Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TL5jXXkgELq7byOjtMe3-vfPUyA.cer
File: TL5jXXkgELq7byOjtMe3-vfPUyA.cer (raw, json)
Hash identifier: gm4SfxQ3LubacQjZkQwn3H6T6fojlnhBqQYVbgdlve8=
Subject key identifier: 4C:BE:63:5D:79:20:10:BA:BB:6F:23:A3:B4:C7:B7:FA:F7:CF:53:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A43391A748
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/b8ae95-3e8c-4d4a-9e36-e2311a15ce5e/1/TL5jXXkgELq7byOjtMe3-vfPUyA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/b8ae95-3e8c-4d4a-9e36-e2311a15ce5e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:02:04 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 51019
IP: 195.206.242.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 705239820104 (0xa43391a748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:02:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4cbe635d792010babb6f23a3b4c7b7faf7cf5320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:18:e9:1c:31:f0:06:6f:ed:95:51:dc:8f:
08:8c:7c:2a:d4:e4:fa:bb:3a:e2:17:0e:38:ad:09:
94:ed:55:b9:4e:eb:72:3a:f0:33:f8:52:bd:29:73:
d9:27:6e:5b:0d:6e:00:0d:71:51:75:4e:bd:5e:d0:
de:c7:ca:d1:1f:61:5c:45:e2:98:c8:e8:c8:4d:65:
ef:eb:d5:fe:a8:d4:f0:ec:6e:5c:0c:52:ad:30:00:
f8:f5:57:ef:47:86:52:15:15:00:ed:b1:17:84:09:
54:a4:5b:f1:e4:a1:e0:23:d8:c0:99:13:b9:85:6b:
16:c7:38:99:88:af:44:af:67:1c:89:d2:c5:e1:d9:
65:62:96:ea:42:6e:e8:7d:16:2e:94:e3:36:83:f6:
1a:e1:fb:67:25:96:90:93:91:83:e4:84:b4:af:4c:
8d:39:29:c7:54:ff:72:ba:91:f7:5a:27:f1:c9:be:
60:04:1f:b2:11:11:c1:08:d0:95:d8:81:e2:0b:b2:
1f:53:de:06:a2:c5:6f:7c:dd:23:79:4c:6e:97:aa:
69:23:a6:d9:f9:fd:7c:a6:5f:35:2a:b7:cd:f7:e0:
b0:43:74:25:aa:7d:25:1b:f3:a1:63:aa:c0:6b:52:
4c:18:cb:d5:43:82:e1:2a:69:67:e8:94:26:d7:e2:
4c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BE:63:5D:79:20:10:BA:BB:6F:23:A3:B4:C7:B7:FA:F7:CF:53:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8ae95-3e8c-4d4a-9e36-e2311a15ce5e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8ae95-3e8c-4d4a-9e36-e2311a15ce5e/1/TL5jXXkgELq7byOjtMe3-vfPUyA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.206.242.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51019
Signature Algorithm: sha256WithRSAEncryption
72:47:b6:c7:e5:28:bb:74:2f:00:a4:e7:38:19:1e:8e:ba:f7:
55:d9:de:fe:d1:97:96:17:cc:34:ee:82:97:54:1a:73:27:59:
a2:ba:90:ce:d2:fa:51:7a:2f:c8:b6:ef:fd:2b:c7:fd:bd:4b:
66:a7:75:2b:1a:3e:8e:af:88:f8:b6:80:66:fe:44:c5:a5:8e:
8b:48:dc:00:59:17:49:37:f5:4e:3e:56:8a:1b:08:9d:f9:59:
7f:9f:3c:26:d1:ba:d3:74:47:e3:d6:a6:99:82:7a:89:d7:e7:
7b:e9:00:01:ac:ab:20:cb:b6:1f:78:b0:33:25:b1:a6:1c:97:
e3:7c:a0:d4:21:3f:fc:fd:8e:65:ec:f5:86:2d:43:79:a1:b0:
a9:5c:b7:7b:2f:cc:51:d6:5e:61:9e:83:b1:54:f9:2d:9f:a7:
81:e5:46:7d:fe:6b:81:88:44:26:73:71:7d:06:01:ee:fe:fe:
f1:de:60:a1:c2:d1:90:e4:fd:cc:a7:c8:ab:53:e8:24:e2:84:
db:7f:08:69:73:1a:9d:8f:99:5a:43:1e:27:14:0a:64:3d:58:
3b:44:12:2c:da:99:77:38:46:7e:55:f0:48:5c:6a:50:ab:c6:
c0:91:6c:a0:ce:d9:18:b9:69:f2:cd:72:98:9b:bb:1a:66:0e:
90:95:26:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:10 2024 by rpki-client on console-ams.rpki-client.org