Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ayCoCmsxZV0J-TBaTwpZzTMT3fs.cer
File: ayCoCmsxZV0J-TBaTwpZzTMT3fs.cer (raw, json)
Hash identifier: IBEQpwCLlwCFQDcf7GNyRE/klY6dafCaB57+K60U4aE=
Subject key identifier: 6B:20:A8:0A:6B:31:65:5D:09:F9:30:5A:4F:0A:59:CD:33:13:DD:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A7632B4372
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/a96d12-20db-4fdc-b7a1-24b5de33054c/1/ayCoCmsxZV0J-TBaTwpZzTMT3fs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/a96d12-20db-4fdc-b7a1-24b5de33054c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:59:28 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 29137
AS: 34444
IP: 84.22.64.0/19
IP: 195.234.248.0/22
IP: 2a05:a480::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 718923318130 (0xa7632b4372)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:59:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b20a80a6b31655d09f9305a4f0a59cd3313ddfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:c3:4c:e4:54:2f:0e:3c:f7:29:f4:16:2c:
b2:2a:45:51:ac:a0:b9:ff:7e:80:32:f5:80:57:14:
d0:09:19:1b:2b:14:48:a9:62:22:50:36:59:78:1d:
98:15:e1:fc:be:c5:94:cb:ce:9a:3b:7d:f5:a1:4a:
3f:af:1a:38:3d:e9:2c:ef:2e:f0:8d:5e:d3:45:b9:
52:7a:bb:b3:0f:53:af:43:2b:a0:09:a1:ed:ad:6a:
b6:6f:36:8b:80:3a:d5:33:66:12:a3:25:be:9f:cb:
2e:70:9a:e3:b6:5c:64:41:f4:80:ec:02:f1:01:82:
81:e9:ff:7c:5c:6a:26:89:d6:0d:c9:17:cf:3d:20:
37:85:ce:b4:c5:75:8d:e3:f3:eb:d7:a9:68:6d:a5:
a6:33:4f:bc:c6:48:6f:67:3f:8e:83:e8:bc:c9:94:
55:ff:79:fc:9f:d2:c3:17:64:e6:f7:23:f6:86:6e:
21:f2:99:f4:31:8d:90:c5:e7:90:29:39:e6:71:1e:
cd:d4:db:5e:7f:15:29:40:d9:39:13:16:7e:e5:49:
a1:f7:9c:0a:c0:61:5e:27:52:8a:c6:5b:2e:86:3d:
89:9d:9c:42:83:49:2c:0a:e3:c0:27:17:7c:a5:6a:
c7:ee:c9:fa:e1:d7:57:d4:d1:52:06:d8:bf:50:d8:
f7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:20:A8:0A:6B:31:65:5D:09:F9:30:5A:4F:0A:59:CD:33:13:DD:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a96d12-20db-4fdc-b7a1-24b5de33054c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a96d12-20db-4fdc-b7a1-24b5de33054c/1/ayCoCmsxZV0J-TBaTwpZzTMT3fs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.22.64.0/19
195.234.248.0/22
IPv6:
2a05:a480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29137
34444
Signature Algorithm: sha256WithRSAEncryption
a6:f9:df:b8:f7:02:76:2c:0a:bb:cb:2b:2a:7b:a8:d6:8a:d2:
45:28:b3:41:4d:c4:30:b1:49:5e:39:a2:a6:4c:b9:d5:74:1d:
9a:e7:da:42:29:7c:c0:c7:2f:f9:a4:0e:95:99:d1:78:02:23:
1d:ac:a2:08:2e:78:f9:34:66:cd:04:05:a9:c6:db:09:2e:45:
e3:15:3c:9c:4f:e5:50:c4:64:f2:e0:12:0d:d2:14:e5:fd:b4:
e1:69:ea:a8:97:1a:80:44:bb:6d:49:18:c1:c7:b9:fd:ec:04:
05:71:83:7e:ea:ee:90:1e:db:e1:14:b5:20:db:9a:9a:18:9a:
ef:3d:ea:c5:92:48:8b:fb:91:d4:1a:47:c0:76:1d:fb:90:07:
6c:7c:c5:3b:37:ca:1a:a8:b5:36:bc:55:0e:9d:aa:14:23:db:
fe:62:96:59:04:eb:d4:67:58:c3:75:80:7e:fc:52:56:1f:83:
44:6c:6b:2b:dd:69:bc:61:f3:99:f0:6e:1f:f8:a1:5a:6f:06:
11:a7:13:3e:93:1f:8e:18:ff:0d:75:f0:e8:d9:ce:f3:64:89:
78:4d:04:7b:46:83:0a:8e:60:99:25:db:84:18:24:6d:30:46:
45:40:c6:e3:fd:e0:20:4c:5c:03:65:93:0b:0a:0b:6d:b0:54:
10:56:ad:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:41 2024 by rpki-client on console-ams.rpki-client.org