Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xp4ZHTDKWPEglG98j8IvUw5bXvY.cer
File: Xp4ZHTDKWPEglG98j8IvUw5bXvY.cer (raw, json)
Hash identifier: mJo0im8Ga0ivipGBvWmMp6nPFUdgXhkTn1N/Fb+PIAQ=
Subject key identifier: 5E:9E:19:1D:30:CA:58:F1:20:94:6F:7C:8F:C2:2F:53:0E:5B:5E:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9F06D22A2D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/bbc706-5118-446e-8f6d-7ff27431a194/1/Xp4ZHTDKWPEglG98j8IvUw5bXvY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/bbc706-5118-446e-8f6d-7ff27431a194/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:55:34 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 213045
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 683014236717 (0x9f06d22a2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:55:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e9e191d30ca58f120946f7c8fc22f530e5b5ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b6:40:d2:f4:2a:5d:e5:2f:a3:e5:68:26:f0:
00:4a:fb:28:a3:9d:8b:31:51:0f:62:75:c2:7e:4e:
49:f1:28:d7:f6:7f:ef:94:91:82:64:6e:31:a5:6e:
97:c4:3c:ea:52:42:55:78:db:2b:72:e9:a5:e5:d8:
64:14:e7:d9:27:d8:c0:5f:7b:7c:ab:1b:a7:53:1c:
f0:d1:b6:bc:fb:9e:77:6e:a0:ec:e0:d5:54:bb:73:
17:4d:4b:ce:96:0c:0f:5d:17:01:b0:9e:66:23:f2:
d4:cd:e4:15:76:57:a3:8e:65:09:c6:c3:b9:30:40:
56:9e:5d:15:68:e6:ec:a8:64:fb:57:60:9b:95:61:
7a:7f:eb:05:69:5c:b0:59:da:84:72:e9:e8:6a:b0:
84:29:57:9a:b2:41:3f:e3:77:b5:ef:65:ef:03:4a:
43:39:83:7b:a5:4b:9e:65:7e:19:75:33:e5:81:94:
46:71:7f:94:cc:8f:1e:99:94:a0:cd:bb:47:ee:d2:
0c:e2:ae:26:ee:d4:b7:bf:e5:dd:e1:a2:c2:47:63:
71:44:64:ef:b5:b5:20:2c:02:d3:84:94:29:25:8d:
49:ca:90:a3:da:d8:07:0b:af:9a:c5:3b:31:f3:75:
46:f8:51:12:38:ea:6b:2c:72:ac:3f:e5:67:8f:71:
e5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9E:19:1D:30:CA:58:F1:20:94:6F:7C:8F:C2:2F:53:0E:5B:5E:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/bbc706-5118-446e-8f6d-7ff27431a194/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/bbc706-5118-446e-8f6d-7ff27431a194/1/Xp4ZHTDKWPEglG98j8IvUw5bXvY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213045
Signature Algorithm: sha256WithRSAEncryption
90:31:d0:29:77:2b:67:b2:34:7a:50:7d:27:cb:f2:98:5e:56:
8a:ec:36:57:0e:7c:b0:1b:d6:04:52:1e:51:65:5d:b3:60:24:
33:9d:07:d5:10:20:33:f7:c2:4d:9a:f6:5d:30:1f:16:2d:d1:
57:75:38:95:1f:85:37:75:80:b0:96:a0:14:40:95:d1:7f:e9:
66:81:44:a7:c3:9a:44:4a:eb:0d:6a:27:39:b9:3e:ca:6e:60:
26:44:31:1a:9f:bd:6f:fa:47:7d:da:8c:00:40:38:97:57:4e:
3d:f2:fc:91:32:c1:ec:18:6c:89:3f:6c:62:00:ec:90:9a:80:
f0:af:fe:7d:da:db:29:4b:ec:47:92:25:27:e0:29:d9:0d:f3:
4f:98:34:41:33:d3:80:b3:76:4b:7b:f8:6b:eb:5f:61:9a:3a:
ae:d8:be:23:90:ed:ea:a5:3d:df:6a:1d:22:fa:c9:d7:82:bd:
80:d7:5a:a6:6c:d5:f0:72:ac:d1:a3:d8:51:e4:f5:96:40:84:
ec:b6:db:11:26:7b:06:cd:74:42:bb:ea:3c:82:77:6f:36:28:
7e:3a:e6:61:25:ee:4d:60:34:82:6d:2e:36:0a:16:b4:c9:99:
d9:ef:96:be:3a:87:63:9d:ad:d5:91:85:3d:f2:c3:18:34:dd:
18:a2:f1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:34:38 2024 by rpki-client on console-ams.rpki-client.org