Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Im53EL41gupsdgsAn2cB8tJ1eC4.cer
File: Im53EL41gupsdgsAn2cB8tJ1eC4.cer (raw, json)
Hash identifier: k6/pChHV0wPoEpRCeVADvp/4U3HKNIlonCHE+i9FQLY=
Subject key identifier: 22:6E:77:10:BE:35:82:EA:6C:76:0B:00:9F:67:01:F2:D2:75:78:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AE1063BD0B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/9b928a-999b-455c-a04c-2645b0a831cc/1/Im53EL41gupsdgsAn2cB8tJ1eC4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/9b928a-999b-455c-a04c-2645b0a831cc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 02 Mar 2022 13:35:17 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 56571
IP: 176.10.64.0/20
IP: 185.191.40.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 747599281419 (0xae1063bd0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 2 13:35:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=226e7710be3582ea6c760b009f6701f2d275782e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a7:60:74:b9:6a:ab:b9:6e:b4:70:1e:0f:60:
24:70:56:9a:58:d0:20:67:15:05:34:cb:3a:69:f1:
09:5b:d4:fd:d2:c4:78:37:92:4f:04:b1:59:72:87:
b3:e7:0b:5f:d8:31:e8:7e:6b:38:f9:01:f8:28:d7:
68:f5:d2:4f:50:67:3f:99:8b:ce:96:fe:4d:79:a6:
2b:18:28:d2:65:0d:07:9f:45:66:41:ac:65:9b:4b:
3a:0b:d7:cc:5d:de:27:82:57:f1:78:24:a8:32:d7:
4f:d6:42:ff:8b:6e:94:af:ca:b5:cc:d2:7f:31:67:
53:dc:86:d3:05:94:d7:88:c6:21:e6:63:b0:84:c9:
d3:e9:be:1d:28:f0:f6:40:6f:8a:85:a8:79:0b:3d:
22:05:3a:99:b1:42:ce:1d:26:e8:2e:55:79:61:5a:
12:97:e9:36:dc:5b:a7:ef:9e:13:dc:84:9f:3a:be:
06:eb:02:83:0e:73:f2:b4:21:6c:e9:aa:47:95:24:
1b:ae:94:95:a6:66:7d:19:5b:9d:1e:9c:71:45:a2:
97:c4:32:7f:40:29:0f:6d:30:cd:c6:53:dd:1f:5c:
16:8c:9d:db:8f:d4:78:b2:2d:99:c9:f8:45:c4:71:
eb:e3:11:3f:c7:b0:0e:53:1d:82:e0:58:57:2a:fa:
ef:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6E:77:10:BE:35:82:EA:6C:76:0B:00:9F:67:01:F2:D2:75:78:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9b928a-999b-455c-a04c-2645b0a831cc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9b928a-999b-455c-a04c-2645b0a831cc/1/Im53EL41gupsdgsAn2cB8tJ1eC4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.10.64.0/20
185.191.40.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56571
Signature Algorithm: sha256WithRSAEncryption
53:be:d9:97:09:c3:ca:03:dd:a7:ba:2a:98:95:ea:39:dd:a9:
63:61:2c:8a:bb:03:43:9f:b2:b5:42:40:22:55:39:d8:25:ae:
56:bd:73:ee:2a:38:ae:74:e8:fe:6e:04:3c:10:26:a0:e7:22:
a7:8f:94:db:d6:5d:c1:c7:8c:36:3e:7c:a6:5f:e9:9a:70:ec:
22:2c:51:bc:46:26:91:c4:5f:24:f8:f3:33:e5:32:b2:a7:b5:
08:98:df:73:b9:a4:54:b0:f9:ea:68:33:e8:78:fc:8d:ce:5f:
5a:f2:1b:42:d1:b8:9b:b6:8b:21:21:b8:0e:f1:54:bb:d4:7b:
e8:aa:0c:03:f1:2d:ae:bd:51:ee:2e:46:2d:34:f9:87:83:6e:
74:66:3c:48:2b:95:d9:8a:1e:ec:f2:85:bd:19:f4:bd:9f:32:
14:8f:05:b3:2b:27:bc:48:b7:48:cf:28:e0:01:b9:7b:3d:2d:
9b:b0:47:44:2f:50:a2:80:71:9d:26:57:12:e5:ff:fb:03:09:
78:8b:05:72:05:cb:44:9a:b2:f3:60:ec:94:93:fc:5a:2a:b1:
ea:de:98:a7:95:5e:8e:fc:9a:51:98:fc:4c:68:7a:f3:8c:d5:
8a:83:86:d2:f6:de:32:0c:ee:5d:67:24:2e:e9:a2:bd:c3:b3:
a9:eb:4c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-fra.rpki-client.org