Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_K6pjMCrUE3FOTFEJ57FmsMaIdM.cer
File: _K6pjMCrUE3FOTFEJ57FmsMaIdM.cer (raw, json)
Hash identifier: KoXHc3Ham5P3XTKVjUVKqYPdcsiiIG/pHG79oqTKJpo=
Subject key identifier: FC:AE:A9:8C:C0:AB:50:4D:C5:39:31:44:27:9E:C5:9A:C3:1A:21:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A27CB7ED40
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c6a6c-18da-4320-8c76-157e71126718/1/_K6pjMCrUE3FOTFEJ57FmsMaIdM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c6a6c-18da-4320-8c76-157e71126718/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:55:15 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 44228
IP: 92.42.0.0/21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697877130560 (0xa27cb7ed40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:55:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fcaea98cc0ab504dc5393144279ec59ac31a21d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c7:93:46:49:c5:a6:8d:fa:2e:13:7a:b4:09:
cc:c8:63:b0:91:08:4c:94:65:0e:a5:43:94:01:f3:
b3:54:75:1f:78:3e:86:d9:46:5b:93:63:89:c8:61:
d6:68:68:e6:32:8b:8b:63:54:5f:a6:01:00:89:35:
c7:f0:d8:d2:74:79:d0:d5:e9:bb:90:a2:8a:23:9d:
bf:7b:98:6d:af:b4:ae:35:1b:23:88:af:31:dd:5d:
c0:c3:45:b9:f0:97:af:d4:7e:51:2f:9f:56:05:5a:
1b:49:73:f3:c3:a2:fd:b4:72:da:08:bb:69:93:a5:
61:7b:96:cf:38:06:d2:2d:49:fd:bb:8f:36:fa:af:
57:ac:2b:a8:a9:33:b2:b3:51:0c:64:9c:62:46:c1:
31:37:68:13:20:9b:48:f9:e9:8f:41:49:b9:7f:83:
34:1c:dc:fc:6a:8f:41:f3:d2:10:39:34:5d:43:7f:
c2:f8:a8:59:40:bd:5d:44:dc:01:b7:9c:c4:16:bb:
1b:33:65:57:88:e7:d3:32:20:f6:fd:5b:43:d1:38:
a5:9a:b4:43:56:81:1b:d6:ab:a6:36:1d:ec:bd:56:
a8:65:dc:05:aa:bf:ff:1a:97:02:0d:0c:41:1c:c7:
d8:7d:e5:7a:db:f8:04:7b:0a:bf:b9:60:03:ac:c2:
c9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AE:A9:8C:C0:AB:50:4D:C5:39:31:44:27:9E:C5:9A:C3:1A:21:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c6a6c-18da-4320-8c76-157e71126718/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c6a6c-18da-4320-8c76-157e71126718/1/_K6pjMCrUE3FOTFEJ57FmsMaIdM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.0.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44228
Signature Algorithm: sha256WithRSAEncryption
70:ee:ed:62:b8:3e:3a:69:ab:fb:be:73:04:47:da:8c:d7:31:
b5:e9:76:02:f3:41:04:ac:1e:8f:3f:3d:48:d2:a0:cd:ed:6c:
56:2a:36:cb:95:97:3a:fa:46:59:ea:06:eb:ac:57:6f:fc:0d:
3e:a3:4a:bf:f0:15:02:ab:01:b9:3a:6f:3f:0d:b6:d2:85:4e:
c6:0b:7e:63:73:ef:67:3d:65:1d:bd:cd:cc:e7:2e:c0:81:9d:
a1:19:f5:43:b9:90:25:37:8e:9c:fc:60:b5:d1:5e:62:62:1b:
6c:42:18:75:db:a8:99:d8:90:6d:86:9d:e1:bd:be:c3:22:6a:
09:b6:c0:dc:e6:97:75:e8:9a:1e:b6:d5:2e:c9:bc:c4:45:ed:
7e:2d:26:d5:42:cc:9b:ea:71:7b:d0:93:47:74:14:e8:b1:12:
ac:d3:e4:9c:aa:da:fd:11:93:dd:5d:b7:73:b5:ee:0a:22:5f:
cd:40:ae:2c:03:5f:13:cd:74:e0:fa:ad:da:fe:02:d1:33:52:
4e:9f:01:7b:39:b3:24:ed:0f:12:7c:d9:f3:99:51:2d:f4:8a:
f7:3d:da:46:28:72:2f:cc:07:22:ad:8e:79:ec:cd:a2:83:0e:
71:17:fc:75:d2:6c:01:69:cd:7a:ce:3d:45:a9:f4:32:9d:b1:
13:78:27:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:36 2024 by rpki-client on console-fra.rpki-client.org