Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ub8xKRAS-ErJM03JepcSD3TxZfk.cer
File: Ub8xKRAS-ErJM03JepcSD3TxZfk.cer (raw, json)
Hash identifier: 02kbgWii0F6j5+46LlHXhg3YQpmun4hL7oqR4FepXKA=
Subject key identifier: 51:BF:31:29:10:12:F8:4A:C9:33:4D:C9:7A:97:12:0F:74:F1:65:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B2EBDF5E46
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/acba2e-8e03-4ad7-a172-95ab1a35012e/1/Ub8xKRAS-ErJM03JepcSD3TxZfk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/acba2e-8e03-4ad7-a172-95ab1a35012e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 08 Jun 2022 11:56:44 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 205027
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 768461463110 (0xb2ebdf5e46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 8 11:56:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51bf31291012f84ac9334dc97a97120f74f165f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:9d:04:05:8d:dd:aa:59:8b:62:a5:bc:a8:
f9:5b:6c:ac:19:91:70:3e:56:a4:48:d9:1a:fe:26:
24:ff:89:be:4a:f4:0b:27:a9:89:33:10:14:df:db:
6f:cb:da:89:f1:b2:19:0b:92:51:f2:02:c8:38:f7:
6c:30:f6:77:d6:8c:75:38:7b:89:52:ab:94:de:4f:
07:7d:7f:13:8c:cc:71:aa:91:7f:6e:c4:c4:f2:91:
04:79:4c:d2:2f:74:a7:fc:2e:e8:b4:f2:c5:eb:09:
25:b4:69:60:79:eb:6b:8a:7a:b7:f0:08:57:e6:1a:
10:39:f8:17:fb:04:a1:a5:8f:70:1c:9e:a6:e1:cf:
48:7d:ac:8b:9c:cf:d3:88:00:46:9e:a3:06:03:3c:
49:7a:bc:34:26:da:b3:47:6f:bb:4f:30:50:98:9f:
b5:15:95:a0:66:67:31:1a:60:0e:65:06:7a:85:ce:
1e:8f:c2:5f:ff:7a:1d:24:24:07:cd:aa:c4:10:ea:
75:33:ec:76:df:84:66:8f:8c:1f:04:5c:c9:c3:27:
43:a6:03:ed:89:bd:67:9e:9a:cc:46:4d:53:ff:16:
e3:31:f9:2e:8e:f6:30:ac:b6:e4:4b:2a:c5:23:e6:
ec:a2:4c:6b:e8:12:a2:6c:77:78:68:6e:43:b9:a8:
93:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BF:31:29:10:12:F8:4A:C9:33:4D:C9:7A:97:12:0F:74:F1:65:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/acba2e-8e03-4ad7-a172-95ab1a35012e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/acba2e-8e03-4ad7-a172-95ab1a35012e/1/Ub8xKRAS-ErJM03JepcSD3TxZfk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205027
Signature Algorithm: sha256WithRSAEncryption
98:da:4b:11:5c:1a:5c:87:b3:a5:fc:e8:3e:75:36:25:11:e5:
ec:76:4d:13:48:11:2b:68:01:95:04:08:f5:3b:42:0d:0e:8e:
55:ce:5b:ef:68:a0:04:44:e1:f7:7f:30:fe:80:20:1a:ef:26:
ad:cf:0e:9b:96:c9:a7:f3:83:31:cb:86:ef:22:07:42:1f:68:
1b:d0:0e:0d:2d:9d:61:91:9d:63:58:9a:c1:2b:26:e8:79:ac:
90:11:cc:31:78:f7:fc:c1:ff:0f:a1:b6:f1:2b:49:80:c6:c7:
c7:a9:22:52:e2:88:5b:31:58:e7:a8:b9:60:3f:39:25:6b:79:
2f:ce:ad:54:27:6d:81:77:57:ba:48:1b:09:bd:ba:b3:01:b3:
ee:23:d3:1d:dc:42:a0:fb:ca:d7:8e:d3:f4:5d:df:ef:2c:62:
b1:9e:8d:ec:05:fe:48:74:0a:51:68:79:80:80:c5:83:af:15:
77:39:69:08:e4:c7:8b:fb:4c:66:b1:c3:6f:1f:3a:33:2f:25:
0a:e2:10:79:e9:62:cf:0d:f1:ba:96:1a:cd:b1:85:ec:43:60:
24:b8:1b:c5:18:2e:1c:4c:ba:ed:cf:04:99:a5:5f:43:97:7c:
4b:66:32:45:be:df:9a:78:c3:71:e8:29:fb:39:72:fd:75:d2:
3d:d0:ff:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:15 2024 by rpki-client on console-fra.rpki-client.org