Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dU1UEV0X3B7qsWaaCABiGAp2jiI.cer
File: dU1UEV0X3B7qsWaaCABiGAp2jiI.cer (raw, json)
Hash identifier: 0+6nP73mactj+wRwXriCw4he0Fol0bW8d0pSFKUOzfs=
Subject key identifier: 75:4D:54:11:5D:17:DC:1E:EA:B1:66:9A:08:00:62:18:0A:76:8E:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A7A7643609
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/3ac043-9914-4a7d-96f4-799c3697e89e/1/dU1UEV0X3B7qsWaaCABiGAp2jiI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/3ac043-9914-4a7d-96f4-799c3697e89e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:03:41 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 39910
IP: 185.203.90.0/24
IP: 2a10:7a40::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720067900937 (0xa7a7643609)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:03:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=754d54115d17dc1eeab1669a080062180a768e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:67:3c:fd:2c:70:80:e5:16:29:5f:15:71:
37:94:1f:57:02:f9:96:1d:d1:1d:ae:17:06:4a:ff:
31:5f:2f:d9:73:5f:ac:1a:60:b9:64:75:19:84:0e:
29:48:60:03:86:32:52:26:fb:6f:9a:74:19:a9:8e:
54:30:c6:06:cd:a6:3d:7b:e8:a1:6d:6b:9d:f8:06:
0e:2c:29:1d:12:40:5a:d1:6b:25:d3:d2:0d:04:c0:
ce:3c:2b:48:64:2c:25:f1:20:a6:8f:c7:54:87:fd:
17:45:6e:14:a6:bd:db:e8:90:13:54:aa:3d:65:41:
98:4d:8f:09:e6:fa:63:f4:db:c0:8d:54:8a:63:5b:
7e:7f:3c:58:ac:21:82:6d:3b:d8:30:ea:ff:68:37:
51:ff:a9:4c:dd:09:8e:6f:62:e7:79:72:1f:73:cf:
11:9d:89:ee:da:a3:18:0a:b8:0d:84:8c:a7:9d:3e:
bd:5c:3e:74:cd:0d:00:63:7a:11:92:0f:d0:fe:84:
a6:fb:c7:c2:41:9c:6d:cb:73:0a:55:b7:ff:8d:e2:
bb:96:c1:ac:1e:8b:ed:b6:44:05:d3:22:91:ce:95:
d5:74:da:05:93:02:db:32:6c:20:5a:ca:b7:c3:b9:
c5:55:2b:32:b1:f8:bf:b5:0a:38:83:aa:9a:c3:d0:
3f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4D:54:11:5D:17:DC:1E:EA:B1:66:9A:08:00:62:18:0A:76:8E:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3ac043-9914-4a7d-96f4-799c3697e89e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3ac043-9914-4a7d-96f4-799c3697e89e/1/dU1UEV0X3B7qsWaaCABiGAp2jiI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.90.0/24
IPv6:
2a10:7a40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39910
Signature Algorithm: sha256WithRSAEncryption
a3:06:bd:a9:5e:4d:3c:a8:a0:7f:7b:89:1d:ef:17:9f:fc:05:
3c:21:d8:39:a8:59:da:ca:6e:17:ba:0b:13:5c:5b:3d:91:10:
05:8d:bd:ca:99:6c:0e:a9:75:d4:07:5e:2e:44:f5:c6:78:03:
c3:1d:79:60:0b:67:1c:34:f1:19:6e:02:53:8c:85:68:99:f9:
9d:3f:66:1d:8e:71:50:49:d5:e4:a3:20:bd:49:18:f5:f1:e7:
1a:68:72:5a:de:bf:dc:a8:82:35:79:91:f8:0b:ca:1e:de:20:
60:76:b0:9f:db:86:bc:86:a7:26:32:e6:ef:5a:9d:09:1a:79:
fe:02:8a:10:c4:a3:86:fa:64:a9:5b:1a:6e:6b:7b:27:fa:8c:
5c:5f:b7:da:7b:39:cd:0b:69:e5:db:42:4e:59:6b:dc:5d:70:
fc:13:1d:41:ed:ff:05:20:dd:61:cc:46:0c:98:11:49:f2:92:
64:60:29:ec:eb:df:6a:f8:c7:e4:f5:ff:d7:6c:92:13:8a:6e:
46:b9:3f:86:f5:e0:a1:35:14:98:c9:ba:64:24:64:db:41:3e:
cb:3a:48:68:9f:78:9b:0b:46:7f:d4:fc:7b:20:65:6f:82:c5:
a4:f7:bb:92:d7:f7:4c:9d:05:a8:72:92:29:cc:c9:33:54:86:
1a:f4:e2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:36 2025 by rpki-client