Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PGcSX8Q6finPOH9WHFk3B6RB97s.cer
File: PGcSX8Q6finPOH9WHFk3B6RB97s.cer (raw, json)
Hash identifier: 0nL98l+6BHHnLZ/1u5pnl8MlNtCeLE2bC5lHg5Mp89A=
Subject key identifier: 3C:67:12:5F:C4:3A:7E:29:CF:38:7F:56:1C:59:37:07:A4:41:F7:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018312794553551D9F4498BA167FB81FCA36
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/11/3C67125FC43A7E29CF387F561C593707A441F7BB.mft
caRepository: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/11
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Tue 06 Sep 2022 11:04:41 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 205789
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:12:79:45:53:55:1d:9f:44:98:ba:16:7f:b8:1f:ca:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 6 11:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c67125fc43a7e29cf387f561c593707a441f7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:a8:23:07:59:57:1c:e3:29:1b:0e:0f:53:
de:c8:25:41:9e:11:58:f1:30:f6:e6:46:fa:53:c5:
bf:36:d1:5c:84:ed:8a:59:58:6a:1c:37:78:4c:0a:
03:1e:3a:81:8e:2b:4d:21:0a:c1:6a:92:3d:b2:ef:
47:82:8f:92:bf:4c:a5:34:b8:42:b0:b8:4d:b5:90:
fa:c6:90:0b:7b:d3:7e:ef:af:26:a9:96:19:28:35:
6c:bf:a0:b4:69:23:3e:89:ed:a0:a1:68:78:ae:18:
3c:16:3c:c9:bb:2d:03:2c:c5:06:df:f6:cd:2f:3c:
fb:37:bb:b6:9b:55:2a:3a:67:f6:9a:cd:11:bf:12:
fe:cc:60:72:4d:bf:1b:1e:9b:c0:60:a6:2d:70:94:
4c:25:0b:0a:5a:18:d7:86:26:6f:ae:4b:90:01:15:
2e:27:9c:89:65:37:9d:3d:0a:33:5f:df:22:d4:d4:
44:da:7c:82:87:bb:b6:a5:7a:ce:1e:6d:1b:12:9f:
35:26:d3:38:12:e8:14:cd:60:69:93:0e:2e:d0:4c:
35:75:5b:09:ff:f2:27:da:d4:0a:f2:9b:ae:a8:e9:
35:bc:eb:e4:9e:d7:13:e6:4e:b4:d8:f5:f6:10:ed:
30:d2:73:a5:ca:a8:10:66:13:a6:44:fa:9d:27:d5:
8c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:67:12:5F:C4:3A:7E:29:CF:38:7F:56:1C:59:37:07:A4:41:F7:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/11
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/11/3C67125FC43A7E29CF387F561C593707A441F7BB.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205789
Signature Algorithm: sha256WithRSAEncryption
b0:76:25:99:07:4b:c1:37:dd:25:06:9f:1c:1f:79:8c:3d:e4:
b7:ad:27:f3:67:53:37:df:c4:8e:b1:f5:e5:87:75:a5:65:fa:
0f:de:77:5c:ee:ba:f6:56:37:b1:fd:6f:c3:cd:98:f7:f5:d2:
6c:3f:04:7d:4b:d7:46:28:7b:18:b8:d3:ee:e7:52:b7:5f:6c:
2d:65:3f:e4:3f:69:4c:c1:dd:2c:64:13:17:6b:4e:5c:d8:a1:
81:ff:6e:b6:d1:d1:a0:8f:98:77:ec:e8:9f:ae:0e:37:a3:9b:
eb:84:3f:74:ce:bc:b9:7c:88:a3:18:a2:25:d2:3b:65:d9:40:
bd:7c:19:62:60:c6:d6:e4:01:b2:04:b4:26:db:56:0a:28:fc:
71:9a:06:30:91:49:38:ff:c9:a6:e4:47:da:df:85:9b:99:57:
60:70:ce:2d:9e:2c:4a:51:71:b4:e3:b5:a5:98:d7:7a:8f:bf:
98:5e:b1:ea:60:d1:b7:60:f2:50:08:58:c3:79:f6:0a:70:fa:
14:a7:9d:c0:83:9a:4b:81:aa:7f:f0:f7:fb:8b:94:d3:d7:92:
6d:48:06:07:c2:28:bd:0a:a1:51:50:18:15:ad:61:fd:ee:c8:
90:6f:8b:56:28:fa:97:6d:6a:64:61:2c:ab:3b:f0:c5:71:8e:
1b:28:5d:7f
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgISAYMSeUVTVR2fRJi6Fn+4H8o2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjIwOTA2MTEwNDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzY3MTI1ZmM0M2E3ZTI5Y2YzODdmNTYxYzU5MzcwN2E0NDFmN2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsROoIwdZVxzjKRsOD1PeyCVBnhFY
8TD25kb6U8W/NtFchO2KWVhqHDd4TAoDHjqBjitNIQrBapI9su9Hgo+Sv0ylNLhC
sLhNtZD6xpALe9N+768mqZYZKDVsv6C0aSM+ie2goWh4rhg8FjzJuy0DLMUG3/bN
Lzz7N7u2m1UqOmf2ms0RvxL+zGByTb8bHpvAYKYtcJRMJQsKWhjXhiZvrkuQARUu
J5yJZTedPQozX98i1NRE2nyCh7u2pXrOHm0bEp81JtM4EugUzWBpkw4u0Ew1dVsJ
//In2tQK8puuqOk1vOvkntcT5k602PX2EO0w0nOlyqgQZhOmRPqdJ9WMYQIDAQAB
o4ICYDCCAlwwHQYDVR0OBBYEFDxnEl/EOn4pzzh/VhxZNwekQfe7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEEBggrBgEFBQcBCwSB9zCB9DBDBggrBgEFBQcwBYY3cnN5
bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vYXMyMDc5NjAtcnBraS1j
YS8xMTBwBggrBgEFBQcwCoZkcnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0
L3JlcG8vYXMyMDc5NjAtcnBraS1jYS8xMS8zQzY3MTI1RkM0M0E3RTI5Q0YzODdG
NTYxQzU5MzcwN0E0NDFGN0JCLm1mdDA7BggrBgEFBQcwDYYvaHR0cHM6Ly9ycGtp
LmFzMjA3OTYwLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWwwWQYDVR0fBFIwUDBO
oEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9L
cFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3JsMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAyPdMA0GCSqGSIb3DQEB
CwUAA4IBAQCwdiWZB0vBN90lBp8cH3mMPeS3rSfzZ1M338SOsfXlh3WlZfoP3ndc
7rr2Vjex/W/DzZj39dJsPwR9S9dGKHsYuNPu51K3X2wtZT/kP2lMwd0sZBMXa05c
2KGB/2620dGgj5h37Oifrg43o5vrhD90zry5fIijGKIl0jtl2UC9fBliYMbW5AGy
BLQm21YKKPxxmgYwkUk4/8mm5Efa34WbmVdgcM4tnixKUXG047WlmNd6j7+YXrHq
YNG3YPJQCFjDefYKcPoUp53Ag5pLgap/8Pf7i5TT15JtSAYHwii9CqFRUBgVrWH9
7siQb4tWKPqXbWpkYSyrO/DFcY4bKF1/
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:52 2024 by rpki-client on console-ams.rpki-client.org