Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bRE3m_acM3xBCHnxY_ad4mtVXRE.cer
File: bRE3m_acM3xBCHnxY_ad4mtVXRE.cer (raw, json)
Hash identifier: ZS/I/AQVuT7EAY/AKldOB3Y7vnnWr8RB+wy0jOeQM74=
Subject key identifier: 6D:11:37:9B:F6:9C:33:7C:41:08:79:F1:63:F6:9D:E2:6B:55:5D:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A5DC26205D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/21afe3-42ec-4361-9742-61390b412223/1/bRE3m_acM3xBCHnxY_ad4mtVXRE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/21afe3-42ec-4361-9742-61390b412223/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:54:53 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 203047
IP: 2001:678:13c::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 712363090013 (0xa5dc26205d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:54:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d11379bf69c337c410879f163f69de26b555d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ea:47:8e:28:15:c2:5c:99:c3:f6:70:6b:5b:
e3:c4:90:ad:c3:31:0e:ca:b4:82:59:66:39:ff:8d:
0e:2e:cf:73:26:04:31:08:5c:df:2c:ba:a4:55:ac:
d3:9a:ab:f0:50:b2:d1:d3:53:3e:ca:d9:9c:94:8e:
3f:00:0b:bc:2d:03:77:04:72:d0:0d:c4:d5:bd:7a:
bf:16:eb:19:91:bc:d5:35:d1:87:84:c5:69:61:79:
c6:c6:30:cd:21:c9:4b:2b:bf:18:2c:06:e1:b7:96:
bf:73:68:17:fd:e0:f7:1e:69:cc:42:56:d8:9e:b6:
8f:4c:42:c2:4d:a0:af:0a:97:c1:ab:82:70:8c:dc:
36:97:68:de:02:b5:8b:53:32:0b:6e:de:3d:ce:30:
31:19:e9:62:71:a1:43:56:1b:f0:33:f9:33:da:68:
a9:2c:d0:9d:39:57:98:a9:54:db:e8:23:86:da:65:
ac:92:58:a4:22:90:56:d8:b1:e4:09:ba:c2:71:09:
8c:38:56:44:f5:5e:a8:cb:a0:5b:b7:09:c2:3c:35:
9d:54:ac:df:f5:40:95:0e:97:61:2e:81:2c:86:19:
a1:26:27:d6:ba:c1:34:18:ff:03:50:12:af:23:85:
5a:79:b7:e2:9f:43:67:e0:91:be:29:53:94:f3:a8:
21:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:11:37:9B:F6:9C:33:7C:41:08:79:F1:63:F6:9D:E2:6B:55:5D:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/21afe3-42ec-4361-9742-61390b412223/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/21afe3-42ec-4361-9742-61390b412223/1/bRE3m_acM3xBCHnxY_ad4mtVXRE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:13c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203047
Signature Algorithm: sha256WithRSAEncryption
15:77:94:1e:1c:69:3e:66:c4:d8:18:4f:b8:bd:5b:0b:eb:c3:
26:24:c6:b4:f6:2b:45:3a:84:61:2f:73:1a:63:8d:19:ec:a6:
94:f9:32:a8:6e:b4:5f:77:c0:17:fa:ad:39:bc:56:26:e4:12:
7e:95:20:a0:83:d2:99:ba:0f:d2:46:e2:b4:c0:35:36:6a:08:
f9:3f:26:33:c1:fc:84:77:e4:ea:06:ef:4f:0a:45:dc:22:19:
9b:b6:ed:8a:f9:ea:2c:22:27:da:b7:d3:ac:17:02:8b:24:bb:
71:ba:b7:9b:cc:63:4d:5e:31:21:c3:c1:28:63:4c:6b:b7:d7:
ae:f0:1b:14:34:cd:a2:22:8e:4e:bc:d8:21:3d:7c:fd:38:1c:
43:1c:c9:45:c1:a8:2d:bb:04:0d:c9:92:0c:e5:64:d8:59:80:
11:9e:c0:db:a0:a2:81:73:60:8b:cb:cc:99:4c:6c:1a:3d:6c:
1e:78:4d:11:da:73:2d:4d:d9:a1:bc:32:6b:df:ce:83:f0:d7:
ef:3b:63:1d:ae:b3:83:3c:cd:21:f5:64:a5:0d:f9:5a:0f:8d:
2f:7f:4c:b9:6d:52:55:95:b1:eb:53:57:59:03:e0:43:24:83:
91:21:37:36:19:8e:6f:36:7e:49:a5:db:c2:85:37:6f:73:f5:
da:d8:b7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:40 2024 by rpki-client on console-ams.rpki-client.org