Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SdgqIL8hdqjDIcH7v_fEZgIn2O4.cer
File: SdgqIL8hdqjDIcH7v_fEZgIn2O4.cer (raw, json)
Hash identifier: C81Q32rGWW7NqCl6X8DEb2XxNn6LCZGcCm4pVoEun/s=
Subject key identifier: 49:D8:2A:20:BF:21:76:A8:C3:21:C1:FB:BF:F7:C4:66:02:27:D8:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AB588C9AB6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/a80ad4-c48c-40a8-b09d-d39f9e2b68ca/1/SdgqIL8hdqjDIcH7v_fEZgIn2O4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/a80ad4-c48c-40a8-b09d-d39f9e2b68ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 16:10:39 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 198127
IP: 193.150.67.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 735925017270 (0xab588c9ab6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:10:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49d82a20bf2176a8c321c1fbbff7c4660227d8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:08:29:f1:c2:00:73:0f:7c:6b:d4:6c:de:d1:
ce:13:7b:91:c8:ef:1a:7a:a2:e7:52:ad:cb:98:01:
1d:5f:b7:73:18:59:e1:28:00:8b:dc:a4:ce:80:0f:
c7:eb:4c:f1:c2:1d:20:6b:7f:9b:e4:b1:43:62:0e:
6d:8c:ef:f6:d3:19:8b:d8:db:a0:f6:ef:fa:5e:9c:
a0:9c:da:b8:64:8e:f0:40:55:e7:62:00:9b:e5:77:
54:39:99:f3:aa:37:54:cd:7c:64:c8:c0:ea:2b:c0:
e1:80:03:4d:f1:51:6e:90:91:2b:56:50:f1:3c:12:
0d:de:22:a2:26:ae:e3:e0:6f:3c:15:c1:c6:a0:04:
1c:5d:51:1b:51:5d:f3:d1:2f:11:9c:96:32:2c:fe:
c1:9d:9f:6a:a3:27:31:61:68:7f:a3:2b:db:ff:fc:
2d:4b:4c:e5:66:37:4d:02:42:5c:ff:81:24:50:79:
f4:ca:a8:17:14:93:b4:19:4e:7c:29:2b:37:ab:e2:
81:0f:ad:2e:6c:4e:c7:b8:8d:79:e9:ea:06:da:f5:
f2:7b:fe:40:8c:f8:94:1d:19:4c:66:82:23:2c:91:
d7:75:13:a6:0c:07:81:17:cb:0a:31:c8:41:55:7f:
6d:33:2f:3c:9c:27:ae:47:6b:3c:89:d8:5a:9a:27:
39:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D8:2A:20:BF:21:76:A8:C3:21:C1:FB:BF:F7:C4:66:02:27:D8:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a80ad4-c48c-40a8-b09d-d39f9e2b68ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a80ad4-c48c-40a8-b09d-d39f9e2b68ca/1/SdgqIL8hdqjDIcH7v_fEZgIn2O4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.67.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198127
Signature Algorithm: sha256WithRSAEncryption
54:eb:52:f5:4b:6a:3d:c0:d6:2e:ad:a2:56:37:49:9b:4a:07:
23:8f:a9:65:3b:b2:e1:6e:fd:7a:5f:d2:06:22:24:3f:43:20:
c9:e5:6d:01:4b:08:5e:41:db:5e:8d:a3:4f:0d:24:f6:31:d3:
a3:8a:00:58:35:1c:62:ef:af:3d:85:e5:93:f3:34:09:8e:f2:
f2:27:b1:f0:3d:a8:dd:03:c0:26:4d:69:32:3a:f1:ac:4d:7c:
df:6c:3f:8e:34:35:c4:af:13:92:94:08:cd:27:e0:eb:38:c1:
dd:e3:bf:7f:3e:90:40:78:52:13:88:5d:6a:37:ae:d6:22:6b:
7b:74:e8:44:07:01:53:78:26:f3:3d:e3:e8:8e:e0:2e:8c:87:
d8:19:1e:0b:ee:b2:bf:89:d0:c6:48:89:19:76:c4:89:1b:52:
83:f0:59:c1:bc:c5:7b:87:57:d1:48:87:00:9b:60:40:c1:ad:
4b:17:57:86:81:30:0f:b6:ed:c8:a2:90:e0:bc:6a:8d:16:fa:
1e:a2:56:ac:f0:2c:ca:1f:c7:c6:c1:37:92:50:37:2d:d4:f3:
b4:95:69:7d:db:73:a5:75:54:6c:b1:c8:d8:dc:47:59:70:91:
ca:a5:c2:44:ae:bd:a6:aa:9d:16:f9:1c:38:d0:01:89:2b:30:
1b:09:bd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:55 2024 by rpki-client on console-ams.rpki-client.org