Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KkaicpYJiIMfwSsJCXcSbHbsszY.cer
File: KkaicpYJiIMfwSsJCXcSbHbsszY.cer (raw, json)
Hash identifier: /nZPq1S7rusBhiAUAoWb1Dk8USN9ZQe3Q8FHNgPzuJw=
Subject key identifier: 2A:46:A2:72:96:09:88:83:1F:C1:2B:09:09:77:12:6C:76:EC:B3:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A71079235F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c1807-c925-476c-a57a-bdd23b4e7da3/1/KkaicpYJiIMfwSsJCXcSbHbsszY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c1807-c925-476c-a57a-bdd23b4e7da3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:55:41 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 212897
IP: 185.251.14.0/24
IP: 2a10:a7c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 717535912799 (0xa71079235f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:55:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a46a272960988831fc12b090977126c76ecb336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:69:9e:63:f5:11:49:70:e2:08:1a:f0:5a:
e6:48:d3:41:e5:78:a9:c0:ce:3c:e8:f0:99:5d:9a:
a9:39:ad:0c:0f:a9:31:44:86:99:9d:25:0d:9f:31:
fc:12:5d:fe:f2:1b:28:35:a9:ba:ff:7d:62:0f:08:
65:8f:3b:cd:65:86:2b:b4:97:82:af:3e:ea:5c:89:
7b:5f:a5:8f:b1:66:c8:9d:b8:4d:54:2c:b5:31:41:
c6:63:a8:67:3d:c4:64:90:0f:e7:f5:0a:72:d9:91:
48:63:3a:5a:f8:0c:13:93:20:35:2b:8b:a3:58:61:
75:1a:cf:63:11:47:83:db:b9:57:85:b1:37:c4:9a:
5c:45:3f:26:e3:98:13:cd:25:03:5f:97:8f:f1:85:
10:0b:36:5b:d3:87:83:06:cb:bf:77:7c:c2:09:c8:
11:bc:6e:46:0b:7e:d4:6a:8b:5a:38:92:91:64:f4:
ce:3b:43:96:c8:31:3f:63:33:02:e7:24:26:1c:97:
a2:f6:ba:2f:f6:68:ee:bb:40:8d:ad:1a:04:91:ba:
85:ff:b0:8c:37:ed:21:fb:b9:ce:e4:5f:07:ba:53:
5b:14:6a:55:70:b1:77:96:1e:e2:4d:e3:fa:6f:a6:
ca:2a:12:da:1d:a4:d0:ae:c1:82:da:d7:8b:d0:84:
cb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:46:A2:72:96:09:88:83:1F:C1:2B:09:09:77:12:6C:76:EC:B3:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c1807-c925-476c-a57a-bdd23b4e7da3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c1807-c925-476c-a57a-bdd23b4e7da3/1/KkaicpYJiIMfwSsJCXcSbHbsszY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.14.0/24
IPv6:
2a10:a7c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212897
Signature Algorithm: sha256WithRSAEncryption
16:9b:54:fa:3e:e8:f3:cb:b9:ae:3a:78:d1:60:d4:aa:0e:80:
3d:19:ff:a2:aa:3e:56:fc:3b:51:3c:d6:8e:22:9a:db:0f:3a:
6e:de:56:5a:98:3f:fd:f2:66:be:5d:2f:af:59:b9:72:35:4c:
34:8a:b4:88:f2:e8:5a:34:12:04:18:7b:28:e6:32:3f:3d:f9:
9d:2a:e4:5a:24:7c:27:4f:49:05:12:a5:31:80:a8:48:17:0d:
f5:19:db:54:67:c7:50:31:15:9e:2d:46:5f:a5:04:a4:19:4b:
c4:3b:e7:ac:bf:3b:e5:f4:af:17:c5:23:23:e2:3a:ab:b2:07:
55:1e:0c:c5:72:52:61:45:1f:5d:66:ac:19:4b:24:63:56:4d:
ae:88:ae:7f:7c:29:40:ae:52:60:53:3a:51:e4:7b:9d:65:60:
28:11:a7:d0:7d:b9:b1:e3:4b:2d:bd:5e:17:46:42:1c:e9:34:
fb:5d:fc:8f:5d:a4:4a:a1:d4:71:3f:d2:94:19:b5:c0:b5:fb:
0e:45:73:09:55:d5:a1:37:40:13:1a:85:89:64:b0:19:a5:5e:
76:31:a6:a5:8e:69:b5:da:ca:e6:59:33:4c:bd:4a:33:52:9f:
52:b0:b6:76:37:d6:aa:8c:9d:9f:bf:70:55:b6:0b:5a:4a:42:
f5:4d:ed:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:53 2024 by rpki-client on console-fra.rpki-client.org