Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TAZqeu9Lr8g3uPLjgDO33z2AfmM.cer
File: TAZqeu9Lr8g3uPLjgDO33z2AfmM.cer (raw, json)
Hash identifier: vGstMfNrZ86u3Kv5DMmGBmrvXyrpK0ge+fZkPu1zMYg=
Subject key identifier: 4C:06:6A:7A:EF:4B:AF:C8:37:B8:F2:E3:80:33:B7:DF:3D:80:7E:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A15F9D09A1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/40bf32-6a5e-4d3a-a137-7e86f8b2cee2/1/TAZqeu9Lr8g3uPLjgDO33z2AfmM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/40bf32-6a5e-4d3a-a137-7e86f8b2cee2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:55:33 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 212077
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 693093861793 (0xa15f9d09a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:55:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c066a7aef4bafc837b8f2e38033b7df3d807e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:fd:f6:0d:91:61:0d:e5:91:de:7e:ea:12:
8d:37:d7:96:b4:49:c8:7f:2b:c4:7f:1a:5c:a3:08:
8d:4a:54:2c:d2:ee:0f:0b:e6:c8:19:b2:0d:b6:4c:
07:5b:0b:a8:21:8b:c2:e7:f0:9f:a2:92:56:67:08:
c5:c2:22:39:3b:09:dc:75:2a:2c:e9:07:b0:89:96:
ef:91:81:8e:46:97:85:52:6c:38:54:27:19:95:f9:
05:c1:c0:75:d9:f2:d0:a4:a8:ce:11:6b:ea:41:39:
74:93:f0:f8:23:22:27:a2:3f:67:e0:5f:bb:cb:f0:
19:30:d3:1c:e0:bc:a6:8c:17:08:ca:ed:41:d5:0e:
97:81:b2:2c:71:9d:1e:6c:24:6c:95:52:c4:f3:26:
43:63:7f:1b:ea:7e:5a:86:47:8e:08:ca:b4:53:29:
ef:b5:08:8e:f7:4e:02:da:15:bd:48:26:4d:fc:72:
7a:48:cd:bb:97:ae:c1:56:c3:5d:09:95:14:97:25:
cb:e9:e7:da:e5:41:3f:09:69:bd:83:4b:bc:9d:16:
4c:7d:a0:ee:33:c0:9c:92:d8:22:9f:09:18:c8:89:
4c:47:72:1e:f8:29:f1:70:fe:03:ec:0a:7a:6b:a7:
16:74:02:21:5f:1c:74:71:11:f8:b2:d0:cf:9d:4e:
c7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:06:6A:7A:EF:4B:AF:C8:37:B8:F2:E3:80:33:B7:DF:3D:80:7E:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40bf32-6a5e-4d3a-a137-7e86f8b2cee2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40bf32-6a5e-4d3a-a137-7e86f8b2cee2/1/TAZqeu9Lr8g3uPLjgDO33z2AfmM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212077
Signature Algorithm: sha256WithRSAEncryption
aa:af:69:e4:d1:52:32:8c:30:ce:cc:c1:c3:b1:67:f0:23:a9:
37:48:ba:f8:60:d9:b2:27:14:a4:ca:01:0b:14:fa:64:e7:bf:
de:a8:b9:87:55:24:fe:2b:73:b2:b7:ce:84:28:d3:6a:7d:5e:
cb:13:41:b3:16:0d:ed:e3:f5:45:00:08:c0:52:91:70:d0:59:
69:e8:6f:c9:a1:1d:82:58:d0:15:45:da:16:60:e2:7e:f5:15:
4a:85:b2:77:01:42:06:fd:4e:43:98:92:26:1b:9e:4b:be:c9:
e8:19:6d:b1:c7:b2:b5:bf:56:12:62:ed:c6:5f:ac:a1:65:5a:
00:82:aa:2c:3c:8c:10:22:83:8b:c8:7c:1a:01:29:84:f4:f8:
49:29:7e:3f:57:a6:4e:6b:3e:ef:0b:4c:16:64:b3:da:e9:b2:
40:5b:de:6f:8e:fc:9a:fe:8d:7a:35:90:dd:cd:90:d3:d3:d8:
a4:64:c7:6b:3e:f8:9d:ed:19:ee:90:86:d0:9b:46:19:dd:04:
1f:8a:e8:bf:fb:80:83:be:7f:57:6e:63:94:a4:8b:ec:34:52:
b0:d2:3e:d6:3a:f4:45:35:5a:ab:50:bd:74:74:62:a4:30:e8:
31:6f:f1:13:ee:a0:dc:f1:e3:5d:aa:c1:eb:81:9a:cf:cd:23:
97:f3:ed:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-fra.rpki-client.org