Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PYbqOOAh8KlgFSz7cBC0sOLp-ec.cer
File: PYbqOOAh8KlgFSz7cBC0sOLp-ec.cer (raw, json)
Hash identifier: Cd1tmxtIiDGoeMl+r94FHzAeA/pAzHSVdh5GtN794GM=
Subject key identifier: 3D:86:EA:38:E0:21:F0:A9:60:15:2C:FB:70:10:B4:B0:E2:E9:F9:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A7FCE214CA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ec6b-b9b5-463f-81a1-389669483cce/1/PYbqOOAh8KlgFSz7cBC0sOLp-ec.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ec6b-b9b5-463f-81a1-389669483cce/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:07:08 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 40970
IP: 45.147.56.0/22
IP: 91.197.68.0/22
IP: 91.223.133.0/24
IP: 185.212.240.0/22
IP: 185.242.0.0/22
IP: 185.244.156.0/22
IP: 185.255.236.0/22
IP: 2a09:9000::/29
IP: 2a0c:a400::/29
IP: 2a0d:3280::/29
IP: 2a0d:f3c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 721502213322 (0xa7fce214ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:07:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d86ea38e021f0a960152cfb7010b4b0e2e9f9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:08:84:84:87:df:38:b0:c8:b0:e5:a8:9f:
89:45:43:d3:b4:7c:03:e8:dc:bc:a3:08:22:af:f3:
8a:72:88:d7:71:5a:1e:67:e1:c8:a9:fc:90:9e:15:
fa:62:c0:bc:6b:aa:e8:2e:45:74:8b:1f:f9:75:a2:
09:a5:0b:97:c7:e5:0d:46:ce:72:42:74:e7:b7:3f:
f0:82:12:3b:91:66:4d:97:e6:a4:a7:99:e3:cb:5a:
e7:b8:09:f2:be:ae:bd:48:ef:20:7b:2a:c5:01:2e:
75:81:43:2e:bd:e4:8f:ab:15:3c:56:2d:90:b5:77:
36:3b:69:d8:9e:8b:93:1e:da:c2:f7:6b:7c:0b:0b:
06:2a:81:3f:0e:ef:c1:9d:1f:8d:3e:71:c3:89:d9:
6c:e4:39:33:97:24:a5:de:66:0f:2f:93:8e:60:f2:
64:c2:db:71:4b:56:25:30:d2:7e:2c:71:1a:b7:9b:
01:ab:8e:cc:f5:3e:2c:87:97:ed:6c:0b:dc:64:99:
58:b7:af:13:71:cd:f1:82:e5:8c:03:ba:a3:9a:9a:
46:1b:3d:3a:53:c5:25:d5:44:75:03:ba:3e:10:5f:
01:41:d1:38:2f:8e:0b:09:fd:5f:88:af:61:2d:6e:
b4:91:3d:a0:ce:5e:12:60:d4:3e:32:f1:07:32:f7:
4f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:86:EA:38:E0:21:F0:A9:60:15:2C:FB:70:10:B4:B0:E2:E9:F9:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ec6b-b9b5-463f-81a1-389669483cce/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ec6b-b9b5-463f-81a1-389669483cce/1/PYbqOOAh8KlgFSz7cBC0sOLp-ec.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.56.0/22
91.197.68.0/22
91.223.133.0/24
185.212.240.0/22
185.242.0.0/22
185.244.156.0/22
185.255.236.0/22
IPv6:
2a09:9000::/29
2a0c:a400::/29
2a0d:3280::/29
2a0d:f3c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
40970
Signature Algorithm: sha256WithRSAEncryption
53:4b:d6:11:1b:58:7b:53:a8:7f:da:57:fa:8b:a2:3d:9f:9f:
ee:f7:77:61:fa:ca:9c:30:36:cf:49:e8:84:38:54:85:14:d7:
55:54:89:f9:c4:7f:2a:1d:0a:f1:94:ad:49:4e:4f:d6:2f:6a:
56:2c:75:bc:30:ad:78:10:42:e2:2f:1b:fc:fc:f0:4f:c6:c5:
ea:b9:41:83:8f:3c:e8:a3:9b:4e:76:4e:9b:d0:51:3f:c6:5e:
12:9d:85:44:d2:11:59:1c:a5:3b:28:cb:49:d5:56:f6:a7:d2:
19:02:ec:3d:b7:a3:e9:a4:01:c7:29:51:c1:e2:8c:e1:36:c6:
d9:27:3d:d1:03:4a:02:be:2d:e1:41:16:0e:c3:7f:9f:ee:a5:
55:8a:26:9c:8e:f2:ca:ce:03:02:ea:f0:67:98:88:93:9c:cf:
fb:04:e7:60:d3:97:bb:63:40:46:6c:2e:16:f2:ad:cf:35:7b:
59:fd:97:d3:91:73:bf:bc:25:61:48:d9:c8:61:a2:90:e9:77:
3f:29:6f:20:cc:eb:45:d6:f3:cc:a9:c9:29:bc:1c:b2:8d:ba:
b4:8b:bb:20:ca:1c:93:76:6e:01:46:b5:79:c7:2b:2e:41:a3:
6e:ee:ee:cb:45:dc:21:8f:de:9e:b9:aa:f7:f3:a6:a3:fe:28:
fa:0b:63:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:56 2023 by rpki-client on console-fra.rpki-client.org