Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UReadPaL4Al_KbnuXdBrJ1Ul7Po.cer
File: UReadPaL4Al_KbnuXdBrJ1Ul7Po.cer (raw, json)
Hash identifier: tUHU1uFQZ0h4qlGvCqcfI3M+CLHpo3/ybyJov992ylU=
Subject key identifier: 51:17:9A:74:F6:8B:E0:09:7F:29:B9:EE:5D:D0:6B:27:55:25:EC:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9F5F8A7251
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/8eb764-8b4b-4724-bfd3-6422ed0f79f1/1/UReadPaL4Al_KbnuXdBrJ1Ul7Po.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/8eb764-8b4b-4724-bfd3-6422ed0f79f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 06:01:04 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 196912
IP: 91.216.87.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684502708817 (0x9f5f8a7251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:01:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51179a74f68be0097f29b9ee5dd06b275525ecfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:82:cd:19:ab:0e:3a:19:7d:5c:d5:eb:bb:25:
b6:17:8b:f3:31:0f:87:7b:1c:07:a1:aa:f9:9d:99:
10:98:97:37:0c:f2:dc:87:5a:48:dd:94:1e:95:ce:
d8:78:84:de:d5:26:f5:dd:ab:70:56:d5:ab:f1:e4:
9d:45:7c:84:32:05:b5:35:b7:7e:3a:2b:b2:94:2b:
2a:fe:9d:9b:8c:c5:e0:1c:fc:14:88:ac:17:e3:f4:
b0:2a:bd:54:c4:d2:aa:92:dc:c8:7e:8e:35:3e:34:
be:52:04:ea:b1:78:2c:04:9a:19:c9:7a:cc:97:23:
ad:4a:9f:1b:70:aa:75:4d:8f:0e:af:a3:e3:e2:17:
71:39:2f:d5:ec:62:f5:11:90:03:e0:57:88:08:45:
69:6d:8d:f6:53:05:94:3f:70:93:17:4c:b1:25:08:
be:23:8a:1e:03:2c:40:60:6a:e6:ba:cb:34:39:d2:
cd:b4:59:88:9d:7e:a8:b9:c6:9d:cd:51:58:ea:70:
05:a7:d1:13:5e:f6:7f:81:d0:64:64:7e:d7:4f:ce:
ac:1a:26:e4:dd:93:40:f4:14:29:83:d4:d1:28:e2:
73:ee:6a:44:14:b6:e5:4b:85:8c:be:51:e4:23:ad:
aa:91:09:d5:c7:cc:b2:1e:39:ba:ab:1f:2c:0f:9a:
77:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:17:9A:74:F6:8B:E0:09:7F:29:B9:EE:5D:D0:6B:27:55:25:EC:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8eb764-8b4b-4724-bfd3-6422ed0f79f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8eb764-8b4b-4724-bfd3-6422ed0f79f1/1/UReadPaL4Al_KbnuXdBrJ1Ul7Po.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.87.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196912
Signature Algorithm: sha256WithRSAEncryption
6a:37:43:6e:41:cb:f0:03:32:c1:12:da:93:49:36:d8:c1:9b:
50:e6:ac:95:11:1a:98:e5:55:87:19:c8:54:8d:76:63:17:c1:
2b:8d:32:d5:3f:fd:1d:cf:be:84:fd:55:ea:d9:89:aa:2c:fc:
e9:c2:33:f1:1c:c9:82:35:85:7e:b7:90:30:5b:f0:3c:f8:f7:
4f:15:8e:4a:7e:3a:0a:f9:fd:b5:ea:6c:69:d4:12:03:0b:ef:
9e:02:e7:04:88:91:67:bd:62:7d:37:d3:d7:93:05:f6:44:be:
ce:ab:cc:0e:7b:e1:d8:ed:8b:2d:42:ff:92:fc:7c:c1:f6:f6:
76:84:d6:81:60:5c:f5:54:1a:4b:f2:1f:1d:16:2c:e1:72:f2:
86:1a:3e:a3:61:c8:0c:76:f6:fb:26:87:e5:04:61:8a:d8:90:
45:25:65:d8:42:8c:c5:ce:c5:bc:62:1f:21:fb:32:db:2b:8f:
d0:16:37:98:8c:3d:3e:07:42:c5:25:c6:cf:18:06:42:b6:3e:
2a:52:a6:10:10:9b:a4:6b:a9:b6:66:17:f1:ff:b2:1d:46:0a:
8a:ed:02:fc:a0:18:db:bf:07:fb:13:62:b2:a7:e8:3d:b7:d2:
79:77:33:8c:e3:4f:39:ce:26:07:3a:17:82:6a:30:cc:97:ae:
56:48:a2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:31 2024 by rpki-client on console-ams.rpki-client.org