Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dfYuwjb2EFSeRKMBsSrwgHWY0Wc.cer
File: dfYuwjb2EFSeRKMBsSrwgHWY0Wc.cer (raw, json)
Hash identifier: Kt+UegJBLHWP7B+EBhaNcc1pTGXSXiM1BDhJc28+aZU=
Subject key identifier: 75:F6:2E:C2:36:F6:10:54:9E:44:A3:01:B1:2A:F0:80:75:98:D1:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0183C571AF726BFF7742B4766A4DDB5D0375
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/2339d7-7637-4cf8-b31e-8da9f81bb401/1/dfYuwjb2EFSeRKMBsSrwgHWY0Wc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/2339d7-7637-4cf8-b31e-8da9f81bb401/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 11 Oct 2022 05:08:25 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 39712
AS: 210343
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c5:71:af:72:6b:ff:77:42:b4:76:6a:4d:db:5d:03:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 11 05:08:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75f62ec236f610549e44a301b12af0807598d167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f8:ae:df:29:68:f4:c9:8c:63:29:da:11:79:
e6:45:b4:7b:a1:ab:ae:b2:91:ee:6d:e9:99:6c:80:
ef:3c:25:97:ee:ce:4a:7b:72:25:fd:6a:9d:f5:70:
55:ca:62:87:56:87:e9:35:99:02:c0:78:ba:31:c8:
86:c3:fa:1c:c2:d3:80:6b:cb:94:33:3e:14:4e:ef:
be:77:87:43:ca:89:c2:57:7a:a3:9b:6a:f4:52:ff:
5c:4e:ae:71:37:4f:14:67:6c:d8:e1:fa:a6:ff:6c:
94:7e:e7:df:57:52:f1:a3:4e:5b:ba:d7:f2:0e:2e:
09:92:dc:49:7b:de:7f:fb:88:b3:08:e2:97:a1:4c:
6b:e3:08:6e:25:e8:03:eb:c4:dd:36:95:c1:31:34:
be:2d:33:32:6b:36:c6:98:cc:e5:f7:a4:ae:d2:4c:
92:b7:bf:aa:48:8f:0b:ba:08:b0:31:c7:8c:7f:12:
03:94:34:fb:2d:fd:a4:d5:3e:19:33:5d:18:c7:b3:
11:62:10:31:9e:d4:07:00:2b:7a:dc:03:51:59:c5:
40:e4:04:cc:d6:60:37:ae:6e:e1:e0:63:59:93:0e:
5b:2f:22:ab:66:76:c2:77:1b:20:cf:6d:be:63:70:
53:e8:64:0c:ca:89:ca:94:b5:1b:70:dd:4a:b4:13:
38:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F6:2E:C2:36:F6:10:54:9E:44:A3:01:B1:2A:F0:80:75:98:D1:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2339d7-7637-4cf8-b31e-8da9f81bb401/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2339d7-7637-4cf8-b31e-8da9f81bb401/1/dfYuwjb2EFSeRKMBsSrwgHWY0Wc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39712
210343
Signature Algorithm: sha256WithRSAEncryption
40:3d:39:05:78:15:77:ce:7a:93:25:89:84:3e:c4:ec:1a:47:
d2:7f:26:91:1b:f1:a7:2e:9e:87:84:17:8e:b7:b8:4b:0a:d0:
11:49:87:dd:44:e1:5c:7f:b7:35:64:3b:2d:0f:bb:c9:a6:c5:
5d:69:81:31:5a:6d:d0:f9:e8:56:0d:da:cd:53:8b:f6:1f:e0:
0d:9d:b5:71:36:8d:d9:3c:b8:b0:d2:21:da:50:80:f9:7e:0d:
ff:f0:15:31:88:dd:3e:e2:4e:83:ce:66:82:92:13:37:00:17:
62:2b:45:f7:fa:b1:0a:c5:e7:25:fe:43:7f:f6:dd:ee:ed:b9:
0f:f8:73:0e:40:80:56:5a:64:b9:89:b3:8c:c4:7c:44:cf:0d:
3a:01:ba:24:25:82:f6:45:14:fd:05:f6:1f:49:26:63:3f:20:
d5:5e:c0:ea:59:70:e6:3f:c9:66:39:3a:27:de:3e:23:53:fa:
0f:ad:49:8d:ce:e0:eb:e6:9d:fb:60:70:8f:86:26:de:96:18:
27:f3:f1:03:03:19:c9:a4:73:d4:e9:05:c2:bf:a8:b7:45:70:
f2:8e:0b:05:a4:ac:73:1c:78:3b:24:9e:87:ca:af:c5:0f:ab:
83:77:eb:cb:69:7a:8f:e0:d7:64:54:77:d3:ec:c6:02:07:d5:
d7:4f:f2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:31 2024 by rpki-client on console-ams.rpki-client.org