Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LdpeN2UqrXsrnaYSvZAneKG-Qq8.cer
File: LdpeN2UqrXsrnaYSvZAneKG-Qq8.cer (raw, json)
Hash identifier: MQnTtUkggAKuIASFZH6M0IX3t4zvupLBvKst8Y9c+aM=
Subject key identifier: 2D:DA:5E:37:65:2A:AD:7B:2B:9D:A6:12:BD:90:27:78:A1:BE:42:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 98B2FF9156
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/3/2DDA5E37652AAD7B2B9DA612BD902778A1BE42AF.mft
caRepository: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/3
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Sat 01 Jan 2022 00:00:40 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 211776
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655838122326 (0x98b2ff9156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:00:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2dda5e37652aad7b2b9da612bd902778a1be42af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5c:42:54:5a:5c:62:54:2b:47:9b:f5:e6:ff:
97:93:0c:a0:b3:44:2d:4d:79:a6:05:9b:e0:72:7b:
54:88:45:9e:53:83:a4:0d:05:9e:ba:0b:71:2b:4e:
6f:a7:2f:01:56:2a:f7:f9:b1:49:6e:88:35:70:5e:
81:1a:19:8f:c8:bd:bc:83:be:9a:6a:eb:ad:16:b6:
66:31:fc:c8:20:ef:8e:c4:c8:70:af:23:19:3b:17:
d7:ba:45:6c:5b:94:a7:09:ea:89:cb:c7:f1:5e:95:
6c:57:8e:e8:6b:d8:77:c1:0e:d1:01:3d:72:27:cb:
fc:6f:d2:24:cd:55:9c:59:b2:96:d5:08:1e:ef:87:
7f:1d:b0:74:f0:4f:03:32:6f:05:db:56:35:7f:e3:
cf:c9:7c:3a:19:65:02:b4:10:a0:d1:8f:9d:3f:dd:
bb:97:f3:0d:79:48:08:35:79:b0:79:44:73:52:2c:
fe:53:36:69:bc:76:f5:41:34:72:f6:e8:3d:89:89:
d9:ad:d3:5e:f0:29:4b:f8:6b:19:69:43:ed:20:28:
d6:df:bf:8c:a1:29:86:2b:a3:4e:3f:92:0a:3f:09:
43:0e:94:22:89:46:03:e1:6e:b7:85:97:bf:bf:62:
5b:14:c9:3a:1d:05:18:0c:cb:0a:be:aa:f1:cd:ef:
76:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DA:5E:37:65:2A:AD:7B:2B:9D:A6:12:BD:90:27:78:A1:BE:42:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/3
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/3/2DDA5E37652AAD7B2B9DA612BD902778A1BE42AF.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211776
Signature Algorithm: sha256WithRSAEncryption
29:cb:b2:9d:bb:8d:59:6c:a2:28:2b:d3:6c:ec:9e:a9:14:02:
36:e0:d4:a5:de:e0:67:6e:53:75:b5:cb:a7:a1:39:3b:48:69:
bb:87:c5:bc:84:67:a6:6c:69:36:39:7a:92:b5:1a:bf:b9:3c:
d2:42:7a:14:4d:1d:27:a4:da:4e:5c:f5:39:b8:9b:1d:c9:1f:
19:09:41:b1:e4:49:e7:75:84:dd:bf:cf:6b:8b:e0:c3:ff:05:
2e:c9:17:2f:3a:82:75:02:bb:ad:13:b1:d0:09:e4:00:c2:c6:
03:2e:e4:dd:0e:6d:e8:5f:7d:f5:7f:dd:2d:06:62:42:b1:a5:
d2:77:7b:32:96:b8:c0:83:23:cd:a0:e8:f0:fd:f6:60:05:4e:
38:e9:3a:03:5a:64:f9:18:6d:cf:27:9a:f5:64:9a:b6:d6:f9:
ff:03:eb:25:af:15:32:72:f1:13:1f:cf:94:79:c2:77:65:a5:
1d:80:14:a9:a3:08:7c:89:6a:14:14:f7:1a:fc:42:64:e2:68:
b5:da:ea:72:1a:d6:a7:a5:82:54:26:3a:a7:7a:7b:e4:23:11:
90:2a:91:6e:b5:b8:d5:ad:22:08:ee:86:9d:8e:01:09:7d:5a:
b4:89:35:1c:ad:f9:88:d8:e1:35:5f:15:88:7f:67:74:92:44:
55:85:7b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:41 2024 by rpki-client on console-ams.rpki-client.org