Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Lke4RYgVsMF-L9bMJErgUWx7Ctc.cer
File: Lke4RYgVsMF-L9bMJErgUWx7Ctc.cer (raw, json)
Hash identifier: htLNPZUhk6VGC66lQ7XiRYkRdhFPGwzuSVjQIx5GHfg=
Subject key identifier: 2E:47:B8:45:88:15:B0:C1:7E:2F:D6:CC:24:4A:E0:51:6C:7B:0A:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9A09CB3FB0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/866783-23ca-4380-adb6-5eab6bb900bf/1/Lke4RYgVsMF-L9bMJErgUWx7Ctc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/866783-23ca-4380-adb6-5eab6bb900bf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:51:19 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 207885
IP: 91.217.195.0/24
IP: 91.217.200.0/24
IP: 91.217.207.0/24
IP: 91.217.223.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661589278640 (0x9a09cb3fb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:51:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e47b8458815b0c17e2fd6cc244ae0516c7b0ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:dc:57:8e:08:b6:bf:08:39:3a:51:19:92:
e8:cc:0e:d2:91:63:72:d3:62:84:44:87:99:84:68:
1e:ca:d6:5a:a7:58:5b:0d:97:85:1b:b5:0c:2d:ef:
01:f7:b0:96:91:a2:83:14:7c:c0:33:49:13:07:1b:
c7:b7:86:e2:60:ee:ff:7f:78:70:47:d1:58:60:51:
a3:42:90:8a:3e:f2:04:f2:78:11:97:ac:25:a0:1b:
74:46:52:7d:b6:ef:94:f3:81:7b:d8:c7:01:9b:27:
40:9c:7b:05:19:a0:d2:c8:35:96:a2:3e:e6:6d:d6:
6f:de:40:51:27:23:13:e1:3f:b1:32:20:bb:42:6e:
e2:12:16:74:c1:6a:3d:7b:ca:d1:4e:0a:9d:0f:48:
55:bb:02:80:52:3a:82:6e:8f:f5:1d:03:51:81:b3:
64:31:30:c9:98:dc:2e:74:0b:3c:90:d5:26:65:10:
3e:0b:db:23:53:8d:2e:22:b3:d0:35:f4:54:a0:8b:
70:70:09:99:40:17:15:dc:96:22:1c:8e:86:53:9d:
e1:e9:2f:6e:b6:ec:b0:ac:a4:18:3d:38:4b:dc:bf:
64:2c:eb:a6:5a:ac:56:38:21:4d:ad:5d:8a:8b:96:
56:95:e3:e2:88:e4:3f:60:4a:c6:1e:a9:89:b3:40:
89:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:47:B8:45:88:15:B0:C1:7E:2F:D6:CC:24:4A:E0:51:6C:7B:0A:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866783-23ca-4380-adb6-5eab6bb900bf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866783-23ca-4380-adb6-5eab6bb900bf/1/Lke4RYgVsMF-L9bMJErgUWx7Ctc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.195.0/24
91.217.200.0/24
91.217.207.0/24
91.217.223.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207885
Signature Algorithm: sha256WithRSAEncryption
80:56:cc:53:81:fa:2c:02:73:52:63:fd:ef:d7:9e:5d:4d:eb:
52:9b:de:a7:10:a0:1c:7d:74:97:78:42:82:be:5e:36:3a:d7:
fb:39:0c:20:ff:0a:c1:dc:08:25:aa:6d:28:26:c5:8d:92:a7:
61:33:2c:14:85:fd:b3:72:84:2f:dd:a9:5a:0b:d2:37:74:42:
9c:d7:97:7d:57:db:40:71:7f:b0:62:bf:48:23:82:07:27:ab:
42:59:01:72:1c:41:02:cd:58:de:ea:5a:7b:1a:19:36:7f:28:
a0:d8:2b:61:91:30:70:bb:9e:ac:5b:bf:46:9e:2b:a5:61:57:
74:b9:55:49:a5:d9:57:ea:e0:8c:4b:ae:90:c9:46:9a:55:26:
78:96:8c:43:41:00:15:7f:59:18:bf:a7:67:34:5e:a7:13:06:
ea:b8:c0:f0:8a:cc:83:8b:06:27:e9:fb:ff:73:2b:d4:af:e6:
d3:88:26:72:e5:f5:f7:8f:26:c1:f0:6f:f3:eb:7b:92:86:75:
29:22:dd:1c:f1:24:08:07:77:ea:af:20:83:05:2b:ca:68:7f:
da:28:03:aa:f6:d4:d3:bc:1f:01:83:1a:77:d8:a2:ba:a4:6e:
7c:3a:ea:76:e4:eb:ae:ac:1a:90:12:c2:fa:3a:3e:c6:1e:4e:
37:15:05:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:06 2024 by rpki-client on console-fra.rpki-client.org