Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eL_XjEWV9lxHFh3yV4r_j3G3QkM.cer
File: eL_XjEWV9lxHFh3yV4r_j3G3QkM.cer (raw, json)
Hash identifier: 4ssyyqYiYrh/nuRTaVezJeZw2qqgP5ZAUzlwC/4C8lA=
Subject key identifier: 78:BF:D7:8C:45:95:F6:5C:47:16:1D:F2:57:8A:FF:8F:71:B7:42:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AA4274DACD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/e9eaed-0033-4f6e-859e-f96df302068e/1/eL_XjEWV9lxHFh3yV4r_j3G3QkM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/e9eaed-0033-4f6e-859e-f96df302068e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:06:42 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 28954
IP: 80.86.64.0/20
IP: 194.127.130.0/23
IP: 194.127.152.0/23
IP: 2a0a:5a00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 731259394765 (0xaa4274dacd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:06:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78bfd78c4595f65c47161df2578aff8f71b74243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a0:7a:39:9b:b8:e1:0f:63:c3:97:65:59:bd:
04:52:40:68:43:4e:b0:ca:e0:49:4a:32:f7:2f:40:
cc:99:28:42:57:3a:4e:98:40:f1:7f:28:46:96:6e:
03:67:8a:6c:33:80:83:b9:60:20:d5:6e:f1:1c:f5:
a8:f1:a3:22:51:5f:ed:f0:03:f6:c9:86:6d:11:75:
bd:4a:40:9e:57:0e:02:d1:f6:bc:30:68:f8:f0:e1:
91:bd:d5:83:dc:1f:d7:2e:b8:f5:92:19:1a:87:b9:
ff:ae:9e:a5:62:61:aa:24:40:65:25:c7:73:7e:f1:
05:c9:b5:aa:f3:4e:d8:5e:fd:43:79:41:11:ff:59:
29:58:3b:9e:97:4c:3c:ea:cd:7c:1f:b8:8d:0b:79:
05:b3:6c:8f:a8:37:3e:c6:9b:31:58:4d:78:d6:5d:
53:f8:31:5b:c9:cc:8c:4a:44:63:7d:a8:1e:a7:6a:
a5:ba:35:fa:2b:24:9f:ae:87:e6:c1:ea:f6:c7:c2:
27:bf:e9:df:ab:ba:9c:1c:55:a2:b9:e3:d4:04:07:
7f:68:fe:95:fe:5b:81:ed:1c:0e:4d:42:07:5d:b9:
7a:86:c7:6e:89:da:26:ad:d9:bd:4f:db:07:99:52:
08:ec:4c:2e:f6:3b:5c:f8:43:95:71:14:b9:c7:fb:
d2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BF:D7:8C:45:95:F6:5C:47:16:1D:F2:57:8A:FF:8F:71:B7:42:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9eaed-0033-4f6e-859e-f96df302068e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9eaed-0033-4f6e-859e-f96df302068e/1/eL_XjEWV9lxHFh3yV4r_j3G3QkM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.64.0/20
194.127.130.0/23
194.127.152.0/23
IPv6:
2a0a:5a00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28954
Signature Algorithm: sha256WithRSAEncryption
79:da:5c:1f:0f:1b:83:1d:3a:28:0e:dd:a3:cd:86:e6:09:40:
e2:51:71:f7:66:dd:7e:b7:77:0f:e7:ed:53:56:1c:81:7a:5b:
d6:d0:5b:36:aa:f5:1c:b9:be:23:a7:b5:c4:72:7f:44:fd:d3:
bb:43:ff:88:87:31:6d:a4:47:9b:f5:ac:a6:45:cc:b0:12:56:
6a:a8:1d:30:4e:6b:7a:15:42:e5:ad:56:48:ac:bc:65:56:33:
b1:fe:a1:b5:09:e3:e4:72:a7:10:45:af:2c:38:8d:82:68:32:
5a:a6:bd:59:e3:55:f1:dd:6b:ac:a1:3d:9b:ab:16:d1:f3:08:
6d:9b:5d:45:92:60:28:57:29:25:b2:31:6c:d8:89:9e:c5:08:
26:cd:d7:0d:22:2f:98:49:d6:b1:87:45:85:63:1c:5e:08:ef:
52:82:9b:af:18:07:08:57:1e:0f:fc:73:e7:57:52:e0:b6:af:
a9:0e:1d:a7:51:48:67:59:b3:76:eb:49:c3:5f:a3:93:ea:e4:
39:9c:92:b1:25:0d:ae:82:31:e2:ed:94:3b:ff:6c:fd:c3:d4:
51:45:64:bd:71:39:02:44:12:07:39:3a:86:cd:8e:85:19:75:
eb:84:52:1c:32:a2:c1:84:ce:53:38:7e:51:d6:8c:4a:4b:27:
fe:ef:14:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:14 2024 by rpki-client on console-fra.rpki-client.org