Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PGU9WS2Ry8c4xpGAGGJ36HgyOK8.cer
File: PGU9WS2Ry8c4xpGAGGJ36HgyOK8.cer (raw, json)
Hash identifier: hhFmaY7SPW3K+DnvcClf9YuheyFKVvFiT5c07EgjWyw=
Subject key identifier: 3C:65:3D:59:2D:91:CB:C7:38:C6:91:80:18:62:77:E8:78:32:38:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A5026FC3B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/PGU9WS2Ry8c4xpGAGGJ36HgyOK8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:57:27 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 44944
IP: 185.23.244.0/22
IP: 188.188.0.0/15
IP: 217.72.224.0/20
IP: 2a00:1cf8::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 708710482870 (0xa5026fc3b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:57:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c653d592d91cbc738c69180186277e8783238af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:06:e7:ad:ff:3c:9c:c8:13:98:62:7b:6a:
40:e9:5e:01:6b:1d:0c:6d:e2:4b:dc:90:cd:1e:c5:
c6:bc:c4:ce:09:7b:4f:2d:90:36:3f:38:8a:e7:b5:
6f:b7:da:35:52:be:b9:2d:a7:15:c9:88:ae:e2:1a:
2b:94:31:54:1a:8a:80:fa:68:f8:52:d2:00:6c:a8:
8a:bb:86:cd:dd:86:43:0a:5c:b5:bf:15:d5:ea:0f:
37:b4:05:9f:9e:2a:48:dc:36:3b:05:25:c8:9a:34:
1e:0a:4c:f0:89:0e:a9:e5:ac:76:76:66:37:c7:d7:
5a:a5:c8:47:82:cd:19:de:1e:60:c5:c0:3f:19:a2:
55:06:8e:f7:c8:d9:34:59:1b:61:70:47:4d:8a:f4:
8e:19:37:ef:5b:10:8c:64:e8:bf:6b:43:03:78:39:
89:c4:9b:3a:49:1c:2a:81:ba:f6:dd:c5:87:84:33:
6a:63:ea:10:52:3c:ce:2b:85:7b:37:6f:bd:f5:2b:
80:04:85:2d:45:e0:7d:ef:00:14:70:47:41:f3:30:
ac:22:02:59:f8:6c:9e:77:f4:44:6a:ae:44:76:d2:
78:7e:c2:84:fe:0a:6a:f3:9c:24:29:13:55:29:ff:
7e:90:3c:e0:73:d1:b1:26:dc:64:f9:93:79:1b:25:
fc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:65:3D:59:2D:91:CB:C7:38:C6:91:80:18:62:77:E8:78:32:38:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/PGU9WS2Ry8c4xpGAGGJ36HgyOK8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.244.0/22
188.188.0.0/15
217.72.224.0/20
IPv6:
2a00:1cf8::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44944
Signature Algorithm: sha256WithRSAEncryption
05:b7:cd:2d:7b:d8:f0:a2:72:c8:9a:82:d5:01:00:62:02:4a:
d1:25:76:b3:e1:57:16:cc:c3:de:05:a0:8c:eb:dc:48:9d:0b:
98:85:94:12:c5:45:c2:be:d3:71:7a:51:be:ef:28:bb:f5:51:
c7:28:0d:c9:d8:5a:91:78:49:b5:0b:0b:16:c6:b2:5c:ff:07:
d8:3a:b0:21:92:16:8b:d5:be:50:e7:3d:ef:67:d7:63:76:ef:
31:32:df:e9:17:92:1b:41:78:31:d9:e2:89:8a:1d:4f:49:ba:
5f:53:e9:2f:f0:22:10:4c:cb:40:64:e3:f3:6f:ff:b2:74:b7:
99:43:20:91:ce:a7:bc:c7:e1:8b:e0:fc:52:fa:bb:8a:b2:e8:
cc:e2:df:62:1f:45:a3:e3:c4:9e:d4:6a:cd:25:4f:43:28:cf:
31:9b:0b:fc:b8:de:59:98:c0:0f:67:7e:80:a5:ff:ee:38:a2:
11:cb:91:75:a9:e0:a7:2f:01:0d:de:d5:56:35:0f:62:d3:07:
65:37:a4:22:c2:f8:f5:87:19:78:0f:68:d2:ea:e6:27:ac:1b:
39:37:74:c7:61:63:63:07:07:07:d3:c1:75:f5:87:59:44:e4:
fc:7c:40:f7:4a:ce:44:cf:cd:52:6d:6a:19:b0:92:5d:ec:ea:
16:52:ce:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:51 2024 by rpki-client on console-ams.rpki-client.org