Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eKe8jvOEEdvkYteKIViizkJ9PHw.cer
File: eKe8jvOEEdvkYteKIViizkJ9PHw.cer (raw, json)
Hash identifier: wUM+0sx5VfYuH57HOOkGQgSjUKB4nwayOLrC+dtmTmc=
Subject key identifier: 78:A7:BC:8E:F3:84:11:DB:E4:62:D7:8A:21:58:A2:CE:42:7D:3C:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9B0611027D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/4243ca-b8ef-42ff-85c3-a94f22964bda/1/eKe8jvOEEdvkYteKIViizkJ9PHw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/4243ca-b8ef-42ff-85c3-a94f22964bda/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:01:04 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 209447
IP: 5.253.168.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665821708925 (0x9b0611027d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:01:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78a7bc8ef38411dbe462d78a2158a2ce427d3c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:07:a6:b4:9a:9b:ff:72:f1:d8:c8:4f:e8:
8d:78:26:05:89:0d:3d:03:17:1f:64:52:33:d4:4e:
fb:91:a2:10:77:84:5f:f4:ff:d7:6d:39:50:08:2e:
cd:48:b9:cb:2d:61:08:24:b3:3a:e8:0a:ef:e3:18:
7a:e7:1a:08:1e:0e:91:33:a2:43:64:f0:45:a9:f6:
69:07:b8:b0:f2:7e:5f:0d:3c:fa:98:55:b3:5f:b2:
ee:51:34:7b:4a:35:da:c5:0f:f9:1b:b7:ec:fc:2a:
9e:4a:91:1a:ed:52:a2:ce:c5:f2:11:80:e6:53:cc:
33:f9:8e:3f:ec:af:1f:f9:98:54:d5:19:ac:d6:26:
5f:5e:15:9e:b9:94:93:dd:f6:b5:4e:cd:ef:bb:a1:
ca:92:d4:c6:3d:a7:8b:20:10:17:38:61:e9:a5:06:
c2:8b:38:c3:2e:2a:ed:e3:66:47:bb:8d:f3:2d:30:
77:4f:31:b1:f6:bd:b1:97:67:76:46:af:b4:69:fb:
d0:db:99:72:c5:95:31:12:54:d0:c1:8d:11:db:a0:
55:c0:9c:f7:a9:84:1b:ed:94:f0:b2:f9:36:c7:ff:
bd:d4:c0:c8:56:6c:52:9b:b7:0c:78:54:46:2a:12:
f4:29:30:18:63:92:37:b6:16:6f:38:fb:6c:7e:78:
c4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A7:BC:8E:F3:84:11:DB:E4:62:D7:8A:21:58:A2:CE:42:7D:3C:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4243ca-b8ef-42ff-85c3-a94f22964bda/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4243ca-b8ef-42ff-85c3-a94f22964bda/1/eKe8jvOEEdvkYteKIViizkJ9PHw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.168.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209447
Signature Algorithm: sha256WithRSAEncryption
aa:25:97:be:29:03:7d:56:66:12:a4:3e:b0:fe:77:cd:b0:39:
a7:7b:14:93:57:c3:ba:d8:84:e8:f7:91:c0:b3:5b:02:f1:17:
3b:70:65:83:19:df:6c:80:95:03:af:44:b7:4d:5e:0f:e6:2f:
7c:45:5f:a8:22:f0:95:5e:2d:2b:22:0a:89:a1:35:d9:cb:a0:
7c:80:6c:f3:bc:65:ec:42:ec:ab:e8:b0:f1:10:33:55:55:d2:
55:f4:a6:78:15:87:25:5b:e2:85:ea:aa:80:8d:21:de:5d:ce:
a4:71:2d:46:c9:52:e8:0a:79:57:28:38:7c:68:8a:e3:c0:2e:
56:d3:0c:4d:c1:d5:05:fd:8d:1d:a1:23:10:ae:35:a6:56:00:
19:67:28:d6:8a:24:ad:7c:88:b6:3e:92:1e:a5:04:b0:14:64:
82:75:c0:d9:e2:60:10:d5:c9:b7:9c:d7:9a:03:1b:3b:c0:7a:
c5:15:e8:5b:21:fe:30:70:88:9f:6a:25:42:d6:04:64:83:92:
7c:40:26:ef:eb:6e:df:39:ba:bb:a8:0d:85:ac:91:af:02:6c:
2b:bb:7f:7c:01:a3:53:75:f4:b7:c4:4d:42:45:aa:8d:dc:9b:
fb:04:40:87:6b:e3:2e:88:3f:df:f7:4a:bd:8b:c8:89:31:12:
5c:b2:79:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:35 2024 by rpki-client on console-ams.rpki-client.org