Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O1XBVU_dfYbiYr0RZubW-LOk6Y8.cer
File: O1XBVU_dfYbiYr0RZubW-LOk6Y8.cer (raw, json)
Hash identifier: +PLd1/Xbwxa4xtcfYtB/bPpoHjcF1stzw0B9uqXOwro=
Subject key identifier: 3B:55:C1:55:4F:DD:7D:86:E2:62:BD:11:66:E6:D6:F8:B3:A4:E9:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9DDB15DB71
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/e25f92-e030-4bd6-912f-37bede3b7d0d/1/O1XBVU_dfYbiYr0RZubW-LOk6Y8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/e25f92-e030-4bd6-912f-37bede3b7d0d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 04:56:11 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 50258
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677985508209 (0x9ddb15db71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:56:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b55c1554fdd7d86e262bd1166e6d6f8b3a4e98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ca:09:2d:41:26:3f:5d:15:a4:bc:5b:1e:c3:
8b:94:2d:17:44:11:d6:8a:0d:9d:14:45:d4:de:be:
b9:bc:93:8a:46:38:05:2c:ff:d0:ab:ce:48:30:4d:
d3:08:01:28:63:03:4a:d0:4c:b2:8c:b8:7a:8a:59:
5f:9a:eb:1a:4b:5f:9c:5d:35:ef:ca:4f:0e:48:e8:
59:4d:f8:17:32:29:4f:1d:c5:c6:15:11:0c:97:64:
c8:ae:8a:ff:ed:12:c1:70:82:3d:77:80:4d:cc:0b:
6d:98:4f:b8:76:1d:96:f4:48:b1:75:41:a8:61:fa:
18:e5:c6:61:e0:02:cc:ce:10:ce:dd:6b:58:f7:74:
a4:88:c4:16:ee:1c:8c:fa:86:82:cf:96:08:49:73:
e6:a6:7b:d6:b1:f2:aa:7d:5c:79:36:0c:84:28:34:
94:6a:2e:39:8c:5c:19:38:90:c1:64:e9:83:ba:f7:
63:f3:d4:f1:ff:83:35:f5:da:fd:49:c1:5b:c1:33:
be:c8:a2:de:7c:84:c7:ca:12:19:28:8d:5a:1c:90:
a6:55:1b:55:00:07:d1:f9:b9:aa:bb:f4:42:37:d1:
50:d6:22:6b:f9:e9:c4:af:82:a6:17:a4:d8:2a:34:
b5:03:e6:ab:23:9b:32:3e:ef:96:27:56:a9:0b:5e:
38:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:55:C1:55:4F:DD:7D:86:E2:62:BD:11:66:E6:D6:F8:B3:A4:E9:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e25f92-e030-4bd6-912f-37bede3b7d0d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e25f92-e030-4bd6-912f-37bede3b7d0d/1/O1XBVU_dfYbiYr0RZubW-LOk6Y8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50258
Signature Algorithm: sha256WithRSAEncryption
5d:f8:8b:cc:fe:40:8f:fd:fe:cd:5e:03:85:75:e3:52:d4:5c:
ea:7e:a5:35:ea:41:b6:03:d3:38:17:29:ce:42:57:1b:bf:7c:
b5:71:c4:8c:ad:b4:36:66:1d:63:ff:67:85:58:63:90:26:4d:
b9:49:ee:eb:2f:06:c3:29:d9:37:8e:0b:a7:fd:58:ab:5e:eb:
33:a8:c1:8d:ba:6a:26:a3:62:14:24:3b:34:e3:a1:b6:78:06:
72:db:4c:8e:dd:95:91:3f:34:4d:9a:31:af:86:2a:33:ec:47:
65:a8:68:1d:a6:81:c3:19:74:7d:03:88:81:c2:aa:b1:54:36:
af:68:0c:ad:47:65:88:8b:b6:55:5b:0a:ba:95:8b:9b:c1:fd:
c0:3f:41:05:1b:67:80:fb:fd:42:45:79:d2:e0:df:05:f8:13:
9f:a8:13:db:4a:c5:64:28:8a:a3:e1:98:4f:f4:b3:c2:5c:50:
63:d8:6f:9b:77:aa:e7:f5:00:a2:2b:c0:de:b9:bf:7e:55:15:
dd:73:86:b3:5e:45:98:6d:80:72:2b:ee:f5:87:81:97:ef:84:
d8:5e:b4:93:c1:0f:c5:a7:b3:0c:57:b0:ae:3d:f2:a5:88:40:
6c:69:ae:64:9b:65:4a:ce:d7:98:83:0e:a3:ed:72:64:7a:03:
d3:16:8c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:28 2024 by rpki-client on console-ams.rpki-client.org