Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UPk79CKmHfK0buaoZ2pTgR59gUA.cer
File: UPk79CKmHfK0buaoZ2pTgR59gUA.cer (raw, json)
Hash identifier: pK0nte6bGTF0uLCH0f5eTYro5EKeGSLsIdby1dT7+3s=
Subject key identifier: 50:F9:3B:F4:22:A6:1D:F2:B4:6E:E6:A8:67:6A:53:81:1E:7D:81:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B30AFCBA65
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/12/50F93BF422A61DF2B46EE6A8676A53811E7D8140.mft
caRepository: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/12
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Fri 10 Jun 2022 14:48:40 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 204725
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 768983480933 (0xb30afcba65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 10 14:48:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50f93bf422a61df2b46ee6a8676a53811e7d8140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:26:d4:0e:20:b9:42:0e:63:de:c5:1b:25:
b7:f8:0a:e4:0f:47:fc:5b:b1:3c:d9:2e:d3:f4:49:
54:b2:a0:79:c0:96:23:c2:3e:24:33:a3:48:f8:fe:
5c:09:d3:0d:35:e9:6c:c1:c3:fa:77:90:4e:de:bc:
a7:59:fd:63:3a:68:19:34:aa:02:1c:0a:0b:8d:b9:
ad:47:f6:07:b1:10:f7:9f:7a:a5:33:a6:93:d2:5f:
a3:58:61:ac:c1:46:86:8b:9d:d4:58:05:de:8e:ae:
39:80:2b:dc:77:40:d8:23:05:07:8f:bc:8b:64:68:
1d:47:61:bf:bb:f6:c2:54:fc:8e:15:ba:c3:02:25:
ba:a1:e7:62:e3:e0:74:72:ea:9d:d5:d1:15:df:e9:
4d:d3:49:f7:3e:ea:ea:c8:2b:13:72:3b:25:7e:f5:
42:f5:74:c7:f1:96:7c:33:cc:f7:0a:92:ed:30:44:
1c:71:ac:71:de:59:6e:e0:45:0b:e4:51:ad:3b:3a:
1c:bc:c8:02:db:78:79:af:62:63:b2:0b:d3:1a:45:
c0:13:68:b5:fb:c1:4e:81:61:48:61:47:0a:f9:d9:
a0:43:eb:c0:65:95:bd:d9:8b:64:2e:51:17:7f:39:
c0:37:9d:c9:91:82:40:00:f1:17:20:f8:e5:41:56:
9f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F9:3B:F4:22:A6:1D:F2:B4:6E:E6:A8:67:6A:53:81:1E:7D:81:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/12
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/12/50F93BF422A61DF2B46EE6A8676A53811E7D8140.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204725
Signature Algorithm: sha256WithRSAEncryption
5a:12:a6:23:dd:af:5f:fe:05:e2:4a:c6:23:4c:c0:75:b9:d9:
f7:b3:95:b7:5b:ee:17:23:0a:3a:14:f5:2e:b9:73:6b:98:2d:
07:84:ee:8a:0e:ca:48:de:b9:2a:2b:70:e9:5d:51:b2:63:46:
13:6d:ce:1a:06:85:01:53:b6:1a:f3:0d:35:4e:77:e9:66:f3:
1b:8f:24:c1:66:29:95:ca:69:d2:8b:2a:d6:92:b4:2b:e5:d8:
cc:9a:ba:8a:f1:17:02:31:ea:92:e8:29:32:16:93:d2:54:23:
dc:8c:e9:06:a8:69:37:ce:28:89:3b:5b:92:4c:b5:3c:11:92:
57:ef:bd:d5:9b:75:99:00:2f:cb:65:db:6a:18:3c:a9:5e:30:
b5:da:3b:35:30:68:8f:c9:69:b3:82:bb:37:f4:1e:e6:fe:6b:
b9:a8:e0:33:f1:a5:a3:29:b4:42:0d:a8:2d:99:08:08:87:90:
40:62:01:63:cd:b1:20:17:c5:47:da:69:b8:e2:28:b4:26:e7:
37:af:f9:41:73:b8:e0:86:f8:63:3f:3d:ab:af:eb:44:d9:25:
e5:dc:23:00:c4:c0:26:34:7b:f7:89:9e:56:6d:9f:10:61:0e:
7d:0c:d7:6e:36:ee:ae:d7:0d:25:f7:b9:5d:3b:10:81:b1:36:
ec:fe:c5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:30 2024 by rpki-client on console-ams.rpki-client.org