Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EcuWBNwvGuWeF4kvW76-EC9iqzM.cer
File: EcuWBNwvGuWeF4kvW76-EC9iqzM.cer (raw, json)
Hash identifier: 4859yvW2SeoB/8/wa6ed0IGnDjB37ZMAaBT0q3I/7Q0=
Subject key identifier: 11:CB:96:04:DC:2F:1A:E5:9E:17:89:2F:5B:BE:BE:10:2F:62:AB:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9F1B4D5688
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/bbb745-3ba0-4d95-b4b5-22b2587fda03/1/EcuWBNwvGuWeF4kvW76-EC9iqzM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/bbb745-3ba0-4d95-b4b5-22b2587fda03/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:56:38 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 34310
IP: 83.142.88.0/21
IP: 91.189.8.0/21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 683357853320 (0x9f1b4d5688)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:56:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11cb9604dc2f1ae59e17892f5bbebe102f62ab33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:be:d0:33:16:8d:c0:f6:e9:ce:56:0d:3f:
c2:bb:66:ad:62:01:6f:98:f7:08:32:58:a0:0b:a7:
05:58:49:d6:80:39:48:20:78:4d:d7:a3:29:af:70:
d5:e4:2d:0b:6e:41:1b:11:47:9e:ac:c5:05:94:76:
32:88:fc:6d:0b:79:e8:36:73:04:8b:91:36:bf:10:
9e:0d:37:54:bc:b8:6a:0f:54:84:a4:c2:df:81:01:
e2:e1:c6:9b:8e:8f:f7:1f:ce:43:c7:dc:02:4c:eb:
82:38:55:ef:7d:bb:c1:85:a6:1f:27:06:21:ba:3a:
17:04:e9:27:c8:70:bb:86:3b:00:27:f8:42:01:cc:
0c:ff:4f:5e:40:ad:a1:96:71:b4:c5:47:8e:48:91:
f1:3b:cd:8c:6e:58:67:e7:70:4b:92:d1:3b:30:70:
43:17:ba:c7:ef:df:00:ae:e0:07:35:71:58:1a:94:
c8:27:ce:9f:13:4d:60:2a:78:e4:b3:37:60:b3:f6:
98:4e:00:55:62:ee:ca:67:0e:cb:10:7e:86:64:27:
85:30:02:46:38:52:f7:a4:a9:2c:42:97:61:a6:5f:
b5:a3:b6:d5:81:14:3a:96:3a:e3:11:59:45:c8:d3:
2b:83:a3:d8:f0:70:e7:a8:74:60:d4:2f:dd:f1:43:
0d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CB:96:04:DC:2F:1A:E5:9E:17:89:2F:5B:BE:BE:10:2F:62:AB:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bbb745-3ba0-4d95-b4b5-22b2587fda03/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bbb745-3ba0-4d95-b4b5-22b2587fda03/1/EcuWBNwvGuWeF4kvW76-EC9iqzM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.88.0/21
91.189.8.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34310
Signature Algorithm: sha256WithRSAEncryption
41:03:1d:d5:d1:94:4f:32:ae:85:87:cb:e2:99:34:32:2a:74:
e2:51:4e:73:12:d7:b9:be:0d:02:10:48:50:5a:06:fb:13:2a:
40:b0:12:0c:c4:8e:8e:53:62:5d:18:93:fb:99:72:f2:ce:32:
98:11:5c:ba:e9:dc:d5:d7:2a:20:e2:94:c6:24:4b:d2:bb:f8:
f8:e9:cc:08:4d:1b:f2:b2:3a:bc:ad:76:b4:cd:a5:49:2a:52:
13:6b:0b:38:bb:4a:41:1d:5d:bd:50:41:7a:67:fe:99:00:2a:
78:02:96:96:bb:16:9b:ea:40:ed:80:b9:0e:ba:ba:f0:67:7b:
66:82:05:74:33:b3:cf:8f:a2:2b:f0:df:79:65:5b:db:aa:bc:
fa:2c:8f:3b:a6:94:df:78:8a:22:ae:0b:ea:61:1e:16:2c:b7:
14:9f:20:cd:b8:c4:05:0f:be:aa:83:b5:a4:cb:65:11:8a:80:
8c:fe:6a:03:93:f5:71:5b:fe:ef:34:25:ee:f4:d5:04:bb:fd:
db:cf:ea:c9:2f:a0:eb:5f:38:f1:73:0f:12:f0:fb:d7:b8:9a:
ca:78:d3:9b:4d:9c:0e:80:ef:5d:14:6b:e1:f5:73:ed:cb:8f:
58:fb:58:9d:8b:0a:ca:bd:d7:d4:f1:34:c6:3e:0b:fe:25:0c:
29:82:fb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:26 2024 by rpki-client on console-fra.rpki-client.org