Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b-Jw9eX6MOH3nQDZZZXBfafoGJ8.cer
File: b-Jw9eX6MOH3nQDZZZXBfafoGJ8.cer (raw, json)
Hash identifier: 99Uc9rqq+Xr8gOrqPb+z77sNdFZVO2YsAazbDotlh/o=
Subject key identifier: 6F:E2:70:F5:E5:FA:30:E1:F7:9D:00:D9:65:95:C1:7D:A7:E8:18:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A642C25189
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/a5b8ef-8801-4b24-b42d-a984df1bedd0/1/b-Jw9eX6MOH3nQDZZZXBfafoGJ8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/a5b8ef-8801-4b24-b42d-a984df1bedd0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:59:38 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 49159
IP: 93.95.208.0/21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 714084602249 (0xa642c25189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:59:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fe270f5e5fa30e1f79d00d96595c17da7e8189f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:50:ac:88:b3:a1:02:8c:ef:ff:6d:d4:10:
0a:12:20:54:99:b4:c8:67:2c:82:fb:dd:18:ea:87:
cb:02:31:b1:9d:44:40:03:a2:8e:49:96:a3:e2:a7:
17:89:1b:90:1d:aa:cb:0b:3d:69:29:03:e0:f3:96:
f2:fa:d4:5e:6c:94:87:a0:c9:db:ac:ad:e9:3b:25:
65:1f:5e:1c:d8:e3:ed:2a:b9:a5:de:0d:c3:30:e9:
cb:b7:75:18:02:44:42:e4:0c:23:c6:b9:2d:5d:75:
36:c3:a2:13:df:47:44:ab:06:fb:7a:11:ef:f4:ab:
d1:99:25:75:ec:85:3a:ad:ce:09:cc:1d:d1:ee:62:
72:c8:dd:96:1c:4d:98:4f:06:b6:f1:c6:ad:24:f4:
2d:a2:18:7e:62:d9:16:bc:8f:f7:48:5c:26:5d:a9:
f7:54:a2:e4:ff:26:3f:40:73:19:f8:fd:6a:0c:e9:
f8:25:14:f5:4e:0f:e7:78:79:c4:62:d5:c8:7a:3f:
d6:c3:19:09:f2:81:8b:c2:a2:68:ec:4d:4b:41:79:
2c:98:91:c2:9a:95:c0:f5:d7:c4:57:af:3e:ac:70:
95:83:fb:91:f8:e4:ea:10:30:a5:52:1a:b5:b7:7e:
a4:00:56:55:80:42:9d:aa:36:05:9d:a5:d2:87:43:
96:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E2:70:F5:E5:FA:30:E1:F7:9D:00:D9:65:95:C1:7D:A7:E8:18:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a5b8ef-8801-4b24-b42d-a984df1bedd0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a5b8ef-8801-4b24-b42d-a984df1bedd0/1/b-Jw9eX6MOH3nQDZZZXBfafoGJ8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.208.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49159
Signature Algorithm: sha256WithRSAEncryption
47:56:2d:34:84:64:8f:6e:c9:81:1b:52:c4:8b:63:a9:34:29:
93:2a:4f:53:53:f7:4a:56:48:23:7c:72:d3:37:36:bd:d6:23:
e1:96:03:0a:d3:69:9d:1c:49:ec:72:27:0f:a3:27:c6:5e:a5:
95:1f:93:7f:99:aa:11:ec:04:f8:4c:b4:a9:5e:99:b0:a4:70:
c4:36:48:a5:35:2c:c5:8b:4e:4d:98:d2:85:0e:be:87:48:51:
04:08:d5:5c:62:b7:f4:15:6d:7a:70:83:9b:d6:fa:74:a0:ab:
9d:26:5a:e2:f1:ba:3a:57:6f:6d:ce:46:bc:fe:e1:d5:8e:c1:
ba:63:79:88:8f:1b:5c:6f:5c:6f:0b:e3:56:8f:f2:96:f2:2d:
84:df:5d:20:29:fc:28:b3:43:cb:c2:66:76:7a:44:55:3e:19:
7b:65:7e:1c:b3:f8:13:bb:55:4d:a8:21:bd:74:1a:ff:16:8f:
e5:91:67:1c:49:b9:bb:08:56:54:25:ca:24:ac:5f:2b:9c:97:
52:76:fc:ad:c1:8e:95:90:d8:dc:23:0d:49:f0:da:6b:4c:e5:
42:24:9d:5b:7a:cb:4f:6a:12:e9:f5:83:e7:de:e8:8a:25:bb:
51:a8:3d:5e:a8:1e:fd:bb:01:f4:cf:d5:aa:3e:b0:e2:77:5b:
29:62:43:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org