Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dPqq9Ys0fd9AiFPRZWKux62vvYg.cer
File: dPqq9Ys0fd9AiFPRZWKux62vvYg.cer (raw, json)
Hash identifier: NPg0BR2W/09HabPwaEPfR2N7XG75xDmNR6elOSQjnBE=
Subject key identifier: 74:FA:AA:F5:8B:34:7D:DF:40:88:53:D1:65:62:AE:C7:AD:AF:BD:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A131FE21B2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/a2ef3e-a4c3-4592-9fb7-35820328b556/1/dPqq9Ys0fd9AiFPRZWKux62vvYg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/a2ef3e-a4c3-4592-9fb7-35820328b556/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:53:34 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 206446
IP: 185.185.132.0/22
IP: 2a0a:a140::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 692328473010 (0xa131fe21b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:53:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74faaaf58b347ddf408853d16562aec7adafbd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:e1:1a:4b:6f:0d:cd:8c:43:00:eb:52:0e:
10:f3:dd:d2:61:ae:0e:e8:07:27:f8:da:3e:d7:74:
fe:61:bf:d3:dc:32:b5:b3:a0:c9:1a:9e:bf:ea:5b:
23:c1:6b:fe:38:cb:23:7a:66:db:b6:a4:04:b9:21:
a7:5e:94:ad:e6:9d:2e:5b:fc:1e:6e:f5:f6:a4:5d:
53:3a:1e:b0:98:f9:77:18:50:0b:35:e3:04:e9:99:
44:38:12:77:f8:b5:af:67:9f:73:f3:ae:35:7c:af:
3a:b8:3e:31:0a:29:0b:01:b1:f0:6a:d3:6c:8d:f0:
d8:8b:3a:74:4d:4f:34:1d:42:19:48:ee:89:6f:db:
5a:91:23:f5:ac:33:cf:4c:3a:a5:9c:1d:f7:3c:08:
b3:57:e7:61:8f:8d:a6:12:8f:74:70:1f:4f:3a:a7:
24:74:08:91:45:c3:9f:ab:59:29:8e:30:e7:eb:55:
f2:73:b8:b9:59:15:76:ab:8a:54:81:be:f4:4b:f1:
6c:6d:d4:ca:b6:4c:9a:b5:db:5e:08:16:5e:17:c6:
ee:3a:e4:33:b4:67:77:cd:e3:4b:15:33:c9:51:77:
3c:9d:bf:e2:b3:3e:e5:23:53:91:43:cd:8b:54:c1:
58:a3:b8:07:52:37:ce:16:f9:4c:8c:44:7e:2a:76:
97:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FA:AA:F5:8B:34:7D:DF:40:88:53:D1:65:62:AE:C7:AD:AF:BD:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a2ef3e-a4c3-4592-9fb7-35820328b556/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a2ef3e-a4c3-4592-9fb7-35820328b556/1/dPqq9Ys0fd9AiFPRZWKux62vvYg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.132.0/22
IPv6:
2a0a:a140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206446
Signature Algorithm: sha256WithRSAEncryption
17:22:65:bf:3c:0a:73:1e:e1:74:c0:50:10:a6:d3:ba:1e:cc:
35:8c:85:d9:c4:da:06:0c:b2:00:3b:d4:43:f5:65:1d:20:32:
0d:28:93:0f:72:36:8e:53:7d:68:5b:dc:24:aa:86:74:6d:bc:
67:3d:28:b0:14:85:b1:ab:78:41:92:1c:54:1d:c1:8f:e4:5a:
c8:d3:b5:66:53:9a:f4:b4:ab:63:08:78:f6:19:de:13:4e:6f:
14:09:0e:4d:e2:b6:58:7c:aa:19:ee:5b:5a:86:45:67:16:63:
ec:c3:c4:c8:d8:22:5c:9b:aa:c3:e6:e6:ff:a5:0a:40:98:2a:
60:5b:df:55:62:93:da:84:e4:69:30:22:cd:83:d2:f0:84:7f:
ac:6b:c8:c6:f5:e5:59:22:dc:6f:14:3f:1a:6c:3d:c7:53:dc:
15:b5:a8:d1:ab:0c:d1:5d:e9:60:15:08:b5:10:2a:00:d8:c2:
72:75:cc:19:92:21:db:25:ac:86:f1:44:91:30:a7:28:e0:fa:
b0:1a:4a:40:a1:65:dd:72:ea:65:2f:c9:6a:44:46:7b:c7:e7:
95:4e:7a:35:c7:2c:5c:bb:be:7f:56:5b:e1:92:48:d2:0c:9d:
66:5b:d6:f3:24:3e:e1:63:36:7e:78:0f:91:89:42:ca:d1:4a:
be:d4:c9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:19 2024 by rpki-client on console-ams.rpki-client.org