Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OOFPkv3HzPv8GCNhUjrifWl-lS8.cer
File: OOFPkv3HzPv8GCNhUjrifWl-lS8.cer (raw, json)
Hash identifier: 2tS3yRdQ+2XTKwQg3pwZc3vIy/t3i8j5m39ZxGlNPoA=
Subject key identifier: 38:E1:4F:92:FD:C7:CC:FB:FC:18:23:61:52:3A:E2:7D:69:7E:95:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 98C603C1CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/OOFPkv3HzPv8GCNhUjrifWl-lS8.mft
caRepository: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/
Notify URL: https://chloe.sobornost.net/rpki/news.xml
Certificate not before: Sat 01 Jan 2022 00:14:30 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 15562
IP: 45.138.228.0/22
IP: 2001:67c:208c::/48
IP: 2a0e:b240::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656157163983 (0x98c603c1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:14:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38e14f92fdc7ccfbfc182361523ae27d697e952f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:91:68:10:12:ff:8c:09:8f:62:f7:41:ff:51:
d6:9f:3b:1c:e6:c7:b4:e1:15:a7:72:76:82:62:4d:
f8:4a:ce:5e:a8:33:7e:e6:d6:83:1d:d4:9e:35:03:
3c:88:25:26:2b:6b:e2:8c:3a:35:6a:93:6d:e1:99:
b9:e7:4f:11:b1:34:79:e8:b2:33:80:22:91:28:7c:
f2:0b:a8:04:b3:89:fd:1e:01:b9:e3:7b:c4:46:be:
10:5a:9f:f6:46:43:71:4e:d8:1d:47:4d:4c:d0:68:
a7:e7:0c:3a:cb:62:c8:26:0f:ee:83:49:13:b3:27:
2e:d6:08:d2:83:3e:05:f3:f8:80:9e:ce:fe:c2:af:
14:18:6d:a4:0d:36:6d:91:57:9e:2d:c1:c8:b5:5a:
d1:d3:08:87:6a:89:16:a4:4f:79:2d:b3:b0:1f:77:
a1:7d:11:8b:b0:11:79:79:d9:a0:2f:7c:32:fa:14:
4f:7b:e6:60:91:a0:33:63:ab:71:9b:cf:08:06:07:
ea:f5:c7:b9:e5:4b:a6:69:58:b5:10:0b:c4:ca:8b:
bd:02:41:a1:98:ff:46:85:24:29:93:01:1b:ed:e3:
12:21:ae:ed:dd:ae:81:33:fa:e7:40:61:65:f1:10:
51:11:7e:08:c1:02:39:94:35:79:de:9d:1c:87:99:
75:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E1:4F:92:FD:C7:CC:FB:FC:18:23:61:52:3A:E2:7D:69:7E:95:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/
RPKI Manifest - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/OOFPkv3HzPv8GCNhUjrifWl-lS8.mft
RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.228.0/22
IPv6:
2001:67c:208c::/48
2a0e:b240::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15562
Signature Algorithm: sha256WithRSAEncryption
5a:7c:06:bc:70:81:ef:22:32:6c:15:93:e0:a4:5f:34:f1:7e:
76:2f:a8:46:30:4c:70:a5:16:ec:39:a7:48:ef:4f:b5:dd:06:
fe:bf:14:a6:b9:73:1f:af:b4:95:ea:d2:a9:d2:79:f6:43:c3:
b6:b8:47:5f:c2:b1:9b:8d:cb:7c:43:9f:32:59:f1:6c:d4:3c:
e4:f8:3f:de:b4:fd:4c:a4:ff:e7:ee:29:5b:7e:16:fe:cb:12:
ea:d4:24:3c:40:37:4b:69:d4:d2:ea:30:46:62:7d:f7:42:13:
60:f6:21:81:97:e2:8a:7b:fd:ab:c2:ec:28:73:6b:e9:04:48:
86:ff:1a:2f:7f:91:db:60:e8:7a:f0:1b:38:36:95:aa:b8:97:
f4:0f:2f:d9:8c:5a:55:9b:da:26:59:c2:60:a7:e6:7e:fb:e4:
e2:82:33:a3:00:a5:15:9b:58:62:02:12:4d:36:16:02:9b:e4:
d8:39:00:cb:f7:03:c3:5e:6f:76:28:21:ff:9b:ea:f5:52:63:
02:52:17:00:60:85:a0:6a:a8:4c:6b:46:23:67:61:96:ce:c1:
9f:eb:47:54:4c:72:f2:b7:bf:f1:d8:47:ca:90:42:6e:ba:94:
69:33:3d:72:11:99:36:b1:52:7e:06:f9:0f:3e:84:1e:d2:39:
ed:c9:ac:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:34 2024 by rpki-client on console-ams.rpki-client.org