Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bdxe5MpyYHprqBQUIOrzSiJvNOc.cer
File: bdxe5MpyYHprqBQUIOrzSiJvNOc.cer (raw, json)
Hash identifier: HiWcu0ukyZZDGWqxBgcZ6QTsADo/FuxVbXWPYgyaCyQ=
Subject key identifier: 6D:DC:5E:E4:CA:72:60:7A:6B:A8:14:14:20:EA:F3:4A:22:6F:34:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A4216045AC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/c4813c-d6b8-4d60-9603-679a9d4a3513/1/bdxe5MpyYHprqBQUIOrzSiJvNOc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/c4813c-d6b8-4d60-9603-679a9d4a3513/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:01:30 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 213310
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 704934593964 (0xa4216045ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:01:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ddc5ee4ca72607a6ba8141420eaf34a226f34e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ef:88:97:a9:6e:f7:86:4f:34:97:cb:1b:e6:
04:14:3b:e5:e4:58:ac:3c:4f:b2:ed:5a:62:c5:3c:
5c:ab:34:ec:06:0a:f8:28:64:44:6b:bd:bb:48:50:
a8:bd:7d:aa:09:fd:80:0a:7d:c8:10:00:3d:e4:06:
fa:dc:1b:ff:53:e4:ac:7f:6e:ca:6a:bf:cc:d5:e1:
b9:6a:6d:32:83:6d:df:3f:f2:94:c4:43:65:8f:fb:
e0:c3:36:a4:15:d9:fc:bc:3c:e0:c9:23:41:7d:4d:
c0:99:ca:20:b9:a7:99:c1:f1:10:ee:43:e6:cd:4c:
b6:0f:9e:d0:b4:27:44:84:ac:7e:b4:8f:4f:88:63:
32:e5:ce:4c:d8:66:d0:b2:5f:93:6d:d0:ee:f4:2c:
d6:8c:8f:4f:ee:c9:27:40:da:27:0c:0c:61:37:ae:
23:80:b6:66:fd:49:e9:8c:04:8d:24:7a:43:d2:8b:
0e:7c:ee:b5:99:be:5d:db:0a:c2:97:9e:6f:01:de:
d5:41:b9:7c:80:d5:84:81:f8:cf:25:b5:9b:74:ad:
f6:23:c0:d9:ef:7c:54:00:ad:76:f5:38:2a:1d:3e:
23:bf:ec:22:a7:8e:d1:d0:44:d6:ff:4c:8b:03:85:
44:8f:9d:f5:49:4a:43:ce:84:64:0b:ce:28:0e:52:
f8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DC:5E:E4:CA:72:60:7A:6B:A8:14:14:20:EA:F3:4A:22:6F:34:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c4813c-d6b8-4d60-9603-679a9d4a3513/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c4813c-d6b8-4d60-9603-679a9d4a3513/1/bdxe5MpyYHprqBQUIOrzSiJvNOc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213310
Signature Algorithm: sha256WithRSAEncryption
7b:88:52:56:9d:eb:f6:29:36:9c:06:78:fa:97:d8:db:ae:bb:
c9:dd:66:8b:5e:9a:e9:1b:e3:b2:eb:1d:b4:fb:07:09:ad:e3:
f8:11:a0:aa:9b:61:f3:0a:e3:05:cc:aa:ec:b5:af:76:af:45:
cd:8d:ea:dc:65:52:2b:c7:6a:42:a9:dd:f7:38:f1:9e:bd:23:
06:07:04:82:94:46:23:f0:6f:3d:6e:8c:14:55:92:9f:95:9c:
f4:64:3b:a5:fd:e1:bd:47:be:d8:c3:18:5e:a5:27:9f:08:b8:
1b:7f:aa:ed:68:ab:c0:c4:21:44:06:6a:69:f1:21:7b:ab:5c:
71:3e:40:99:6c:53:2d:e7:a4:c8:2c:68:24:bf:26:e4:46:42:
cc:a0:56:c9:d0:ab:d2:59:b1:10:56:ed:64:75:18:a5:80:8d:
89:bd:7d:b0:29:24:13:b9:f6:44:b6:f2:82:1b:92:4b:0d:a8:
b8:89:0c:ec:1f:a8:c8:ec:48:9d:c7:e1:21:c6:70:8f:f5:63:
6b:73:36:ef:fb:d2:f0:ce:03:8e:6e:09:97:5c:30:8d:93:57:
5b:b0:78:ff:04:cc:75:4f:7b:09:24:30:c1:1d:a9:3a:42:87:
8b:20:30:49:a2:8d:46:04:40:c5:b5:c1:9f:88:42:fb:1f:75:
0c:58:c3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:00 2024 by rpki-client on console-fra.rpki-client.org