Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NuySd29-FgNRSbuVA_fnIvyAwZM.cer
File: NuySd29-FgNRSbuVA_fnIvyAwZM.cer (raw, json)
Hash identifier: fHFaVpjj4UREZ0lH9arx7svmzl4caiso+JY2cHpInYM=
Subject key identifier: 36:EC:92:77:6F:7E:16:03:51:49:BB:95:03:F7:E7:22:FC:80:C1:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9EFBEF43DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/f5aa72-06c9-4290-a1a3-16d68f72eb71/1/NuySd29-FgNRSbuVA_fnIvyAwZM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/f5aa72-06c9-4290-a1a3-16d68f72eb71/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:54:49 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 58223
IP: 5.45.48.0/21
IP: 2a0d:7dc0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 682831594459 (0x9efbef43db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:54:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36ec92776f7e16035149bb9503f7e722fc80c193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f3:9f:b1:dd:52:18:85:7f:21:30:01:12:c7:
ed:90:0c:0f:91:07:6f:62:04:e9:1e:a5:37:dd:f5:
13:b2:fc:cf:94:f0:4b:e6:18:71:13:e9:e2:06:8a:
d5:7b:43:14:f0:da:07:dd:e1:da:6a:a5:ce:e9:2a:
51:78:0b:7b:ab:57:01:08:94:c7:b1:c9:09:b2:98:
cc:69:76:b2:a1:6f:02:2d:ef:da:13:d2:07:ee:1f:
28:4c:27:6b:fa:8f:83:0a:5b:7d:ce:cc:a6:52:54:
53:6a:b8:82:62:86:3e:33:14:f2:ec:d4:e2:f7:ea:
e3:4a:fa:99:98:71:bf:c8:d9:fd:a8:9f:bc:7c:c1:
62:e7:4d:75:84:ef:e3:42:47:4b:97:b0:a5:69:97:
ea:79:a2:46:ee:77:28:9a:7d:ed:a5:dc:07:db:e3:
e1:7a:03:ba:f7:b6:a3:06:f4:f9:6e:f4:5c:df:f0:
a5:2d:04:e6:0e:ed:75:6a:f2:3c:62:10:93:b6:68:
76:3f:43:6f:36:a5:02:77:c1:6a:a6:0d:80:19:93:
80:31:63:70:e5:af:74:e4:e1:09:29:29:4c:cc:b8:
5d:45:2e:b0:4b:2e:80:4b:fd:ab:a3:b6:de:66:50:
d8:34:f5:4a:07:72:61:a3:61:68:63:f1:e5:48:40:
e1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EC:92:77:6F:7E:16:03:51:49:BB:95:03:F7:E7:22:FC:80:C1:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f5aa72-06c9-4290-a1a3-16d68f72eb71/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f5aa72-06c9-4290-a1a3-16d68f72eb71/1/NuySd29-FgNRSbuVA_fnIvyAwZM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.48.0/21
IPv6:
2a0d:7dc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58223
Signature Algorithm: sha256WithRSAEncryption
2c:63:cb:f2:b5:62:39:61:58:41:7a:d4:00:b8:d1:d4:91:ea:
a0:35:87:fd:12:43:0b:0b:e0:de:74:4f:33:2c:e7:00:a3:a3:
a1:e0:ca:0a:08:ad:59:0f:80:58:61:eb:42:5e:63:b7:9e:3b:
aa:68:b5:bd:32:e3:2c:25:14:f3:34:61:41:17:a0:b8:18:b4:
8b:53:64:c3:11:58:25:dc:d8:c3:b8:88:a6:00:a9:bf:42:da:
b8:f2:02:4a:47:b3:f6:81:2c:79:0e:83:d8:d4:06:9b:1e:1a:
6a:bf:35:fb:4b:71:c0:14:f0:b7:df:77:cd:ec:77:21:e8:35:
1f:ce:44:70:09:ee:07:fe:9f:e9:84:3a:cc:83:a3:bb:f6:2d:
7a:28:66:2a:78:7e:94:d5:2f:07:9e:72:02:b3:b0:96:2b:42:
6d:e2:d0:87:09:e1:34:95:08:a8:d7:28:3d:3c:f0:c6:7c:e0:
01:c8:31:bb:b4:51:66:d0:38:0f:6b:cb:b8:87:2d:7e:e4:7a:
d8:23:12:0d:05:82:7d:60:0e:f2:72:56:1c:60:ae:be:3f:4d:
96:e9:0f:66:3a:2f:d0:61:16:4f:5c:6f:46:da:6e:ef:d0:00:
4d:ff:dc:5d:d5:ff:f7:ca:25:16:90:71:50:4d:9f:ea:36:44:
b3:cb:ec:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:41 2024 by rpki-client on console-fra.rpki-client.org