Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2tji15dN5cAL7yEcVEd84-u_Ec.cer
File: a2tji15dN5cAL7yEcVEd84-u_Ec.cer (raw, json)
Hash identifier: hsVdo+qyEPUKVXYXgTo2Sp7iXM3kIh0m4jfU+vd9lMQ=
Subject key identifier: 6B:6B:63:8B:5E:5D:37:97:00:2F:BC:84:71:51:1D:F3:8F:AE:FC:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A6A6115D38
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/65ae1d-5c6c-4d50-8dea-1f9c52103600/1/a2tji15dN5cAL7yEcVEd84-u_Ec.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/65ae1d-5c6c-4d50-8dea-1f9c52103600/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:04:41 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 60305
IP: 194.113.252.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 715750726968 (0xa6a6115d38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b6b638b5e5d3797002fbc8471511df38faefc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e3:fe:dc:fa:4d:ea:15:99:fd:31:36:a2:15:
8b:95:c9:d3:66:f4:bd:f9:63:11:25:a4:d3:35:5d:
55:b5:28:78:69:f7:ab:ab:16:b2:15:4d:63:f5:ea:
8c:46:10:9f:13:3b:99:4d:37:95:39:32:29:0d:3b:
52:06:3f:4a:3a:1f:a8:ef:7d:e0:1a:64:2a:b0:5a:
1f:57:e7:e8:60:2a:83:81:4a:47:f8:e3:ec:a2:ad:
0d:15:47:c7:45:cb:eb:e2:a1:a1:36:0c:cd:c8:71:
df:5d:fb:86:64:8f:42:34:da:b4:0f:13:0e:6d:54:
79:25:22:72:50:4e:ad:40:bd:cf:dd:9c:da:20:8d:
83:da:fc:f6:af:4c:f2:8d:15:e0:7e:93:ff:85:07:
32:cb:41:9c:9f:7f:d5:7a:ff:43:d6:4c:b8:f7:0a:
4b:f1:61:db:54:da:d1:15:33:0f:c5:69:7f:2b:82:
b9:52:3e:79:a4:4e:98:f0:86:13:24:36:01:e8:bb:
14:06:92:17:dc:e2:ce:82:51:30:ab:ab:ab:a5:c8:
62:ea:17:1d:ab:25:0e:06:5b:7c:ec:88:2a:8d:b5:
bb:c3:04:8a:9f:62:51:6e:1c:be:9d:37:6c:78:84:
33:a0:50:b2:00:e1:2c:9a:21:c0:4c:27:5e:f1:e2:
68:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6B:63:8B:5E:5D:37:97:00:2F:BC:84:71:51:1D:F3:8F:AE:FC:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/65ae1d-5c6c-4d50-8dea-1f9c52103600/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/65ae1d-5c6c-4d50-8dea-1f9c52103600/1/a2tji15dN5cAL7yEcVEd84-u_Ec.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.252.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60305
Signature Algorithm: sha256WithRSAEncryption
73:68:01:5f:d5:13:44:17:aa:3b:3c:d0:89:94:a4:0b:c6:cf:
0f:26:2f:9e:a5:5e:ea:86:cf:de:6a:4e:fd:34:91:ef:6a:d0:
35:89:11:12:c1:93:68:08:50:fb:9c:5a:1e:19:8c:06:70:bd:
03:42:13:a9:8f:8f:49:91:bb:f1:8c:e2:80:8e:03:d7:b7:39:
c5:c5:6e:ea:ca:dc:54:15:ee:f0:c1:92:be:58:cc:71:c0:46:
66:24:3d:ff:4d:8f:44:99:b0:71:29:af:fd:dd:96:0e:7a:e2:
2d:98:14:8e:02:9e:7a:12:6e:fa:fe:ae:36:4e:4e:61:a2:d6:
b5:e9:ab:cf:41:26:81:5b:5e:77:b9:c3:0f:fe:bc:fa:0a:40:
32:e5:94:25:b8:f1:07:7f:c0:e4:9d:41:50:16:36:6c:ca:9e:
a8:9c:cd:02:3f:b6:6a:55:bf:21:bb:be:a9:ed:a4:bb:8a:69:
29:5d:32:bc:12:b0:0e:61:ef:47:42:e3:27:7d:dc:3b:33:da:
41:e3:da:6d:04:bc:0b:4e:eb:4c:81:81:d7:1e:0f:85:cb:7e:
35:09:73:ca:10:9d:5a:2b:f0:fb:c6:6e:8d:59:1c:69:fa:47:
d5:51:ca:00:99:f2:46:50:a9:3d:05:ea:05:e6:10:b6:c1:db:
35:45:a8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:14 2024 by rpki-client on console-ams.rpki-client.org