Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jm91-OR32pnre1urhaL8P0YDkdg.cer
File: Jm91-OR32pnre1urhaL8P0YDkdg.cer (raw, json)
Hash identifier: DzjdJGRhvLv1SLcwW84aX7QtklSzdUOaq7112DqpfgA=
Subject key identifier: 26:6F:75:F8:E4:77:DA:99:EB:7B:5B:AB:85:A2:FC:3F:46:03:91:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A307132A94
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/e64d55-6ea5-48f9-bf2d-31d5b4df9587/1/Jm91-OR32pnre1urhaL8P0YDkdg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/e64d55-6ea5-48f9-bf2d-31d5b4df9587/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:01:38 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 202190
IP: 185.63.252.0/22
IP: 2a04:f780::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 700198365844 (0xa307132a94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:01:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=266f75f8e477da99eb7b5bab85a2fc3f460391d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:99:ff:48:cf:c3:f7:54:65:f8:62:43:54:
52:ce:82:4f:33:9e:02:18:48:e5:40:40:d3:7b:62:
ce:34:07:87:8b:1f:05:ab:d1:f2:96:8e:0c:5f:eb:
7c:0c:01:f1:5a:4e:19:b9:65:be:08:ba:a6:f2:e2:
5f:63:cc:f8:f0:7d:16:25:1f:85:65:27:fc:61:73:
fa:3e:17:70:ed:e4:e1:79:c0:a5:dd:d2:36:43:df:
8d:59:9f:f1:a4:8d:cf:6e:29:f4:a5:34:bc:d5:5b:
54:6c:52:1e:f7:bd:bb:f4:0c:83:8a:c4:5c:0e:f4:
d7:3d:00:63:15:bf:dc:61:2f:4c:37:aa:33:63:6a:
f0:86:9a:68:a0:be:56:da:00:92:8b:a3:4c:91:7e:
a9:8c:72:31:f5:08:23:47:30:93:34:98:1e:7e:49:
cd:0c:70:0e:7b:d2:98:5c:de:ab:b5:d4:b8:de:26:
15:eb:7d:29:95:4d:87:8b:27:16:7d:0d:73:10:39:
7a:56:dc:9d:70:b9:f6:8b:79:14:ad:6c:20:4d:da:
75:53:44:53:95:97:69:7f:25:b3:90:72:5a:92:2f:
8a:e6:04:1b:2a:eb:44:94:eb:e7:f8:2a:77:de:ac:
ae:56:7c:ba:b2:1b:62:aa:e2:9e:6c:3c:f6:bc:ff:
c6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6F:75:F8:E4:77:DA:99:EB:7B:5B:AB:85:A2:FC:3F:46:03:91:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e64d55-6ea5-48f9-bf2d-31d5b4df9587/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e64d55-6ea5-48f9-bf2d-31d5b4df9587/1/Jm91-OR32pnre1urhaL8P0YDkdg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.252.0/22
IPv6:
2a04:f780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202190
Signature Algorithm: sha256WithRSAEncryption
78:ef:64:b6:47:de:71:d4:d0:7f:32:06:20:0c:69:83:8c:a6:
e2:4b:36:de:71:b1:aa:c4:e9:c7:b3:8d:26:89:6f:94:e7:3a:
0a:24:56:c1:5b:8c:86:27:13:ca:22:dc:e2:db:19:d8:33:2d:
bd:ca:16:3d:21:b0:10:d7:a3:ac:06:5e:36:e4:f8:65:94:70:
ca:96:67:96:9b:07:85:f8:21:2b:c5:4e:4e:b0:e1:c3:d6:4e:
57:13:31:ea:a2:43:e1:ce:9d:15:ac:4a:40:78:3b:f4:80:e5:
d2:79:9d:93:e4:f4:7d:ea:ff:44:f3:d0:cf:f4:71:cc:d9:80:
0d:7a:30:32:ec:3c:7d:74:0c:7f:af:64:c1:4c:de:f8:a9:f9:
e0:97:6b:0c:a8:9c:8f:89:a6:33:a9:70:8d:a7:c5:4c:0f:c2:
d0:c9:6d:da:35:85:1e:90:a5:4b:9b:a6:d3:a2:09:36:2b:6b:
0d:66:a9:01:cb:7c:77:f1:48:89:e3:8a:30:12:71:b6:48:67:
6d:8c:1e:c7:7f:3a:d2:93:02:95:0a:a1:9b:21:0a:b7:47:9c:
56:35:94:d2:08:ab:41:8b:1a:d2:aa:73:0a:80:3e:0e:da:4a:
20:24:22:c4:9e:6f:d3:24:f6:3e:43:b4:ab:96:41:98:2b:9a:
f5:23:ae:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:40 2024 by rpki-client on console-fra.rpki-client.org