Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LVBKx5aPfFmCvJUFky3BTpYLEEQ.cer
File: LVBKx5aPfFmCvJUFky3BTpYLEEQ.cer (raw, json)
Hash identifier: c4cur3xp0lLYWx2U+cheDWNL9FcPguNgU/8UEVERsSc=
Subject key identifier: 2D:50:4A:C7:96:8F:7C:59:82:BC:95:05:93:2D:C1:4E:96:0B:10:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A1B4D89004
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/7764b5-23ab-45aa-87c7-421dbbde6e17/1/LVBKx5aPfFmCvJUFky3BTpYLEEQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/7764b5-23ab-45aa-87c7-421dbbde6e17/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:59:17 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 203991
IP: 185.131.12.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694523826180 (0xa1b4d89004)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:59:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d504ac7968f7c5982bc9505932dc14e960b1044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:ce:3d:6d:b2:8c:c6:74:d7:ce:4b:41:0e:
69:de:b7:07:aa:62:7d:7d:e1:d9:60:ab:50:44:41:
1c:6a:0f:d1:1c:ca:5f:4e:73:9f:25:32:a1:39:96:
a5:f1:a9:3f:f6:4c:79:73:bf:96:0f:f2:d4:5c:4d:
d0:bb:32:8a:4e:70:56:38:82:ed:1c:5b:51:46:fd:
17:63:9d:33:49:0c:66:a4:52:62:31:7b:f6:1c:e5:
09:f3:d0:a3:2b:f2:15:cf:70:9f:f9:68:47:b1:d0:
1d:4c:fa:d1:50:c8:98:4a:6b:28:91:1d:37:62:10:
93:28:8e:6d:43:83:18:7c:ad:09:81:5a:50:e1:fa:
9e:26:8a:11:7f:c3:eb:53:7e:10:07:33:fc:b1:0a:
d7:9e:f4:eb:f5:3b:fd:c7:10:47:03:27:d6:9b:e4:
02:ff:56:c1:46:17:e5:b4:45:3d:50:d2:4f:9c:2f:
2e:7c:17:26:75:b1:04:34:72:80:63:d6:9a:26:a6:
4c:70:d6:63:48:ac:e1:cd:3a:33:4c:e3:28:84:dc:
72:ba:3b:fe:4b:eb:e5:ac:c6:3c:3c:5d:c1:fc:a0:
be:3e:d5:d6:cf:d1:45:71:0e:60:e2:31:68:4e:e3:
a6:a1:5a:e8:b5:a6:b5:2e:b0:26:f2:ac:9f:35:6b:
96:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:50:4A:C7:96:8F:7C:59:82:BC:95:05:93:2D:C1:4E:96:0B:10:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7764b5-23ab-45aa-87c7-421dbbde6e17/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7764b5-23ab-45aa-87c7-421dbbde6e17/1/LVBKx5aPfFmCvJUFky3BTpYLEEQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.12.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203991
Signature Algorithm: sha256WithRSAEncryption
92:c1:c4:ed:8b:b5:98:35:a5:2b:4e:8c:16:06:41:9f:aa:20:
95:9c:c8:08:d9:2c:6f:e5:44:1d:10:0f:a3:6c:f2:f6:02:aa:
c4:f3:88:e8:96:96:db:6e:ad:db:d3:d0:26:53:f9:88:41:81:
19:96:1a:27:9b:1b:b6:1c:60:4b:d8:41:35:b4:9a:b6:6a:34:
d3:5a:f5:d8:92:e9:9b:76:c2:6c:80:a3:0a:ee:61:cd:85:60:
13:21:50:d5:95:dd:6b:3d:27:30:57:18:3c:aa:97:26:d3:82:
f6:4a:2e:95:06:92:d2:19:04:74:d0:74:30:37:05:fa:ce:47:
4b:69:ae:e7:6f:4b:52:8a:6c:2f:ad:ca:66:f3:28:88:bd:d4:
31:33:72:eb:27:ea:64:fe:75:f5:e8:30:66:9d:7b:8b:af:5e:
e5:51:93:0e:52:48:97:76:97:fd:c7:0c:16:84:2f:aa:e4:c7:
11:15:9f:30:55:5a:c7:38:22:81:59:d0:0f:b2:d3:6f:00:4d:
47:c3:55:90:70:f2:22:8c:20:cd:3e:72:54:3e:2a:cf:79:75:
80:45:a5:94:bb:08:d8:69:b9:bb:7b:b0:79:a3:73:e7:97:0c:
e7:a3:33:a1:65:5b:15:ce:23:47:52:93:b9:ef:d5:2d:3e:ac:
df:57:c9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-fra.rpki-client.org