Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dAVStoEgP6bbgPCnXe7NcgWE3Q4.cer
File: dAVStoEgP6bbgPCnXe7NcgWE3Q4.cer (raw, json)
Hash identifier: DuzVGE6Jtv7XiwddiJ8+ESEqtxGWxWsY4cKXC57oLxo=
Subject key identifier: 74:05:52:B6:81:20:3F:A6:DB:80:F0:A7:5D:EE:CD:72:05:84:DD:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9C5FD24601
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/ff0c59-3787-4bca-9a0a-e58c19f882ad/1/dAVStoEgP6bbgPCnXe7NcgWE3Q4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/ff0c59-3787-4bca-9a0a-e58c19f882ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:51:13 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 205987
AS: 208022
IP: 185.199.72.0/22
IP: 193.33.106.0/23
IP: 193.33.112.0/23
IP: 2a0f:ac80::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671622514177 (0x9c5fd24601)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:51:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=740552b681203fa6db80f0a75deecd720584dd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:be:f7:8a:01:c1:95:5c:de:07:81:e8:60:48:
01:52:dd:d0:81:da:76:ff:45:e9:cc:f0:aa:90:bf:
08:45:d9:9e:bd:dc:43:3d:0a:e9:a9:ba:0f:59:96:
2c:26:24:51:23:40:0b:80:11:76:6f:7e:d5:27:ae:
4f:08:ca:8f:bb:35:01:07:d4:9c:fb:a0:27:99:2a:
a2:21:b7:63:25:8d:e3:47:b9:b0:0a:2c:bb:d7:d9:
1e:5c:98:12:ea:d5:77:b6:d0:c6:a6:21:29:85:b8:
9e:9a:4f:7b:99:a8:0a:a9:d4:d0:28:98:0f:9b:37:
ca:e0:2e:af:67:6c:13:02:f3:e5:cb:d5:d0:ce:0a:
aa:35:65:49:56:53:b1:8c:50:c9:e6:11:86:a7:01:
70:3f:fe:c1:c4:0c:5b:a9:64:09:52:99:47:7c:a2:
a5:fd:21:c8:4b:41:db:84:8b:ad:b6:c3:dc:39:74:
dc:8f:20:0b:2a:b3:b6:0b:b4:c6:80:47:b3:99:f6:
d6:7f:9a:04:73:d8:2b:54:80:56:e6:9d:5f:8a:12:
1c:00:12:9d:9d:2b:23:84:c5:4d:dd:fc:b9:08:12:
d8:e5:db:e4:56:06:b8:92:49:87:1b:20:b2:2b:4e:
44:46:0f:54:8e:90:f4:d1:b7:f1:0c:d8:1a:05:16:
9e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:05:52:B6:81:20:3F:A6:DB:80:F0:A7:5D:EE:CD:72:05:84:DD:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ff0c59-3787-4bca-9a0a-e58c19f882ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ff0c59-3787-4bca-9a0a-e58c19f882ad/1/dAVStoEgP6bbgPCnXe7NcgWE3Q4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.72.0/22
193.33.106.0/23
193.33.112.0/23
IPv6:
2a0f:ac80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205987
208022
Signature Algorithm: sha256WithRSAEncryption
54:a3:e5:a9:7d:b3:a7:e5:36:15:69:d7:3f:3f:c0:d2:2c:d8:
99:fb:d8:57:39:e6:1d:15:ee:12:2e:64:87:62:3a:87:7e:f2:
46:c1:b7:ad:4b:46:ac:4e:fe:35:79:4d:1a:07:09:89:fa:e1:
b4:47:d7:c5:14:64:b2:14:f7:0e:ce:c4:c0:b3:ba:3b:76:e1:
ae:76:48:09:cc:bb:93:b0:d9:41:48:62:17:b6:4d:fa:f8:82:
09:ac:a6:61:c0:97:4f:39:38:87:ac:5a:be:09:28:3c:c6:0c:
f0:8b:1e:9c:b0:6c:6b:c2:2d:cb:c6:00:c7:c8:19:94:b0:69:
f5:b7:5a:42:ad:26:a9:25:65:23:fb:8b:be:dd:71:de:32:c4:
c1:78:b2:ef:7e:f8:29:c7:c4:9b:c3:b9:d9:3c:0d:d7:13:ec:
0c:80:eb:38:23:02:fe:20:92:34:32:a5:f3:ef:d5:d6:26:f5:
ed:fa:34:fa:6c:49:d9:94:9c:aa:01:6d:17:90:d6:ca:fc:e9:
fc:a1:f9:77:d1:37:82:b1:df:3e:ae:8b:80:bb:d7:32:cb:27:
e9:22:ae:e3:f2:d3:58:d0:e5:ed:04:80:99:23:05:56:21:4b:
09:73:8f:18:d2:2f:14:21:88:f0:be:49:42:bf:ca:5b:5e:9f:
36:82:39:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:15 2024 by rpki-client on console-ams.rpki-client.org