Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XXWfZerVfOinWFQAwmtlE1WrNBA.cer
File: XXWfZerVfOinWFQAwmtlE1WrNBA.cer (raw, json)
Hash identifier: eGRMnNPqy0itEyxe+/mwyU4k2Wzzv+/FCJSPE/8DCRw=
Subject key identifier: 5D:75:9F:65:EA:D5:7C:E8:A7:58:54:00:C2:6B:65:13:55:AB:34:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9DAFB94BDA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/8652d3-7efb-4f96-8d79-f136432498ff/1/XXWfZerVfOinWFQAwmtlE1WrNBA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/8652d3-7efb-4f96-8d79-f136432498ff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 04:53:14 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 12828
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677258021850 (0x9dafb94bda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:53:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d759f65ead57ce8a7585400c26b651355ab3410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:2d:68:d7:ce:b4:d4:d4:24:ca:34:f2:f1:
ce:5f:92:fe:4b:c3:65:99:fd:0a:e3:4a:f3:14:d4:
94:b5:af:95:13:56:77:4b:b0:8b:f5:e1:48:86:e8:
7e:25:d2:89:24:2a:29:34:15:e0:76:1f:63:0f:37:
93:58:53:70:ca:ac:47:b5:72:88:e0:02:0d:7d:d6:
72:48:56:46:6f:f7:61:e1:99:97:c2:7a:07:c0:b6:
22:96:6e:1d:f4:88:0e:5e:66:5a:5a:a7:37:6b:e2:
22:3f:18:8c:7a:3e:c2:f0:7a:a7:8d:ef:8d:4d:45:
12:e1:a2:34:c4:bb:3b:fc:1b:ae:85:9c:16:f0:80:
4c:6e:c5:2a:4b:6b:51:7e:7d:bb:cb:a5:f8:b7:74:
11:c9:5a:b3:a0:df:ff:c3:e9:f5:08:48:20:78:a7:
b7:c5:e4:9e:21:54:b3:a1:74:18:24:3f:1d:45:cc:
2d:09:c2:31:97:9f:be:70:f4:d6:b0:1a:8f:dc:94:
71:a4:f6:5f:b7:de:1f:43:9b:d3:2a:d1:58:35:46:
7b:51:05:72:c4:ed:70:7f:ba:86:34:7c:0f:66:dc:
86:91:0d:97:d9:25:83:d9:60:ba:77:1b:e2:e7:b4:
b0:13:b7:8e:fb:a1:98:7a:85:5a:12:ea:85:0f:44:
a2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:75:9F:65:EA:D5:7C:E8:A7:58:54:00:C2:6B:65:13:55:AB:34:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8652d3-7efb-4f96-8d79-f136432498ff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8652d3-7efb-4f96-8d79-f136432498ff/1/XXWfZerVfOinWFQAwmtlE1WrNBA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12828
Signature Algorithm: sha256WithRSAEncryption
0c:84:04:f0:ce:30:73:6a:5c:00:b9:35:0e:c5:96:8c:ef:33:
8f:c3:c1:e3:0b:06:82:51:90:53:c6:3e:e1:db:d6:a6:1d:74:
9d:3b:7e:50:3e:66:98:0e:4d:63:db:cc:af:a0:ef:d5:37:5b:
4b:11:a0:2c:12:c9:2f:47:d5:7d:e6:b7:79:04:97:02:21:cd:
47:92:aa:07:f6:8f:aa:be:33:af:44:38:07:aa:21:70:54:79:
b2:f1:5b:a9:ee:70:25:ac:40:de:89:d9:3f:7c:7c:7d:b0:5e:
0c:90:64:96:dc:c1:10:12:40:4a:02:56:a4:0a:c7:04:a1:2e:
f3:96:50:6f:fc:c0:d7:29:e8:03:23:13:35:85:62:1a:57:a6:
7b:35:d5:ad:31:24:15:60:2c:23:41:41:2e:3f:c5:25:37:d0:
be:12:71:fb:55:a1:00:11:83:e5:03:b7:20:79:69:50:36:86:
ba:2a:41:a4:bb:e9:58:5c:c6:ba:eb:98:8b:90:8a:1e:f0:ba:
87:68:22:7d:32:3c:60:f9:f3:59:75:ee:d3:1a:d4:81:ed:16:
ce:b3:3e:56:a9:c0:58:9b:77:f2:e7:02:a8:71:47:fc:ee:64:
5d:5b:86:19:0e:ae:40:d0:3e:af:9a:de:05:dc:81:1c:67:14:
f2:2e:3c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:34:33 2024 by rpki-client on console-ams.rpki-client.org