Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PLx-BENLLUBEUA8jMzdskk81r5g.cer
File: PLx-BENLLUBEUA8jMzdskk81r5g.cer (raw, json)
Hash identifier: C/Uyj3TKQUIFHOZawCVAjXox0iumh8UCjHkAzdKcvps=
Subject key identifier: 3C:BC:7E:04:43:4B:2D:40:44:50:0F:23:33:37:6C:92:4F:35:AF:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A2653FE17E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/a5b62d-8c68-470a-98a8-b8204617d8db/1/PLx-BENLLUBEUA8jMzdskk81r5g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/a5b62d-8c68-470a-98a8-b8204617d8db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:54:24 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 206815
IP: 2a0b:ac00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697483387262 (0xa2653fe17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:54:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3cbc7e04434b2d4044500f2333376c924f35af98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2c:7d:6e:c4:3a:f4:9f:0c:9d:de:71:be:9f:
04:de:ff:a4:a4:3e:d4:bc:96:3d:a2:73:b9:f4:24:
e4:ef:5e:db:7d:fd:fc:84:b2:0f:51:d7:a0:5d:06:
57:00:49:81:87:5f:94:af:bd:00:75:02:88:e8:9c:
60:ba:4a:67:b8:ae:81:7f:3f:2b:7f:11:80:d3:5a:
26:31:64:3d:c0:88:f7:96:ca:f5:43:6c:a7:6f:4d:
ea:cf:20:a2:7b:6d:c0:a3:4f:6e:21:24:0b:9f:19:
6d:68:0d:d3:fc:3c:ca:54:1d:43:82:cf:bb:f3:79:
23:7e:58:0a:19:b6:b1:01:8b:4d:2e:82:ab:bb:6f:
74:c6:f5:93:0f:62:56:2e:e3:f8:3c:8b:cb:ce:43:
4e:70:3a:27:19:6d:33:d2:d0:08:86:5f:43:31:14:
c5:7b:0d:b8:6f:72:19:6a:43:b0:a3:25:46:3f:57:
02:26:80:9a:d5:dd:1b:57:27:a4:16:99:10:d0:8a:
7c:4b:d5:61:79:38:67:c9:ae:cb:72:96:f4:04:41:
c5:3f:2b:fd:b5:ee:05:ee:d1:eb:3e:d1:32:66:a4:
57:63:7b:4e:16:fe:1c:d5:d2:75:f3:85:27:fe:f7:
0a:33:3e:ab:92:65:2d:8e:b5:ce:33:17:39:2c:cb:
be:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BC:7E:04:43:4B:2D:40:44:50:0F:23:33:37:6C:92:4F:35:AF:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a5b62d-8c68-470a-98a8-b8204617d8db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a5b62d-8c68-470a-98a8-b8204617d8db/1/PLx-BENLLUBEUA8jMzdskk81r5g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:ac00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206815
Signature Algorithm: sha256WithRSAEncryption
66:b5:0c:bd:43:92:9f:9e:69:c6:d0:ec:6e:c1:b8:e8:46:4d:
47:8f:23:a0:58:84:2a:dd:e7:c0:0e:47:5c:3c:07:9a:df:b9:
6d:49:2b:96:7c:64:c2:1c:53:b0:5a:e8:98:ad:8d:f0:bf:9b:
d4:92:ec:df:8f:dc:81:a2:40:2a:93:36:20:2e:66:99:21:85:
9a:c0:04:0e:16:63:2c:7f:ae:3e:94:25:0e:ef:d5:14:63:3b:
86:4c:14:f5:78:73:51:fd:91:41:ec:4b:82:a1:52:85:61:f3:
09:b2:ac:b2:a0:4e:98:91:69:db:da:a3:55:3f:92:ba:b8:f5:
5b:79:52:ed:71:c4:16:97:eb:9c:b7:b8:1c:0d:3a:08:9a:f4:
8a:ef:aa:92:29:8f:76:f5:4e:14:5d:cb:d8:c0:60:bb:d2:0b:
eb:65:e5:e3:9e:1f:37:db:1c:41:bf:96:4e:85:7b:43:64:65:
1d:be:bf:6b:d5:b5:e2:2d:1d:3b:ae:e2:53:0c:f5:4d:1b:d8:
cf:7e:88:f8:15:02:42:f5:44:f1:a1:4d:25:dd:5f:27:d9:14:
b9:ef:0f:0f:78:ac:c7:27:7c:5e:e7:11:a8:8d:13:ef:f8:e4:
d0:43:e0:c9:39:b3:d8:bf:36:0d:02:41:47:31:68:e1:9a:fd:
4a:33:a5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:01 2024 by rpki-client on console-fra.rpki-client.org