Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bnSrcLZEkar6JpByt7DM_AVTCSY.cer
File: bnSrcLZEkar6JpByt7DM_AVTCSY.cer (raw, json)
Hash identifier: oXZDxVznSn31IcsNSJ+6muwh6yjE0WcGnlCzcTD9ZwU=
Subject key identifier: 6E:74:AB:70:B6:44:91:AA:FA:26:90:72:B7:B0:CC:FC:05:53:09:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A8A0E79092
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/6506b6-49a6-4202-97df-ee6f3116ded4/1/bnSrcLZEkar6JpByt7DM_AVTCSY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/6506b6-49a6-4202-97df-ee6f3116ded4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:01:38 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 41626
AS: 44379
AS: 51250
IP: 91.199.106.0/24
IP: 91.218.48.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 724254036114 (0xa8a0e79092)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:01:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e74ab70b64491aafa269072b7b0ccfc05530926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5d:c0:d7:da:7c:bd:d9:0a:21:5f:fe:b8:31:
93:33:97:43:a0:69:49:4f:1a:c5:a5:5f:3a:b8:91:
a0:11:a9:f2:6a:59:ff:1f:34:5a:06:fa:e0:2a:e1:
71:95:d1:1d:22:4b:87:3b:09:92:e3:08:44:84:55:
b3:53:57:f1:11:05:07:02:1d:92:35:2f:b5:c2:ee:
dc:92:3d:25:f2:1e:6c:6b:e5:22:04:95:4b:4a:09:
2d:34:2a:24:51:64:3b:cf:f9:b1:a6:44:94:cd:1b:
69:a3:ed:7d:ed:6a:1a:82:77:d9:d2:67:10:b8:82:
af:0b:46:9e:9b:79:bd:65:d6:83:ac:1d:61:a9:6a:
a0:2c:ef:98:8d:b9:17:52:eb:04:71:27:93:90:ee:
a0:c2:6f:ce:9c:a7:22:4e:5e:a0:b5:bd:fb:cd:b9:
5a:c3:01:01:ad:68:81:d0:51:89:9f:2b:6e:10:e9:
69:1d:82:07:53:c8:20:1a:eb:8e:e6:0d:6e:1b:80:
14:66:09:e3:6d:70:86:19:8b:9f:f0:34:6d:2c:4b:
a5:03:61:f8:dd:d3:99:58:64:ca:5e:b7:0a:65:0a:
d5:d9:a7:0d:3f:cb:f7:2e:c5:38:ec:7a:83:de:1e:
e6:e9:a9:e7:50:5a:74:fd:9b:2d:67:ad:ee:21:05:
50:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:74:AB:70:B6:44:91:AA:FA:26:90:72:B7:B0:CC:FC:05:53:09:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6506b6-49a6-4202-97df-ee6f3116ded4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6506b6-49a6-4202-97df-ee6f3116ded4/1/bnSrcLZEkar6JpByt7DM_AVTCSY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.106.0/24
91.218.48.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41626
44379
51250
Signature Algorithm: sha256WithRSAEncryption
aa:0f:d4:92:4a:e0:6a:a8:a5:67:4c:69:34:11:82:a0:11:9b:
3b:7b:1e:e5:28:17:05:ae:86:19:82:39:a1:3c:86:9a:d1:bd:
b0:17:36:0d:91:d8:25:b0:ed:1a:7d:fd:95:6c:8a:f3:15:86:
37:c5:ee:bd:77:4d:b0:b5:19:a8:60:fa:9f:40:e1:9e:b2:81:
a6:49:b4:fc:5f:79:df:ff:cf:4a:b2:28:70:e2:e1:56:ad:e5:
aa:aa:9c:b2:64:24:53:d9:b1:a7:16:a5:e7:e7:2a:ae:8e:0c:
c3:9a:cc:cd:79:20:57:2f:ba:da:57:ef:0d:f6:3a:31:b7:e8:
63:10:4b:ef:99:b1:d6:c2:4b:41:f6:33:ee:b8:93:5c:be:52:
91:55:00:bd:1b:b3:af:6e:1c:d7:f2:f7:b2:80:56:75:f1:fd:
5c:f5:c3:c2:53:ff:83:58:9b:f7:f5:6b:84:61:26:01:2b:1b:
4c:0e:d2:06:fa:f4:87:3c:1e:0f:14:a1:cd:bc:19:69:4c:ea:
a2:07:ce:75:0a:14:c5:90:72:97:9c:35:53:ff:09:a4:af:85:
b9:02:21:51:bc:86:5b:ff:37:ee:e8:be:38:a7:a0:a3:60:f2:
ca:c9:a6:8e:dd:df:c9:89:86:bb:c2:84:06:c6:11:c9:e3:ce:
a1:ec:93:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:16 2023 by rpki-client on console-fra.rpki-client.org