Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T9lf8oCpk-qUUtTh-z38kfDQlXU.cer
File: T9lf8oCpk-qUUtTh-z38kfDQlXU.cer (raw, json)
Hash identifier: ljVLu7JBHhiu1cjNzargl0F6S62fAEOzMFZHBA7IHLc=
Subject key identifier: 4F:D9:5F:F2:80:A9:93:EA:94:52:D4:E1:FB:3D:FC:91:F0:D0:95:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 98B58D737E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/5/4FD95FF280A993EA9452D4E1FB3DFC91F0D09575.mft
caRepository: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/5
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Sat 01 Jan 2022 00:00:58 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 211998
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655880975230 (0x98b58d737e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:00:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fd95ff280a993ea9452d4e1fb3dfc91f0d09575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ac:29:e6:2f:fb:96:32:15:d5:f9:52:8f:20:
71:b6:21:ee:14:14:2f:f6:54:69:dc:83:e8:06:9b:
08:fa:1d:10:bf:4e:6f:cc:4a:ba:e3:bf:71:3b:ce:
cd:80:c4:ab:49:b8:a3:45:a3:96:aa:65:6c:c6:58:
a2:be:a1:bf:2c:e3:c3:91:4f:34:1d:3f:92:9e:af:
ec:b0:8f:8f:d7:03:95:2a:c2:e5:b9:f1:3b:e5:88:
4e:b3:8c:a1:de:d4:f5:c8:1a:14:84:2b:f6:9d:b3:
11:4b:06:ba:2b:a2:44:96:10:1e:e4:a7:32:18:98:
b6:d2:fa:85:7e:84:21:5b:b3:c6:2b:85:29:d6:4a:
bb:15:5e:5a:c1:a3:53:17:4a:a9:d0:8f:9f:88:30:
ac:38:e7:a3:ad:0c:d6:81:6d:32:57:c0:44:42:4b:
27:a5:1d:07:33:71:08:11:de:ae:5b:74:e3:a9:98:
28:b3:f2:6e:ed:87:4e:da:6f:4d:14:03:f3:39:09:
c7:96:b9:90:5a:45:49:d9:14:eb:b3:89:57:22:81:
99:ae:b3:71:70:50:c3:ca:b1:df:30:55:9a:9c:bf:
2d:dd:5c:4c:c0:f7:a8:5e:1d:27:b6:fb:ca:73:d7:
d4:5e:59:34:da:2c:c1:9a:30:57:23:75:48:bf:3a:
a4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D9:5F:F2:80:A9:93:EA:94:52:D4:E1:FB:3D:FC:91:F0:D0:95:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/5
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/5/4FD95FF280A993EA9452D4E1FB3DFC91F0D09575.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211998
Signature Algorithm: sha256WithRSAEncryption
96:fc:26:d1:a7:fa:60:ae:56:38:8a:23:bc:34:19:ac:f3:0e:
e5:33:fe:89:ed:01:18:a2:e1:28:fa:3c:0e:21:c2:e1:c9:66:
a4:c9:fe:a5:9d:22:c5:8c:30:22:9d:94:40:81:ff:5b:36:7e:
7f:2f:97:26:ae:de:3d:6e:a5:47:b8:b3:86:3e:6d:66:84:02:
69:91:16:8a:04:32:77:f2:1d:93:12:6e:22:9c:44:14:c9:24:
90:59:ec:c8:38:b2:b6:79:f6:33:47:1d:17:ee:a4:c3:1d:bf:
be:df:27:f5:92:aa:51:04:15:9e:b7:32:e3:41:af:71:21:98:
5f:02:4a:c4:0a:06:55:39:60:c7:ef:f9:8d:9f:89:fb:c3:fd:
9a:92:c1:a4:4d:ce:02:df:db:3c:dd:eb:64:92:63:49:82:ca:
f7:cf:b4:b7:02:06:26:99:e6:a3:8b:aa:6b:c0:6a:6c:91:4e:
9e:ff:12:6c:74:36:d2:3d:0c:15:a9:c5:01:5b:8f:5f:e8:40:
ea:1c:df:1b:5b:92:cb:b0:4f:7f:a7:a2:bb:83:95:f5:15:ce:
6c:1f:28:5c:f9:38:c9:43:c0:58:32:48:34:72:47:7e:fe:5b:
94:27:b6:56:dc:b4:50:78:2b:a9:18:df:a8:53:73:4d:d2:32:
bd:9a:43:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:54 2024 by rpki-client on console-fra.rpki-client.org