Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GDbyZsJRa7973u_i4ezh0O_PgQY.cer
File: GDbyZsJRa7973u_i4ezh0O_PgQY.cer (raw, json)
Hash identifier: UVd1aqy/w2y6AmxESBFIW5U/XIlA+wwjfrqPxWUqcjY=
Subject key identifier: 18:36:F2:66:C2:51:6B:BF:7B:DE:EF:E2:E1:EC:E1:D0:EF:CF:81:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B18CD5F710
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/cfbe5a-b074-45d4-b429-f31fb54f6a92/1/GDbyZsJRa7973u_i4ezh0O_PgQY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/cfbe5a-b074-45d4-b429-f31fb54f6a92/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 11 May 2022 10:07:37 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 199168
IP: 91.105.204.0/22
IP: 2a02:c780::/29
IP: 2a0a:1480::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 762572044048 (0xb18cd5f710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 11 10:07:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1836f266c2516bbf7bdeefe2e1ece1d0efcf8106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:c2:3a:16:ff:23:67:a3:58:68:7b:42:b3:
21:32:73:92:66:9e:88:dc:c6:d5:53:c0:ba:b3:04:
f6:a6:0f:5e:ac:3d:8b:47:63:46:70:b6:91:9f:5e:
71:70:3c:92:bd:80:5c:e5:7a:e7:79:72:c6:6a:e7:
3d:d8:b1:f6:ff:65:69:3d:7a:d4:5c:7f:5d:70:f6:
11:e4:ef:a4:4c:fd:c4:f0:9f:58:cd:f5:1b:56:b0:
a2:69:42:a6:82:32:f6:b6:44:fd:86:3a:df:14:2d:
3a:54:f0:bc:17:7e:3c:95:86:5f:69:cb:3a:f9:37:
f0:02:a4:f0:3b:b4:41:f5:c9:7d:4b:b9:e3:93:28:
ab:7e:e3:5c:b3:1c:e3:75:2b:dd:c7:68:f8:93:99:
a1:46:5a:04:a7:f0:8a:78:a7:de:71:80:cc:eb:9d:
db:2b:b9:71:e1:9c:90:3d:ab:72:04:48:a0:d9:e3:
5c:a6:d4:21:93:b0:bb:e9:6f:82:37:25:8e:c0:0f:
10:3d:ca:61:05:55:cb:e7:c5:c1:be:d8:9a:22:9e:
51:10:9e:44:36:a1:fd:0c:3b:76:7b:4a:f2:00:58:
89:82:eb:c2:f8:0a:1c:04:07:55:63:73:1f:1d:e3:
38:9a:6c:7d:61:bd:9b:0a:5d:ce:fe:e7:e4:72:22:
25:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:36:F2:66:C2:51:6B:BF:7B:DE:EF:E2:E1:EC:E1:D0:EF:CF:81:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cfbe5a-b074-45d4-b429-f31fb54f6a92/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cfbe5a-b074-45d4-b429-f31fb54f6a92/1/GDbyZsJRa7973u_i4ezh0O_PgQY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.105.204.0/22
IPv6:
2a02:c780::/29
2a0a:1480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199168
Signature Algorithm: sha256WithRSAEncryption
60:99:54:e1:8f:38:6a:0a:db:f8:20:a0:80:3c:a4:9b:57:1e:
2d:f0:fe:f4:f7:14:08:d5:18:15:c7:92:d1:cd:55:f9:5c:ff:
c3:e4:ca:a0:82:53:04:5a:d0:fa:e1:72:c4:52:7d:5e:53:7f:
3a:44:be:d9:e3:ad:4f:c4:e5:fe:40:22:1f:36:55:42:56:e5:
78:0b:59:c4:a5:a3:cd:c3:5e:2a:7e:ca:8a:4e:69:b2:d1:57:
40:3a:54:70:8b:0d:07:97:bc:ab:2f:c9:2b:04:76:32:0b:b8:
de:12:48:6d:3c:95:8b:d7:bc:d4:80:10:06:59:de:62:40:d8:
5b:3a:8e:e4:2a:68:1a:ed:65:21:8b:a5:ec:7f:09:32:ad:ef:
e7:81:b7:6b:66:d9:fd:c5:f4:66:26:63:02:1c:a2:53:26:99:
2d:22:e5:93:2f:1b:94:f1:fd:0e:d0:ef:64:9e:a2:9e:1a:3f:
01:6d:9b:32:ae:55:16:ac:d9:b9:54:b7:25:4d:ec:47:68:49:
fc:fc:58:7a:03:0f:aa:f2:46:f8:fb:56:66:4f:8b:e6:06:b3:
c5:cd:6a:73:2e:ba:01:09:d0:00:d6:74:13:b7:b3:21:56:40:
87:3c:31:f4:c2:96:e2:c9:cc:17:40:80:6e:c2:a6:cb:84:65:
b9:46:26:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:48 2024 by rpki-client on console-fra.rpki-client.org