Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JjvH6WJzuhaHPVydczU8ofIpAeo.cer
File: JjvH6WJzuhaHPVydczU8ofIpAeo.cer (raw, json)
Hash identifier: CE+mSNqW0dAkZUKzt3GCnyrQjDxLw8nKrHMiSjsEm24=
Subject key identifier: 26:3B:C7:E9:62:73:BA:16:87:3D:5C:9D:73:35:3C:A1:F2:29:01:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A54FCDF913
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/5e5d8e-13f1-47dc-845c-cbedd7318ff7/1/JjvH6WJzuhaHPVydczU8ofIpAeo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/5e5d8e-13f1-47dc-845c-cbedd7318ff7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:00:17 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 35543
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 710008502547 (0xa54fcdf913)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:00:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=263bc7e96273ba16873d5c9d73353ca1f22901ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:04:50:f6:c9:57:b5:f1:e3:dc:18:15:27:dc:
37:a5:db:29:bb:bb:7a:be:79:7a:d6:86:0b:67:39:
ab:42:d2:12:d8:85:f1:d3:b1:a5:4a:32:c1:25:e7:
30:77:f3:97:be:b2:fc:29:a7:68:0b:f4:b4:0f:66:
07:d2:20:ac:33:71:13:42:11:3a:27:60:e1:16:48:
42:35:62:6a:3d:fd:f7:bf:63:32:7c:ef:7e:13:69:
40:0a:28:59:5e:47:84:30:29:56:72:c6:10:ad:8d:
9d:ec:cf:46:c4:58:f6:ea:24:e8:2c:e7:2d:56:65:
ae:ad:1c:15:17:7d:f3:d9:c6:61:8d:1e:a9:50:c8:
5b:ab:5d:4f:7f:e0:2d:35:01:f6:51:38:50:e2:fe:
43:67:01:01:9b:d9:ce:80:a9:6a:ea:0b:96:8e:f8:
be:af:9b:10:3e:f3:7b:24:29:9f:a0:46:c7:61:e0:
0e:fc:8c:60:88:cc:81:f2:5e:d3:9c:f6:d2:35:4c:
2e:7f:2d:06:9a:c1:11:be:8d:8f:e8:80:b5:2c:a2:
3b:85:58:55:3b:f1:c4:46:45:9f:11:1c:0e:26:24:
b5:47:59:16:25:07:f9:1d:c4:e2:6c:39:3a:c3:ed:
af:7a:ae:77:71:ba:94:fe:8c:b4:e8:44:85:2b:58:
1c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3B:C7:E9:62:73:BA:16:87:3D:5C:9D:73:35:3C:A1:F2:29:01:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5e5d8e-13f1-47dc-845c-cbedd7318ff7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5e5d8e-13f1-47dc-845c-cbedd7318ff7/1/JjvH6WJzuhaHPVydczU8ofIpAeo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35543
Signature Algorithm: sha256WithRSAEncryption
9c:13:94:a8:3c:62:db:63:ae:8a:b0:d7:ad:8e:75:67:d0:58:
05:32:ff:57:29:3c:92:20:b3:e3:d8:c4:0a:09:b8:55:7c:66:
37:85:f2:01:fb:62:e6:a8:47:a5:65:36:09:ae:df:87:34:02:
b0:17:f6:30:6d:b1:25:67:10:09:86:c3:9b:0f:16:1b:cd:f0:
ac:68:0e:ec:ba:80:b8:f3:af:55:2c:fd:d5:9a:4b:67:1f:8e:
bc:83:66:27:4e:58:9b:a2:61:10:e3:36:78:0f:ae:05:8e:0e:
6f:39:85:1a:74:59:d7:8b:2c:11:ac:38:72:7a:f9:dc:83:de:
dd:88:64:60:c4:73:58:ff:5e:19:9f:25:a3:81:ea:09:32:56:
2a:19:69:43:18:4b:7a:1e:b7:ec:52:eb:b9:84:7a:75:23:1d:
92:58:45:38:c8:ec:c1:7c:09:9b:2a:86:2b:1c:b4:17:4e:1e:
07:32:ae:28:7c:ff:7a:75:c9:24:d0:7c:e5:ef:8b:00:1f:f2:
e8:e1:b5:33:5f:ba:15:df:79:5c:de:aa:03:fd:1f:64:3c:52:
2e:ab:7b:9a:8c:d3:0f:62:71:95:8b:d0:e5:a3:14:75:da:37:
9b:5e:45:0c:53:38:25:9d:1f:b1:53:61:84:7d:10:9b:15:34:
94:3e:35:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:39 2024 by rpki-client on console-fra.rpki-client.org