Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SITyeaLLueE8kcSGjr5rpdOehko.cer
File: SITyeaLLueE8kcSGjr5rpdOehko.cer (raw, json)
Hash identifier: iDb+qzMiWvLrPbWnG5Aey+U7I5k7IssdT8G9nGoxbLs=
Subject key identifier: 48:84:F2:79:A2:CB:B9:E1:3C:91:C4:86:8E:BE:6B:A5:D3:9E:86:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B217940A66
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/cea727-ed89-4dd4-b6b7-e4d30c3dcf92/1/SITyeaLLueE8kcSGjr5rpdOehko.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/cea727-ed89-4dd4-b6b7-e4d30c3dcf92/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 23 May 2022 12:11:40 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 57788
IP: 91.235.52.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 764899756646 (0xb217940a66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 23 12:11:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4884f279a2cbb9e13c91c4868ebe6ba5d39e864a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:43:d5:10:60:49:15:a4:3a:ac:bd:d9:39:
24:d7:cc:d7:24:71:d7:ce:1e:6d:82:68:71:12:3a:
f2:a9:de:9c:81:10:15:1a:96:df:73:32:f8:b6:5e:
53:42:ce:7b:9c:97:39:2d:81:7a:62:e2:78:e3:2f:
4d:bf:f4:15:e0:c6:f1:26:28:56:ca:ab:94:30:27:
cd:0e:eb:5f:1f:d4:98:2c:33:03:51:f5:80:8e:b6:
2c:92:bf:91:22:42:7c:34:39:6b:70:7e:da:da:cd:
19:75:84:2a:c0:bd:1d:9c:b2:58:f9:25:2b:7f:30:
53:73:05:d1:dc:86:70:1e:3e:77:f0:34:c9:c7:47:
06:1c:a9:8c:aa:6f:a9:15:c3:e5:d1:3f:81:0c:b5:
38:a1:7d:24:0e:d5:2d:67:4c:ff:6e:7f:91:75:58:
07:a0:88:a1:1f:c4:ff:74:f2:99:61:36:09:5a:5f:
fa:8f:4d:e7:bd:b6:01:4b:9f:a0:41:93:5e:a5:71:
41:46:62:6f:7a:94:38:87:3a:d2:b0:b0:57:3c:c9:
8a:15:63:37:37:62:99:c2:14:22:11:c2:f9:88:38:
dd:92:f2:85:32:29:ac:51:0b:50:27:b0:ba:39:55:
d4:3a:3c:51:eb:8c:28:bf:8f:40:cd:9a:a3:1c:70:
20:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:84:F2:79:A2:CB:B9:E1:3C:91:C4:86:8E:BE:6B:A5:D3:9E:86:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cea727-ed89-4dd4-b6b7-e4d30c3dcf92/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cea727-ed89-4dd4-b6b7-e4d30c3dcf92/1/SITyeaLLueE8kcSGjr5rpdOehko.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.52.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57788
Signature Algorithm: sha256WithRSAEncryption
2d:c7:35:11:1b:d7:d5:28:80:fd:40:43:21:2a:6d:c1:9e:03:
51:c2:d1:1e:7e:fb:15:5b:3e:d8:56:ab:12:87:65:f9:40:84:
7f:b0:11:65:6d:67:a9:45:e1:fe:00:23:3c:79:1f:cf:fd:f1:
61:09:82:f0:92:39:d4:27:7d:1d:41:df:68:43:4f:71:06:46:
8f:53:34:bd:b4:24:8d:da:1e:7e:71:22:ff:f9:22:f2:ee:77:
40:94:81:b2:4d:76:0d:a7:14:12:23:88:4b:a9:94:5b:6d:e6:
c4:28:dd:85:3f:9f:07:83:96:03:7b:3a:bc:78:a8:5e:da:c3:
87:80:95:72:01:79:e4:fe:1e:1d:ef:5e:bf:9a:ce:2a:92:e5:
2a:f8:75:f0:7b:b9:17:1b:98:59:bf:de:47:0b:c9:df:8e:4f:
78:af:76:d6:3f:de:d0:e2:4f:3a:07:46:f2:69:85:44:5e:77:
df:26:bd:2f:8a:24:a1:59:83:d1:d6:fa:b3:d2:c8:8f:51:bd:
a5:6c:d6:b4:3b:58:fc:9c:99:0b:15:35:84:9a:3c:8d:7f:08:
b6:2c:52:00:e7:fc:39:bf:3a:01:d8:71:0a:8b:84:49:00:ce:
80:92:12:00:13:c4:61:25:07:b6:cc:37:09:76:d6:5e:1f:84:
b8:c6:3f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:34 2025 by rpki-client