Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/THEf-RrA321NcXd1mpBRNz1-CtI.cer
File: THEf-RrA321NcXd1mpBRNz1-CtI.cer (raw, json)
Hash identifier: MSIkpzzFvMaxTDxREOQvaxEu95fWsCfPaHsPFtblU0g=
Subject key identifier: 4C:71:1F:F9:1A:C0:DF:6D:4D:71:77:75:9A:90:51:37:3D:7E:0A:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9FBFAF9588
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/bfe5e7-36cb-4ab5-8830-51cb34e1ebe0/1/THEf-RrA321NcXd1mpBRNz1-CtI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/bfe5e7-36cb-4ab5-8830-51cb34e1ebe0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 06:05:17 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 47807
IP: 94.125.8.0/21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 686115755400 (0x9fbfaf9588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:05:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c711ff91ac0df6d4d7177759a9051373d7e0ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d3:b3:53:30:03:19:ca:29:85:bf:19:a8:80:
90:01:67:0c:ed:d9:31:b8:19:00:66:3b:a7:59:aa:
1c:9b:4f:ca:8c:eb:e5:41:ef:ee:04:87:e7:6f:13:
bb:63:f7:99:45:77:be:eb:e5:1b:e9:4c:b3:72:3d:
d2:f9:3c:a9:b3:c9:5c:c3:ad:ea:dd:a8:18:00:c5:
37:9c:33:c3:2f:b9:35:46:4d:5b:38:1b:43:85:ce:
e8:ea:30:06:33:a7:02:59:b9:91:31:29:0b:87:f4:
ed:b1:e2:56:75:24:2a:b4:69:f7:9c:24:b5:34:72:
47:42:4f:cd:6f:be:30:08:c3:48:39:69:63:41:2e:
44:c0:69:1f:92:55:8e:a4:f6:9a:fa:7b:ea:88:e9:
69:47:19:81:71:c8:c8:e5:03:4a:a0:de:96:e3:d7:
4b:33:12:33:83:78:41:78:ae:be:87:e0:e2:36:04:
6c:7e:b5:93:e6:bc:a5:23:98:da:54:3c:bc:a0:2f:
a7:9c:f5:eb:9a:7e:cd:30:ba:87:af:b6:62:f6:32:
d5:21:53:32:e1:f2:8d:b0:45:71:71:12:a6:3f:1f:
29:bd:68:cc:0c:c2:ee:ea:4a:21:58:af:4e:0a:13:
74:b3:85:f6:0d:cb:cd:29:9e:00:10:73:03:12:f0:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:71:1F:F9:1A:C0:DF:6D:4D:71:77:75:9A:90:51:37:3D:7E:0A:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bfe5e7-36cb-4ab5-8830-51cb34e1ebe0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bfe5e7-36cb-4ab5-8830-51cb34e1ebe0/1/THEf-RrA321NcXd1mpBRNz1-CtI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.8.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47807
Signature Algorithm: sha256WithRSAEncryption
6b:16:53:f5:67:40:e5:57:66:6e:e9:a5:84:36:e0:8f:e2:39:
ae:2e:da:f1:c7:64:8d:75:5e:91:d5:e5:19:44:c2:82:9c:f7:
97:c9:15:52:9e:4e:c7:d6:16:09:e8:92:44:d4:65:12:f8:d5:
89:1d:36:b2:ad:7c:b7:0d:50:d5:87:79:55:80:b2:67:f1:79:
d7:3f:ed:f4:8e:88:29:6d:ca:51:f8:45:78:f4:b7:e7:57:20:
cc:56:d7:f4:a6:55:a1:3a:73:34:f8:94:a3:31:c9:e0:d4:c7:
93:b4:54:9e:b5:04:8e:ce:71:a3:12:bb:a8:74:be:00:c1:58:
3d:9c:48:55:f8:b7:34:71:bd:f5:17:90:37:44:f7:ec:ee:56:
16:e3:b2:4b:96:60:46:54:79:d5:43:12:f6:b5:ac:97:d4:63:
af:4c:7a:e1:92:2f:82:4e:42:7e:b3:f2:57:68:40:d6:55:3d:
08:58:69:c7:0f:e9:06:8e:99:e6:c8:bc:7e:18:b8:62:e1:e8:
56:98:86:b4:b9:62:02:de:8f:55:e8:0f:9b:4a:b2:7d:47:22:
b5:35:6f:b3:81:23:d6:82:41:52:4b:a5:e6:77:69:ef:93:57:
cc:fb:ed:c8:08:7a:22:f9:83:64:5a:65:8d:b3:38:d5:5a:c9:
1d:1c:c1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-fra.rpki-client.org