Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cEnbETen4TFvv2wBzU-dS77JjLo.cer
File: cEnbETen4TFvv2wBzU-dS77JjLo.cer (raw, json)
Hash identifier: PfLJe8f1kBWLdQZUBHx4C/s9j5JkOJ/KM2Aeda7rsV8=
Subject key identifier: 70:49:DB:11:37:A7:E1:31:6F:BF:6C:01:CD:4F:9D:4B:BE:C9:8C:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9B9CC3FA15
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/de1f12-0043-4b8b-aa1f-03331e8b0828/1/cEnbETen4TFvv2wBzU-dS77JjLo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/de1f12-0043-4b8b-aa1f-03331e8b0828/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:55:31 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 41117
IP: 195.189.116.0/22
IP: 2001:67c:3a4::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 668350020117 (0x9b9cc3fa15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:55:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7049db1137a7e1316fbf6c01cd4f9d4bbec98cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ac:bc:97:f2:f5:88:c8:c9:f3:13:7a:28:ce:
29:dd:c1:91:aa:e0:eb:a0:7b:fa:26:15:93:df:94:
ce:3b:24:25:ba:ab:d0:c7:37:61:3e:37:d8:a4:97:
50:08:26:1d:09:fd:b4:02:a0:c0:c8:ce:18:47:50:
ed:cd:0b:ea:3c:70:cf:ab:45:06:b5:7c:d4:d1:56:
80:f3:38:1f:41:93:96:85:f4:1b:f2:cd:4c:6f:f5:
f7:32:d5:08:c5:e9:79:51:02:88:b6:2b:16:53:a5:
a9:12:91:45:fb:1c:90:f1:ea:b3:3b:38:fb:3c:ba:
3a:07:ca:20:0e:c1:0f:11:e2:5e:50:2c:1a:da:16:
a1:5f:a5:a5:95:15:c7:9e:ed:f7:a3:ab:3c:7e:a4:
07:ee:f7:d8:3d:c2:6c:6d:6d:d0:e1:7b:37:be:28:
88:dd:2b:76:9a:20:bf:02:6e:b7:43:00:49:de:b9:
cb:ee:4d:05:6f:7f:86:9c:ec:3f:5d:52:aa:82:34:
51:29:bb:d0:38:27:72:52:61:ee:71:e2:c6:9b:a1:
10:dc:12:e5:76:da:21:32:04:94:1f:2e:44:fc:55:
f4:da:52:89:38:ff:ab:a7:4e:ce:d8:dc:b5:18:a0:
78:70:b6:03:81:ab:b7:ea:31:85:29:98:e7:e7:ad:
2a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:49:DB:11:37:A7:E1:31:6F:BF:6C:01:CD:4F:9D:4B:BE:C9:8C:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/de1f12-0043-4b8b-aa1f-03331e8b0828/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/de1f12-0043-4b8b-aa1f-03331e8b0828/1/cEnbETen4TFvv2wBzU-dS77JjLo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.116.0/22
IPv6:
2001:67c:3a4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41117
Signature Algorithm: sha256WithRSAEncryption
91:ff:08:fb:d7:63:5d:bd:20:ee:39:31:8e:9f:7d:d1:59:f3:
f4:16:16:2a:20:8b:f2:90:64:11:80:f5:6f:2e:74:30:8d:ef:
3f:60:7a:71:43:3a:1f:72:d5:27:97:2c:3f:6f:51:7c:70:23:
32:84:e9:06:c7:71:52:6c:70:57:b7:a7:ba:02:56:eb:5f:30:
87:00:04:a6:8c:ee:ba:3c:6a:f1:56:e2:cd:98:35:b1:50:40:
3b:0c:e4:6c:dc:d1:20:e5:be:d0:a8:3b:a0:0b:4b:6e:7f:30:
e6:e8:b3:a3:ee:04:be:95:6b:10:0e:f2:8e:5f:0b:ba:3f:9f:
f5:1c:a1:6b:51:7d:7c:fd:78:57:85:7f:bc:7f:8d:43:ab:4a:
11:e0:3d:71:e0:7f:31:fa:f9:15:f6:98:f8:dd:c8:9c:c2:4c:
27:48:30:16:f7:4c:2a:95:14:3b:e7:97:3b:1b:eb:42:82:16:
6b:1b:ee:07:c1:11:b0:86:f9:29:e3:65:f5:9a:ed:4a:5f:88:
d6:13:96:5e:38:69:7d:c2:32:01:77:b7:a7:1d:14:9b:d9:46:
84:a8:cb:a3:24:2f:c1:79:cc:88:fc:d0:4c:d6:a8:00:34:96:
59:57:fa:d5:fe:d1:e2:01:1d:a6:fd:02:3e:e7:9a:be:05:52:
10:7e:5a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:50 2024 by rpki-client on console-fra.rpki-client.org