Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ucljpc_pVrIoGjT7fGN4TPOEBJ8.cer
File: Ucljpc_pVrIoGjT7fGN4TPOEBJ8.cer (raw, json)
Hash identifier: 4xxQTzcX0JVBGqpAXaGb9TRgjlJ+lvEZLby8lGVs4rw=
Subject key identifier: 51:C9:63:A5:CF:E9:56:B2:28:1A:34:FB:7C:63:78:4C:F3:84:04:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: ABFD2969EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/d9b714-3482-4e90-9fd9-97f725eb80c5/1/Ucljpc_pVrIoGjT7fGN4TPOEBJ8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/d9b714-3482-4e90-9fd9-97f725eb80c5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 18 Jan 2022 09:26:16 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 43377
IP: 185.1.176.0/24
IP: 2001:7f8:f9::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 738686757358 (0xabfd2969ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 18 09:26:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51c963a5cfe956b2281a34fb7c63784cf384049f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:db:f9:d7:1b:8a:b8:d1:4d:73:9d:c4:c9:67:
3a:18:87:91:d9:0f:85:8a:72:a1:dd:32:13:b8:34:
39:b6:50:f5:95:0a:35:35:2e:22:7a:1d:b4:17:48:
c5:9a:45:d3:df:79:84:99:74:d3:5b:d4:60:98:fd:
1f:0a:f6:c1:68:42:b8:c0:93:8c:c0:39:88:e0:1c:
1e:c0:28:9d:d0:5c:fc:36:f6:11:06:14:0f:3e:60:
b0:a8:ff:88:6c:43:ba:c1:d4:5f:0f:10:8c:2a:d0:
94:33:cd:d5:c7:08:2a:b2:2c:c9:85:24:31:b9:ca:
0b:33:22:10:f5:d5:65:70:b8:d7:9f:6e:7c:6f:2e:
6a:29:ec:fa:89:be:59:bf:4a:b4:fa:ae:1c:d4:9b:
54:b7:35:0e:4c:8d:4c:09:4b:87:36:35:1e:c2:6d:
45:85:6d:1f:6f:5b:c8:80:0f:dc:45:6f:0c:36:55:
0d:69:6a:78:00:0a:75:98:a1:ee:8a:e1:1f:0f:2a:
74:fd:e3:be:bb:d2:38:f4:5a:dc:30:b6:63:54:70:
38:d9:a8:6a:ef:6a:5f:2d:01:0b:90:bc:15:92:3f:
d4:51:df:e3:31:79:e9:74:9b:4c:38:c5:ee:e1:08:
ad:57:cd:6f:fc:7a:e7:34:c8:d9:25:5c:49:9b:22:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C9:63:A5:CF:E9:56:B2:28:1A:34:FB:7C:63:78:4C:F3:84:04:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d9b714-3482-4e90-9fd9-97f725eb80c5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d9b714-3482-4e90-9fd9-97f725eb80c5/1/Ucljpc_pVrIoGjT7fGN4TPOEBJ8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.176.0/24
IPv6:
2001:7f8:f9::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43377
Signature Algorithm: sha256WithRSAEncryption
8d:79:db:40:07:6b:55:fd:f3:20:91:7f:45:7e:ee:28:44:5e:
56:9f:30:27:3d:3c:df:78:0a:34:5b:7f:b7:3f:6d:36:20:13:
8c:1e:17:a8:d2:fa:66:79:b7:80:bc:8c:1a:d5:3b:bb:e5:00:
93:3f:a4:55:6d:8f:5f:62:0c:12:fa:2c:ee:6d:4a:9d:fa:de:
a7:c4:73:95:ef:4e:07:19:72:49:f3:4e:55:5c:3f:b5:61:ad:
20:59:40:a7:26:dd:71:3e:54:8f:9d:13:e3:6f:a6:19:de:27:
0b:dc:af:03:dc:39:b7:34:4c:97:f5:4a:8f:14:17:e6:52:d5:
6e:af:83:8a:45:63:2c:df:2c:ec:e7:dc:a3:03:61:f9:70:85:
39:ba:0b:d0:b3:0f:41:24:a2:0f:7a:ef:35:e1:b3:72:11:23:
b4:92:41:cd:6d:8d:43:7b:60:53:50:66:87:76:3a:bc:03:c9:
90:61:72:cc:7e:13:23:62:86:ac:12:2d:9a:7d:5f:d4:7d:18:
f1:40:20:45:f2:ec:5f:3d:cb:33:00:2b:c1:72:1d:62:aa:ff:
3c:20:73:f3:19:af:77:45:e9:ff:bd:4c:00:01:aa:de:90:4d:
05:e9:f6:60:ad:8e:8f:20:75:6c:cc:09:1b:df:b3:d9:6f:31:
e2:03:d3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:16 2024 by rpki-client on console-fra.rpki-client.org