Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LjSJORrdrElYqTKofbnbwU0cAdo.cer
File: LjSJORrdrElYqTKofbnbwU0cAdo.cer (raw, json)
Hash identifier: OwGMOPjKlmTZ1aEBA9xuDSSDbLPt9EvigMoTGYspHzA=
Subject key identifier: 2E:34:89:39:1A:DD:AC:49:58:A9:32:A8:7D:B9:DB:C1:4D:1C:01:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AF6B207638
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/ad6e25-5b22-4bde-b92e-3f9e2b381f3e/1/LjSJORrdrElYqTKofbnbwU0cAdo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/ad6e25-5b22-4bde-b92e-3f9e2b381f3e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 31 Mar 2022 10:42:02 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 198839
IP: 2a04:3b80::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 753416566328 (0xaf6b207638)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 31 10:42:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e3489391addac4958a932a87db9dbc14d1c01da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bd:d1:dd:e8:30:a2:63:83:00:e5:d7:d9:3c:
c6:25:2e:f0:f5:99:63:de:a2:3b:35:50:f9:35:8c:
44:48:b9:63:a5:68:34:a5:47:e5:54:b3:58:62:73:
c9:19:90:47:d8:60:b1:59:06:02:b7:82:5e:4e:04:
fd:18:fd:28:0b:fd:cd:1d:01:48:4c:bc:0a:86:12:
a6:64:3b:55:67:c2:72:f9:09:da:dc:72:92:b0:8d:
64:45:d3:b3:24:7a:6b:9a:54:3e:b2:06:ad:a8:5e:
7f:10:c9:03:ea:fa:1f:c6:76:27:d7:79:76:86:35:
c4:4a:2c:a5:b8:14:82:6b:c1:eb:62:fa:bd:06:3c:
69:0a:bb:1b:f7:4b:e1:9d:1a:0d:8b:29:4c:f8:de:
41:2d:06:59:e7:57:8b:f1:d1:73:61:69:f3:84:0c:
0c:b2:77:69:3d:3c:c1:49:7c:14:76:6a:20:57:87:
05:ea:5f:e8:08:5c:11:98:52:7d:01:fb:38:ef:ee:
d7:64:5d:57:6b:46:7f:36:7d:f3:7d:51:6a:24:37:
48:07:37:e3:8c:cc:6c:c7:49:13:68:c8:dc:0f:f0:
bc:bd:0d:8e:7e:af:0e:15:38:e7:b4:b4:a2:0d:c5:
df:6c:84:e1:2b:af:15:1f:77:d4:60:97:83:d7:d2:
37:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:34:89:39:1A:DD:AC:49:58:A9:32:A8:7D:B9:DB:C1:4D:1C:01:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ad6e25-5b22-4bde-b92e-3f9e2b381f3e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ad6e25-5b22-4bde-b92e-3f9e2b381f3e/1/LjSJORrdrElYqTKofbnbwU0cAdo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:3b80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198839
Signature Algorithm: sha256WithRSAEncryption
ae:b2:46:6b:8f:0d:25:83:83:b0:92:94:c0:47:3a:5b:6d:87:
ab:06:9b:41:85:63:23:01:78:b7:cc:e8:15:38:9c:38:fd:ff:
78:71:37:76:35:6f:10:56:31:da:9e:aa:2d:af:20:3b:3f:8c:
a9:a1:42:af:78:42:08:c6:3e:f3:a2:92:d0:c5:10:b3:04:83:
da:ea:fe:5a:f2:7c:2b:3f:68:3b:4f:9d:d7:38:7b:16:d8:39:
48:16:66:9c:cb:06:55:c3:38:42:1b:7f:35:39:c4:1c:a6:21:
41:d0:53:26:7b:3b:2f:fe:9d:9b:3c:0e:23:33:03:1d:56:3c:
c0:d8:d2:e3:b0:ad:12:41:6e:4b:08:61:e6:8e:01:51:89:d7:
1d:f4:52:3e:db:08:52:b3:4a:09:c4:5e:d5:9e:2a:fa:c3:fe:
82:2c:0f:9a:03:01:8f:e6:99:79:9d:eb:84:f4:da:8a:b3:5b:
47:fa:e7:10:88:56:a7:12:1d:4e:c5:2b:f0:21:f4:3c:51:35:
fc:8d:33:2f:23:54:63:a2:8a:ac:57:9f:1c:22:e8:ac:e3:34:
30:b9:54:44:61:ac:ef:47:e9:52:fb:79:a0:9d:51:23:9d:0c:
99:17:5a:97:50:34:38:97:c4:06:77:56:90:4d:59:3a:0e:3b:
ee:7f:14:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:05 2024 by rpki-client on console-fra.rpki-client.org