Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JTdBoxLFeinVHeA6agbfY_ko4lE.cer
File: JTdBoxLFeinVHeA6agbfY_ko4lE.cer (raw, json)
Hash identifier: GLbLZ4JBooauAuIZMKdl07UHtJAjSY6NqQ6ZvStUGVs=
Subject key identifier: 25:37:41:A3:12:C5:7A:29:D5:1D:E0:3A:6A:06:DF:63:F9:28:E2:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9ADB6E3E59
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/2839a4-f8bc-4e93-a8f8-4bcd94c73a18/1/JTdBoxLFeinVHeA6agbfY_ko4lE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/2839a4-f8bc-4e93-a8f8-4bcd94c73a18/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:59:20 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 56732
IP: 31.193.224.0/21
IP: 185.101.224.0/22
IP: 194.116.147.0/24
IP: 2a00:6080::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665106398809 (0x9adb6e3e59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:59:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=253741a312c57a29d51de03a6a06df63f928e251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f7:a1:09:b7:ee:e1:95:4b:fe:eb:93:55:65:
29:c5:9f:3d:10:ac:6d:c7:4e:52:a2:78:ee:48:98:
6a:73:3e:fb:d1:fd:bb:95:bb:cc:d2:c2:b6:1e:d1:
5f:51:1f:e5:cd:87:b9:ea:bb:ab:4f:86:a5:84:de:
ed:2b:11:ef:e6:43:b8:c0:81:da:41:b2:4d:7e:92:
a0:aa:9a:86:57:01:7d:38:85:70:ef:b3:a8:ae:0a:
c8:ac:2e:df:ca:89:46:f0:12:a1:c3:18:e9:a6:f6:
dd:76:96:2b:11:f8:7d:a4:01:9b:ca:2b:20:cf:bf:
fd:5f:1b:e8:bf:5e:7d:57:db:a7:54:b7:85:ef:3e:
58:9f:54:68:9b:13:99:29:36:9e:9f:ac:ff:73:de:
91:e0:ad:5d:32:69:1c:d8:02:8d:ed:22:b6:34:56:
cb:36:a1:23:3d:04:67:af:dc:bd:9a:7e:90:ed:14:
dd:ca:7f:e1:76:43:56:fe:08:9d:e6:da:10:bc:1a:
f7:7c:8d:7c:3e:86:62:41:65:f9:d0:ec:2a:a1:d1:
c9:b2:cf:75:8a:4f:be:cf:fe:62:45:a6:f9:00:6f:
c8:de:a6:dc:34:a0:64:17:65:4c:58:d1:63:a7:94:
1d:18:53:6b:8f:c2:ac:32:ee:cb:62:3b:86:17:58:
c9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:37:41:A3:12:C5:7A:29:D5:1D:E0:3A:6A:06:DF:63:F9:28:E2:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2839a4-f8bc-4e93-a8f8-4bcd94c73a18/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2839a4-f8bc-4e93-a8f8-4bcd94c73a18/1/JTdBoxLFeinVHeA6agbfY_ko4lE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.224.0/21
185.101.224.0/22
194.116.147.0/24
IPv6:
2a00:6080::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56732
Signature Algorithm: sha256WithRSAEncryption
8e:bb:cd:1a:70:37:05:0b:f1:e6:d6:ba:12:f7:68:5a:48:40:
ff:87:c1:7e:47:11:8d:66:55:ab:db:d4:af:2e:3e:60:4b:70:
53:db:ba:73:dd:aa:6b:9a:06:8f:dd:32:c0:d6:37:13:cb:93:
a6:0c:8e:08:a3:d8:d5:4c:0e:dc:d7:4f:5d:19:ec:0c:78:9e:
df:fa:e7:f0:2a:6d:b9:6d:09:8e:b2:73:81:15:b9:a7:59:80:
16:49:1e:bc:32:bd:c2:7a:9e:44:34:53:df:12:db:22:1a:c4:
4b:d3:2a:b2:05:c1:63:9e:c3:fc:b2:05:af:35:9d:da:28:cb:
3e:78:ce:2b:a6:c3:1e:60:21:9c:cd:ba:5d:2a:fc:ae:58:c6:
dc:b8:04:02:02:57:f9:ad:6e:cf:f3:40:c5:4e:70:9d:31:d2:
2a:31:7d:56:9c:3b:f2:6b:36:4c:59:c0:dc:62:80:56:08:62:
f7:d6:63:cd:80:db:79:20:6e:0c:b3:65:92:3c:81:ae:46:19:
65:15:a3:d5:51:df:bb:12:68:21:38:b5:e9:d3:bf:70:d2:68:
bf:75:cd:77:c2:14:ac:d9:b0:08:d6:6f:84:2e:05:31:85:1d:
a3:22:85:72:9d:a6:30:fe:d4:45:9b:c5:5b:83:7f:c5:9a:e0:
08:7b:02:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-fra.rpki-client.org