Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H0G6ihzv24lIETcBv9HQdt6mdn0.cer
File: H0G6ihzv24lIETcBv9HQdt6mdn0.cer (raw, json)
Hash identifier: Ma1rV1I+CqC8ipF1P5IvqzXZiNaxABAfTOivz/WBvgo=
Subject key identifier: 1F:41:BA:8A:1C:EF:DB:89:48:11:37:01:BF:D1:D0:76:DE:A6:76:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AF1F9E47A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3cd28-ca3b-45ae-8135-387e7a5b150a/1/H0G6ihzv24lIETcBv9HQdt6mdn0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3cd28-ca3b-45ae-8135-387e7a5b150a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 25 Mar 2022 10:51:09 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 204464
IP: 185.248.96.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 752149743528 (0xaf1f9e47a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 25 10:51:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f41ba8a1cefdb8948113701bfd1d076dea6767d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4d:b9:29:00:7e:b8:1a:5d:0e:fb:75:9e:e9:
84:0e:90:4e:37:47:33:d8:ec:9d:4f:ce:46:f6:f2:
13:ed:ab:13:aa:ec:f4:42:8c:16:90:ef:dd:e5:27:
b4:80:f3:a8:9f:61:33:1c:35:f3:f6:80:8c:a0:80:
f1:88:14:14:f6:c7:bf:1a:91:4d:b5:35:8e:4a:79:
f0:54:2f:23:9a:e2:46:02:dd:df:08:e1:26:c7:58:
7b:6f:ec:53:20:19:28:ab:bb:80:5e:2f:9c:b9:0d:
e9:32:51:e5:9f:39:3c:85:f0:70:84:9c:43:55:77:
15:38:98:21:ba:ff:d2:7e:3e:42:d6:c3:9d:d0:f9:
1a:08:f7:8a:50:d7:2c:af:07:ff:b2:f8:eb:93:ba:
1b:a6:66:9c:43:12:91:93:be:61:0d:23:8b:3d:42:
c8:df:46:7b:f4:06:c0:8f:66:0d:ad:8c:e9:95:0d:
86:cb:a9:86:50:4a:43:33:67:b0:e5:40:0c:79:f7:
be:a3:32:1d:0e:62:03:25:0c:ba:19:ed:b3:38:3e:
52:cd:d6:a6:b8:e0:61:c2:a4:02:56:18:38:37:68:
53:5b:53:e9:21:c1:eb:89:64:19:97:a7:6a:ec:10:
95:56:fc:5a:22:a2:01:2b:43:71:3e:e9:64:2b:97:
61:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:41:BA:8A:1C:EF:DB:89:48:11:37:01:BF:D1:D0:76:DE:A6:76:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3cd28-ca3b-45ae-8135-387e7a5b150a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3cd28-ca3b-45ae-8135-387e7a5b150a/1/H0G6ihzv24lIETcBv9HQdt6mdn0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.96.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204464
Signature Algorithm: sha256WithRSAEncryption
28:15:24:ba:d2:e7:45:7c:5f:50:83:7f:25:56:59:37:1b:c1:
1c:a9:de:a4:f5:80:e8:92:25:00:0b:23:bf:2b:9d:03:27:44:
84:d3:41:ca:d7:2a:1f:e1:2a:4f:1e:65:53:e9:d7:d2:6f:52:
bd:ac:c5:d2:27:da:1f:e4:cf:2d:f4:8f:0c:9c:b2:2f:d6:4e:
b8:fb:0e:da:e1:82:8f:97:33:f8:58:bc:af:ab:3c:a3:3f:a2:
48:a2:50:6e:56:70:6f:9a:da:4c:be:31:2b:e1:3f:f6:ba:60:
19:08:98:05:b6:86:21:4e:43:e4:a3:ac:68:d1:d0:dc:97:d3:
ec:d8:c3:19:44:75:3a:61:cd:d3:b7:00:e8:6b:00:a1:5b:9d:
30:b2:5e:f7:60:07:3a:5c:39:97:ef:53:40:45:45:40:a4:43:
71:a2:32:17:dd:2a:fa:5a:31:84:f0:b1:4e:6e:e1:1f:01:7d:
3c:1f:3a:ea:6f:a6:22:ed:0d:d1:53:1c:b6:fe:ef:29:ef:49:
8e:b9:ae:c0:51:b2:77:ad:9f:12:44:28:fb:72:54:62:0f:e6:
2d:8e:bd:4c:e4:66:93:f0:ab:17:53:36:bc:e0:cb:36:c4:f0:
bf:87:9a:9a:ff:03:63:d5:07:e8:6a:5e:fe:6c:72:20:f3:86:
c2:a3:23:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:29:08 2024 by rpki-client on console-ams.rpki-client.org