Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZUQZtoGqaUA1vfHj4_LA3gxeflM.cer
File: ZUQZtoGqaUA1vfHj4_LA3gxeflM.cer (raw, json)
Hash identifier: cKn8A6O9TAH9qh3wWe7Saf0/7faHDnwkzfK+yS3+KzM=
Subject key identifier: 65:44:19:B6:81:AA:69:40:35:BD:F1:E3:E3:F2:C0:DE:0C:5E:7E:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A0B583199A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/d8a409-81a3-4ea7-8f72-a3d4edb024a7/1/ZUQZtoGqaUA1vfHj4_LA3gxeflM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/d8a409-81a3-4ea7-8f72-a3d4edb024a7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:00:38 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 211553
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 690240035226 (0xa0b583199a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:00:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=654419b681aa694035bdf1e3e3f2c0de0c5e7e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ae:cf:0e:e8:77:15:c3:31:e5:cc:7a:ee:cd:
c6:e3:28:15:9a:15:6d:cc:da:41:52:a3:ca:b2:1f:
71:21:d0:c7:b3:a9:67:02:27:e8:95:ef:b3:a1:e0:
c0:1a:09:de:65:2e:5f:e7:aa:d6:45:80:a7:5e:a9:
06:c6:f8:eb:a9:90:fc:fa:45:b0:ac:47:16:3f:40:
0f:c7:ee:3b:59:cd:21:af:00:03:07:73:ef:34:83:
32:89:14:2a:9c:dd:75:bb:c0:56:b4:bb:0c:f5:78:
e9:23:81:90:67:6b:72:23:d6:08:e9:42:47:ec:f6:
d2:39:7a:e4:ea:1b:99:69:50:dc:c1:2c:fc:05:26:
04:02:56:97:30:a5:65:89:6a:22:8e:66:4b:d8:b9:
d2:9f:9e:d3:30:7b:a9:6e:fd:09:d1:6e:bd:1f:b4:
c4:ce:ed:d3:de:53:e7:12:c1:29:fb:c8:46:55:7f:
70:d3:27:5e:7b:33:38:71:fb:ab:62:f0:c7:37:94:
21:6e:63:db:97:1f:20:ed:1f:e9:83:26:15:23:3f:
df:3a:81:2f:3a:bb:0a:12:90:01:62:f3:3a:26:1d:
0b:0b:57:0d:8b:58:f0:53:db:e1:db:f5:8b:ec:87:
16:e9:8e:e0:f6:02:77:72:12:27:0d:5a:3f:aa:a0:
8d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:44:19:B6:81:AA:69:40:35:BD:F1:E3:E3:F2:C0:DE:0C:5E:7E:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d8a409-81a3-4ea7-8f72-a3d4edb024a7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d8a409-81a3-4ea7-8f72-a3d4edb024a7/1/ZUQZtoGqaUA1vfHj4_LA3gxeflM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211553
Signature Algorithm: sha256WithRSAEncryption
69:85:57:0a:ab:6f:a0:68:f2:10:62:a9:a4:bf:0d:6c:96:c1:
6c:61:93:71:0d:85:a9:1a:4d:c4:16:ab:5b:45:4b:73:50:96:
82:cc:57:0c:e1:be:2e:d9:8e:e4:63:36:60:87:31:6b:e1:b9:
fa:c7:4d:3c:fb:ed:99:0f:56:47:bc:a9:56:21:19:d7:91:5c:
b7:81:ec:58:3f:e2:d3:b8:9e:d2:c8:88:01:9b:c4:02:94:20:
a6:b0:6c:33:7b:39:45:74:fa:19:ba:71:a4:89:d9:06:0d:a8:
1f:cc:24:4c:9a:a4:43:99:5f:0a:a2:d2:af:05:1a:b7:67:95:
40:d2:40:be:58:04:49:12:1b:9e:9a:e8:33:74:d7:e3:e9:1d:
5a:e9:d0:1d:3b:2f:2d:51:03:bb:71:ac:fd:86:01:1e:72:ad:
41:37:11:11:e9:48:d2:d6:81:75:5f:e3:b2:d3:3e:f3:ba:ac:
cd:6c:9c:30:e2:01:44:99:76:26:9a:bf:ab:5f:1a:f5:e1:88:
a4:f7:16:eb:b1:c2:80:8a:56:61:32:a4:8d:d6:51:58:72:5f:
85:2c:a7:be:5d:e9:c8:59:a3:7c:7a:74:e6:61:bb:54:2c:80:
b4:e1:f4:78:74:07:19:8b:80:89:9c:71:d8:19:cd:7a:c5:40:
ea:bb:d1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:26 2024 by rpki-client on console-fra.rpki-client.org