Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dhbYxZMh1r5Ktmyiaa9nkud2nd8.cer
File: dhbYxZMh1r5Ktmyiaa9nkud2nd8.cer (raw, json)
Hash identifier: UhSwvNnO5jQ1sq9+1ZW8rkfiHueiVyB3XSAFBxIo+Xs=
Subject key identifier: 76:16:D8:C5:93:21:D6:BE:4A:B6:6C:A2:69:AF:67:92:E7:76:9D:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9BE1B562A1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/6a44db-e6ca-429e-9e58-17526364fd12/1/dhbYxZMh1r5Ktmyiaa9nkud2nd8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/6a44db-e6ca-429e-9e58-17526364fd12/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:57:51 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 212898
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669506691745 (0x9be1b562a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:57:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7616d8c59321d6be4ab66ca269af6792e7769ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:74:57:36:6a:50:e2:2c:25:ed:1d:af:63:a5:
41:65:fd:88:12:13:de:dc:12:7f:f0:50:23:bf:3b:
a1:7b:98:2e:2d:c0:83:18:9f:08:4d:34:f9:cc:0a:
c3:f9:f7:dc:fb:19:ab:ec:45:f8:be:b2:a9:5b:55:
19:2a:8a:2b:f3:d7:89:cf:8b:21:a7:3d:3a:9c:e5:
20:c9:79:48:19:f8:c3:ab:53:f4:40:5a:53:46:a6:
05:ca:00:fb:5b:30:d2:48:82:7d:ef:a7:17:52:8f:
d3:5b:51:ac:11:24:8d:5c:d9:6f:10:16:80:60:86:
c5:c3:3e:c8:9d:65:93:6f:51:7f:85:86:75:d1:b8:
9a:ac:d0:a0:22:87:18:ea:d8:7c:b4:4a:27:bd:32:
09:cd:63:96:89:0a:ca:56:62:98:9c:eb:ee:e7:ed:
af:b1:e6:72:20:72:ff:c8:d6:02:f7:11:3e:9d:8e:
77:c2:99:b3:7b:ea:67:e0:38:8d:97:58:83:be:d9:
9b:33:59:62:fc:42:a2:2b:e0:56:4a:eb:87:bc:94:
be:0a:9a:e0:72:bf:b6:c9:38:f0:3b:6b:3f:18:79:
15:91:90:0a:59:22:b0:12:ac:48:a6:24:6c:3a:38:
81:c9:58:d5:a4:05:a9:09:e9:52:bf:d0:89:24:84:
7f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:16:D8:C5:93:21:D6:BE:4A:B6:6C:A2:69:AF:67:92:E7:76:9D:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a44db-e6ca-429e-9e58-17526364fd12/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a44db-e6ca-429e-9e58-17526364fd12/1/dhbYxZMh1r5Ktmyiaa9nkud2nd8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212898
Signature Algorithm: sha256WithRSAEncryption
5e:17:e0:ea:05:a9:5a:7d:2d:4e:05:65:9a:1b:e5:6d:42:22:
79:f2:80:53:e1:0d:ff:1e:7b:2f:ce:3a:17:57:9b:b8:4a:5d:
c1:bf:63:f1:e5:39:0c:6e:c5:e0:db:98:a1:b0:b1:7f:10:a2:
7c:a3:f5:36:b9:4e:ea:12:cb:ea:69:8f:0a:51:1c:17:c3:90:
ab:22:ee:a8:23:eb:ab:0f:e5:33:e9:1a:3f:89:26:75:bc:ca:
e3:49:a7:81:c7:f5:d1:84:96:db:af:7e:6c:2d:67:ea:52:c7:
e8:30:71:d9:6c:af:95:dc:43:30:e5:14:4f:b1:88:ad:cd:c9:
e2:0c:3e:a1:7e:9d:f3:c4:a2:01:bd:1f:a8:12:a9:c6:a9:17:
b4:c8:d8:fb:bf:a9:fa:a4:31:47:ed:9c:7b:07:6b:d4:bf:f8:
9c:9f:f3:a1:15:1a:da:5c:8f:3e:96:cd:36:f0:07:95:0a:a6:
b2:c8:03:13:d7:d1:c5:c2:5a:f2:1c:44:d5:dd:05:e5:ea:ff:
55:f2:45:17:12:f6:bd:9f:6d:2e:f7:55:a9:4f:b5:89:cd:6f:
19:37:1f:05:c2:0b:3b:c2:40:d1:a9:93:dd:a6:9f:21:2f:d3:
b4:11:59:69:d0:ac:ce:62:66:d5:e9:9d:b0:83:e9:cf:4e:22:
20:0d:87:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:46 2024 by rpki-client on console-fra.rpki-client.org