-55df-4172-a338-78c84622c0ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/47a087-55df-4172-a338-78c84622c0ec/1/CUoDHux9kfbZVJ3sODH3jXEU620.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.88.0/22
IPv6:
2a06:97c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12459
Signature Algorithm: sha256WithRSAEncryption
0c:4d:d8:04:dd:91:fd:aa:ab:8d:b2:fe:17:51:ef:de:c7:48:
2b:bb:cf:f8:98:dd:97:2b:d1:3e:ad:a3:f6:ea:bb:cc:98:36:
21:9c:e2:50:6e:a0:de:d5:3a:d6:7d:f7:01:5e:75:e7:f2:7e:
b7:9b:84:a2:2a:8b:5a:22:3b:49:68:1e:33:f0:60:0f:fa:4c:
2a:eb:84:04:bb:68:e2:20:fc:d1:7b:01:f7:d4:fa:9e:b5:bf:
35:77:32:6a:4a:30:59:c9:fb:a1:0b:6e:3d:50:aa:4d:86:b6:
b8:a3:fc:c0:31:2a:fc:07:31:ba:95:e2:17:0d:8c:e0:ec:df:
de:a1:7c:6a:2f:77:ba:b8:5b:53:00:36:02:1f:da:fc:8c:9b:
0a:f2:75:65:7a:88:fd:80:73:9f:f4:14:93:af:58:f6:16:21:
b5:de:e1:9a:22:ba:07:74:7b:73:1a:c7:1c:01:79:50:c5:ed:
4c:2a:b5:41:07:0f:5d:e9:56:f5:43:38:14:a5:41:77:bb:c6:
75:9b:a0:37:3c:58:4f:95:25:77:4e:fa:59:a7:a2:9f:6c:df:
ec:e5:98:78:72:d3:55:50:86:dd:18:88:aa:e6:e2:d7:c0:f1:
45:eb:35:3f:17:f7:10:7e:81:95:65:22:ea:4e:18:53:69:63:
d8:63:ed:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:54 2024 by rpki-client on console-fra.rpki-client.org