Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dmS3kf5S9lJirZKif_94cX83Dgg.cer
File: dmS3kf5S9lJirZKif_94cX83Dgg.cer (raw, json)
Hash identifier: 11EeGT/aFqaBlGopu/g1d3IC/8hHI2FTWdJVaz+DFSc=
Subject key identifier: 76:64:B7:91:FE:52:F6:52:62:AD:92:A2:7F:FF:78:71:7F:37:0E:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 98B44DC53B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/6/7664B791FE52F65262AD92A27FFF78717F370E08.mft
caRepository: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/6
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Sat 01 Jan 2022 00:00:50 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 211026
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655860024635 (0x98b44dc53b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:00:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7664b791fe52f65262ad92a27fff78717f370e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ae:76:74:e5:0f:4f:e6:f2:7f:4b:1f:44:ea:
37:70:be:7c:b6:76:6d:a3:68:7d:a3:05:73:f8:a4:
3d:ce:45:45:ef:96:04:7c:16:e7:1c:25:fd:bc:58:
c5:6a:87:e4:3d:32:c6:88:2f:03:8e:46:c0:b0:2e:
41:f7:34:86:6d:29:d7:31:74:c2:3f:e9:22:9b:f8:
b7:fd:9e:66:fe:7a:22:dc:eb:9c:71:6e:fa:1b:2b:
1b:df:de:cb:9d:2e:04:61:8f:8b:4c:1c:fe:8e:ce:
18:43:47:e7:6f:2c:d3:60:b0:21:f3:bf:dc:40:1a:
2e:00:29:ed:81:7e:58:41:35:97:cd:e1:83:1b:97:
e7:73:ce:34:f3:13:cd:b7:96:48:33:42:fe:5a:37:
59:31:02:8f:53:51:65:c8:f2:d7:53:fa:68:76:23:
7a:76:40:e9:ee:7b:77:f5:5d:ee:63:2e:72:98:24:
6f:b4:e2:3c:02:e8:b9:12:85:01:58:2c:69:cd:98:
84:ce:e9:87:34:de:2b:e4:4d:0e:a6:36:78:b3:1a:
f3:0e:27:d4:e4:77:52:89:73:e3:1c:2a:71:f4:ae:
c9:e6:02:73:eb:e6:e7:bb:83:65:8a:c1:6e:dc:86:
3a:af:ce:9a:a4:70:cc:3a:92:70:a4:cf:59:98:20:
fb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:64:B7:91:FE:52:F6:52:62:AD:92:A2:7F:FF:78:71:7F:37:0E:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/6
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/6/7664B791FE52F65262AD92A27FFF78717F370E08.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211026
Signature Algorithm: sha256WithRSAEncryption
55:a8:04:a2:f2:f8:5f:cc:8c:10:f7:e3:e9:38:a9:ad:ac:2a:
f6:92:68:30:83:3f:3c:82:78:a6:52:10:32:7d:82:0a:53:1a:
74:25:8e:a7:95:be:ea:ff:9e:2c:80:b8:cf:84:9e:c8:c7:7c:
2d:e3:ab:c4:9e:3d:f8:fa:5a:fd:e7:bb:6c:db:e3:fb:04:be:
ba:ff:de:78:47:83:0f:e9:2d:89:05:cb:cc:20:b9:5e:a1:7d:
59:97:87:7d:4e:bf:5d:6e:5b:61:1a:0a:8a:ed:87:9f:15:db:
23:21:51:6f:af:e8:fd:73:82:7c:0b:84:81:bb:31:7b:0d:06:
db:76:6f:6c:96:c6:70:a9:d1:ee:c5:49:be:46:44:c7:5c:39:
cd:be:6d:23:16:9b:be:09:7b:17:e5:40:9f:19:21:dd:88:42:
a2:56:78:4c:49:4f:5c:a9:f2:a8:4e:85:c5:3f:d0:53:13:fa:
e3:2f:84:64:3b:bc:cc:1a:26:c7:c0:ed:a2:05:96:ed:8e:18:
80:46:91:ef:71:1f:af:76:90:38:39:31:91:53:63:ea:91:b8:
05:b1:38:dd:cf:04:56:06:25:3e:45:48:7d:40:72:98:61:bc:
9f:90:8f:d5:4a:99:4f:34:fd:7c:b3:1a:49:5d:65:63:7e:19:
6f:6f:00:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:32 2024 by rpki-client on console-ams.rpki-client.org