Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TotXQEAP6OQxG6RtyL51vmvuYz0.cer
File: TotXQEAP6OQxG6RtyL51vmvuYz0.cer (raw, json)
Hash identifier: 6nSvETd6KSVL/gleEekvA5rRdF4TOlj9gbA4HZ0jjCk=
Subject key identifier: 4E:8B:57:40:40:0F:E8:E4:31:1B:A4:6D:C8:BE:75:BE:6B:EE:63:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01833DF109B7D151B98D8BB3E50AB2BB653C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/a8c31e-e8d7-4dca-bfe9-7ced5de235c5/1/TotXQEAP6OQxG6RtyL51vmvuYz0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/a8c31e-e8d7-4dca-bfe9-7ced5de235c5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 14 Sep 2022 21:39:10 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 202881
IP: 2001:67c:2be8::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3d:f1:09:b7:d1:51:b9:8d:8b:b3:e5:0a:b2:bb:65:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 14 21:39:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e8b5740400fe8e4311ba46dc8be75be6bee633d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:32:83:b4:98:76:25:68:7e:69:89:0d:76:
ba:11:46:37:75:6b:85:04:cf:84:e0:fc:22:e7:4f:
e0:3d:24:b4:a4:50:76:a3:15:47:ae:7d:1a:24:8c:
70:9a:2a:9d:1b:2c:ef:90:98:79:ca:6f:71:ee:9e:
f4:67:7e:37:45:22:59:26:80:c0:b6:4b:ac:0d:55:
dc:e9:de:5e:9b:e0:75:08:b8:b2:a7:be:00:1e:42:
29:9c:97:de:15:14:96:99:0d:5c:11:77:b3:ed:7a:
8b:eb:de:10:01:56:26:1b:fa:61:ea:86:a5:ad:36:
c3:ad:05:42:1f:70:c6:4b:b4:b0:98:a8:8c:c2:69:
42:28:3f:c4:4f:8b:40:27:05:6c:48:4f:2a:65:83:
5a:5f:49:70:90:6e:2e:4e:74:ab:e2:af:76:61:54:
02:dd:f5:b0:52:64:a4:d9:9b:c9:66:81:00:42:27:
06:51:68:fb:d6:14:08:02:14:9f:01:ff:65:d3:11:
5c:a9:65:8b:66:a7:75:25:64:31:71:37:71:e7:a6:
e9:c0:be:ee:17:02:15:1a:78:78:0f:a7:37:bf:c3:
57:ea:91:0b:c3:5d:9c:df:aa:07:4e:98:3b:8b:43:
3f:11:2b:ca:61:fe:a7:00:c1:9d:5e:f7:63:46:cb:
ab:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8B:57:40:40:0F:E8:E4:31:1B:A4:6D:C8:BE:75:BE:6B:EE:63:3D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a8c31e-e8d7-4dca-bfe9-7ced5de235c5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a8c31e-e8d7-4dca-bfe9-7ced5de235c5/1/TotXQEAP6OQxG6RtyL51vmvuYz0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2be8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202881
Signature Algorithm: sha256WithRSAEncryption
4a:48:44:4a:5d:35:eb:28:ac:71:db:4e:20:2e:d6:43:88:56:
dd:07:3f:f8:39:8a:64:28:21:bd:f2:9a:2d:68:26:9b:54:af:
ff:03:29:d9:b7:b5:9b:c0:f5:20:f4:62:6d:e9:f5:23:85:e7:
37:c3:c0:c0:a7:e2:b9:34:5d:cc:0b:30:ae:68:03:b9:4a:5f:
01:40:5b:0c:86:57:16:cc:62:7d:51:f6:72:85:d5:76:2f:d3:
9e:48:f8:e4:39:ca:14:9b:c6:83:a1:25:3d:dd:c4:b5:bb:de:
5f:ad:ae:f1:88:4c:4e:a7:c2:dd:86:bd:cb:57:60:1c:20:49:
75:da:7f:b8:86:d8:02:94:39:7f:41:a6:cf:73:dd:17:45:7e:
c8:85:18:4b:89:b8:5f:9e:89:0f:25:f1:2f:3c:23:49:60:0b:
a2:9c:19:34:38:64:bc:82:bb:c0:00:27:41:6f:cf:06:4f:91:
65:7e:d0:4a:1b:cd:f0:a5:bf:6d:cf:58:1a:b7:c1:78:95:3d:
96:06:14:b4:5a:f7:09:ba:f3:d0:2b:d8:c7:cc:6d:c4:9b:75:
98:f6:6f:90:ca:8b:23:2f:5f:ec:4d:34:49:fe:2e:16:a9:77:
72:2c:55:2a:63:e5:59:98:f4:fe:b5:6b:29:0c:d0:ac:ee:65:
a4:f6:af:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-fra.rpki-client.org