Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SootY6LpI1jjqa62ezIe0Niw3Xc.cer
File: SootY6LpI1jjqa62ezIe0Niw3Xc.cer (raw, json)
Hash identifier: M84KzHw+nfx7bfzrgSYfJNIfKFpxFJb1y73eYkhuxzs=
Subject key identifier: 4A:8A:2D:63:A2:E9:23:58:E3:A9:AE:B6:7B:32:1E:D0:D8:B0:DD:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9C25BBC12F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/9d6f66-6515-400d-89e9-f43e94430c12/1/SootY6LpI1jjqa62ezIe0Niw3Xc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/9d6f66-6515-400d-89e9-f43e94430c12/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:59:59 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 47158
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670647959855 (0x9c25bbc12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:59:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a8a2d63a2e92358e3a9aeb67b321ed0d8b0dd77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ce:f9:25:d6:2a:7b:80:b0:e9:48:ce:1a:4e:
f9:e0:04:58:05:d5:b8:67:10:b9:7f:0e:b0:53:7a:
00:8b:ec:a4:66:83:43:16:0f:05:bf:32:9a:2e:45:
08:04:b6:fc:db:74:c1:45:55:a6:a2:30:84:00:b5:
ef:2f:8b:16:c4:b3:d2:34:54:ea:f6:3b:a6:cc:0d:
5b:92:5f:69:11:c8:b8:23:1d:22:78:87:e8:1c:27:
4c:11:b3:80:40:e3:56:4f:7f:1d:1f:1f:f7:f2:68:
8a:f4:82:9a:22:d8:0e:ba:e9:57:bf:7f:d4:51:50:
5b:5d:78:dd:a1:c9:da:54:87:73:2c:23:40:a4:24:
68:78:2f:3e:05:cd:ea:14:68:04:9a:4c:ef:60:ed:
c8:58:65:cf:62:76:e4:cc:42:39:45:3d:32:29:08:
ac:12:05:26:e0:e0:b0:ec:1e:9c:94:5a:80:f2:3c:
e9:b3:fb:91:b7:c8:29:f5:81:b9:39:1f:83:07:6f:
59:25:a8:21:88:a8:36:b8:d0:05:6c:52:31:df:4f:
b6:45:9d:26:24:24:41:e9:ac:a8:23:46:30:3b:b8:
6f:87:03:00:e1:b5:1f:43:5a:1b:6c:87:04:58:e0:
91:34:36:62:aa:b4:52:5d:be:26:a0:c7:f8:5b:9c:
7c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8A:2D:63:A2:E9:23:58:E3:A9:AE:B6:7B:32:1E:D0:D8:B0:DD:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9d6f66-6515-400d-89e9-f43e94430c12/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9d6f66-6515-400d-89e9-f43e94430c12/1/SootY6LpI1jjqa62ezIe0Niw3Xc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47158
Signature Algorithm: sha256WithRSAEncryption
22:9e:5f:5e:fc:d5:c7:0a:36:64:10:b3:6f:1f:de:00:55:64:
c9:a2:aa:13:03:22:6e:c8:d0:93:c2:ab:f2:52:23:90:ec:e6:
d5:58:ee:31:c3:5f:28:dc:f3:07:d5:d8:5f:75:29:49:60:87:
e6:67:08:cd:ff:ca:54:8f:bb:53:80:bc:45:a4:cd:28:ad:37:
ec:95:d1:43:6f:fb:2c:08:47:53:7b:de:a0:6b:ac:c5:90:f3:
76:8f:63:9f:ab:97:14:5c:10:89:8e:9b:cd:50:24:c8:fb:d9:
fb:88:f8:68:4d:3b:70:c9:60:1d:61:a4:d6:14:df:e1:c9:23:
89:a7:a0:ca:5d:39:ad:cd:19:d9:1f:9c:82:60:60:75:85:46:
49:6b:5b:2c:bb:0a:78:a5:f6:95:ae:9f:90:59:f0:6d:81:86:
d8:ae:73:5c:20:2f:95:fc:76:62:8b:73:1b:97:f5:13:cd:5a:
3c:df:4e:ce:66:98:a8:6f:22:d7:14:db:b5:de:f9:7b:8d:af:
c4:db:22:38:5d:41:0f:45:d7:15:fb:99:3e:c5:e7:87:c3:72:
9b:47:19:25:0c:0e:d9:8c:05:f1:ea:25:30:b7:d0:39:e1:81:
b4:2a:f9:18:e4:fe:24:70:49:c4:2a:6c:ee:a0:9e:24:b6:a0:
24:ec:63:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:59 2024 by rpki-client on console-ams.rpki-client.org