Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YSECY0IEv8GqfOgdcBh_a3ZKsQ0.cer
File: YSECY0IEv8GqfOgdcBh_a3ZKsQ0.cer (raw, json)
Hash identifier: UepppPMdEOgruH+PYgLqOhXcCTflFrk/oXeuQSh1PCM=
Subject key identifier: 61:21:02:63:42:04:BF:C1:AA:7C:E8:1D:70:18:7F:6B:76:4A:B1:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018215C9F26385E113774BCDD8CDA088EDA0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/e74249-250a-4524-bc8b-33e6bd58b521/1/YSECY0IEv8GqfOgdcBh_a3ZKsQ0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/e74249-250a-4524-bc8b-33e6bd58b521/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 19 Jul 2022 09:28:52 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 207334
IP: 2a0c:1a40::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:15:c9:f2:63:85:e1:13:77:4b:cd:d8:cd:a0:88:ed:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 19 09:28:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=612102634204bfc1aa7ce81d70187f6b764ab10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:95:ae:bd:74:2b:c8:b4:65:0d:8f:ad:57:46:
49:ae:86:dd:33:d1:8f:d3:87:cb:41:4f:d0:c0:49:
81:23:07:e6:61:06:5d:a1:be:b1:9e:85:22:48:0b:
c0:20:6f:b8:94:84:2a:94:5d:52:5a:b4:d5:9f:db:
83:53:46:1a:74:f6:5f:8b:2b:13:49:9e:91:f7:75:
89:24:68:64:11:10:bf:d0:c4:ba:38:0b:eb:13:36:
84:48:36:31:aa:2d:78:40:ec:29:1f:2f:ab:3e:71:
b8:66:1c:f2:bf:44:d3:88:2b:93:6b:76:ac:5c:5a:
f7:c7:07:44:7c:29:90:43:4e:e6:03:e5:52:93:75:
d5:19:e9:37:e3:a2:c0:ce:a7:73:05:e3:a2:72:09:
f1:e4:2a:09:86:42:b3:7a:6b:a2:04:2c:35:dc:50:
e3:46:08:14:49:ea:a8:5f:5d:ef:6f:7f:92:8f:3c:
59:03:ff:e8:b3:01:ad:af:01:29:ee:bf:e7:f0:10:
8d:6b:dc:48:ea:69:31:df:b3:69:59:f5:09:ec:66:
94:d7:40:7f:77:80:7e:ca:39:4f:b2:ed:01:3c:1e:
3c:e1:c3:de:53:88:02:82:98:40:8f:09:fd:5c:80:
5b:a6:37:d6:fe:73:cf:ad:cb:bb:4f:30:de:fe:d9:
be:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:21:02:63:42:04:BF:C1:AA:7C:E8:1D:70:18:7F:6B:76:4A:B1:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e74249-250a-4524-bc8b-33e6bd58b521/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e74249-250a-4524-bc8b-33e6bd58b521/1/YSECY0IEv8GqfOgdcBh_a3ZKsQ0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:1a40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207334
Signature Algorithm: sha256WithRSAEncryption
09:f1:e4:a1:c3:28:39:cb:af:8e:56:42:73:c0:73:c3:20:89:
cb:a4:8d:85:46:25:dc:c2:f4:69:e3:92:c8:fc:40:e5:64:43:
f3:72:a5:4a:4a:34:e4:df:bf:48:50:20:20:f2:3c:92:fe:3d:
31:ba:90:64:b7:fa:ff:14:3f:6b:20:55:a1:aa:76:d7:40:1e:
88:83:7c:55:58:26:40:f1:83:c5:d7:11:3f:c9:ef:e4:95:09:
f1:a5:ff:6f:3f:19:73:0d:cb:27:6a:0b:17:80:4b:52:4c:e4:
ca:00:4c:9a:07:40:5d:8b:de:a2:b0:23:26:b9:12:b1:b4:a4:
7e:a3:0b:f3:a5:91:6d:dd:11:69:00:84:a8:f3:fc:98:cc:c5:
01:68:b2:2f:e1:88:6e:bb:5d:94:bb:64:1c:75:32:8b:1f:15:
db:af:fc:84:c8:84:5b:6a:ca:5c:8f:22:d3:97:07:32:9e:a9:
3a:fd:b7:9b:58:a9:c1:3a:95:57:ee:9a:be:63:82:51:e9:05:
9b:63:90:c9:02:1b:b7:2f:a5:07:9f:0f:c5:8a:95:fe:c1:51:
a0:f6:15:82:3a:73:ec:cd:b5:af:b6:5a:27:6d:d1:33:4a:7e:
d3:2b:d0:ae:f5:47:07:43:6b:13:e7:dc:82:67:dc:69:38:31:
97:b9:57:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:09 2024 by rpki-client on console-fra.rpki-client.org