Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PQjNIOKEgfKbrHGWM-0hi6JhIEE.cer
File: PQjNIOKEgfKbrHGWM-0hi6JhIEE.cer (raw, json)
Hash identifier: ++0iuON8oFx2B8X8GlfXzOI7vbe2gyOXaCW4xO87lbY=
Subject key identifier: 3D:08:CD:20:E2:84:81:F2:9B:AC:71:96:33:ED:21:8B:A2:61:20:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A2B775EEEE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/8457f3-9d7d-44ac-9467-68d7e36e67b9/1/PQjNIOKEgfKbrHGWM-0hi6JhIEE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/8457f3-9d7d-44ac-9467-68d7e36e67b9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:57:53 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 59536
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 698862661358 (0xa2b775eeee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:57:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d08cd20e28481f29bac719633ed218ba2612041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f3:6e:af:15:e3:84:a5:a8:ce:94:1a:37:fd:
b9:bd:bf:5d:83:cc:93:17:6f:ec:c7:d6:b8:b4:97:
23:f3:73:ce:89:c7:be:52:08:35:57:ca:aa:25:b7:
61:28:8b:52:e1:09:77:ac:fe:77:8c:ec:e6:84:37:
3c:22:4b:1b:01:10:73:65:d7:b8:1d:44:cd:89:ec:
35:4a:f3:0b:2a:5f:ae:37:ce:12:b9:bb:79:82:17:
fd:26:2a:4d:5b:7b:50:8b:34:a1:9e:42:9b:a1:aa:
1d:43:a1:d4:76:2f:99:44:5b:3a:9e:5f:8e:c0:49:
1d:6f:94:98:e8:a7:b4:26:d5:e9:20:48:82:f7:b1:
a0:b1:e6:3e:98:33:63:d1:44:6c:3c:93:da:66:b5:
ea:93:09:8a:78:4c:33:6b:d2:04:5b:9a:fd:72:4c:
19:da:87:bb:8c:05:6d:f2:8e:4f:5b:ab:08:1d:87:
5f:dd:78:0e:3d:de:bd:b1:ab:52:91:9f:a6:06:3a:
ee:c2:4b:db:ab:8b:10:bb:38:57:e7:e0:60:ea:26:
5e:77:1c:e9:f1:32:9c:34:08:5e:47:3a:9c:f8:04:
f7:81:db:f7:0b:09:2b:05:cd:85:ae:d5:da:75:8b:
8e:1c:03:22:c6:9e:22:94:7b:c3:0c:00:9b:63:b8:
f3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:08:CD:20:E2:84:81:F2:9B:AC:71:96:33:ED:21:8B:A2:61:20:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8457f3-9d7d-44ac-9467-68d7e36e67b9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8457f3-9d7d-44ac-9467-68d7e36e67b9/1/PQjNIOKEgfKbrHGWM-0hi6JhIEE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59536
Signature Algorithm: sha256WithRSAEncryption
51:1e:4c:f9:da:c7:60:79:e1:41:d8:99:b0:70:2e:0f:8d:69:
99:57:cc:bb:07:23:ea:3f:b5:1e:59:59:f4:a7:2f:94:6c:16:
ce:dc:42:c8:cd:15:93:88:71:bf:f4:35:57:c1:c7:59:07:1d:
db:ae:af:59:90:b4:3a:19:3a:c5:49:0b:2d:52:3f:29:33:b7:
be:d9:c3:d9:35:9c:cb:42:32:74:06:c6:95:dd:dd:d3:9d:95:
81:81:77:e3:d6:43:d5:12:d1:26:e5:b6:ac:30:cc:e1:4f:e0:
d7:5e:c0:d3:68:19:8c:02:fa:04:fc:b7:f2:57:5d:53:a8:3d:
d5:b0:e3:fa:e3:50:e0:68:8f:36:2c:a1:80:fc:98:30:75:bb:
99:13:71:01:e3:b0:79:d2:9a:cc:33:89:10:0d:c1:a5:c3:ff:
b9:50:96:c2:d1:d9:52:c7:34:9e:0d:20:ef:41:59:a5:3c:9c:
2c:a7:5d:be:a1:b5:1a:ed:da:0b:cf:39:62:01:a8:43:9c:a2:
c4:b6:80:a5:3a:9e:ba:c4:80:4e:94:73:9d:3e:73:e2:53:d2:
b4:95:60:b3:91:f2:4c:02:b7:71:c5:da:36:c7:27:b1:4f:68:
92:66:5d:cd:6c:97:2b:26:b5:5d:10:b6:f2:e9:89:99:e1:36:
b7:bf:38:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:55 2024 by rpki-client on console-ams.rpki-client.org