Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eSXkpWIPSL71b4ITKjHM2EFGjUU.cer
File: eSXkpWIPSL71b4ITKjHM2EFGjUU.cer (raw, json)
Hash identifier: NtJCvQLLL3YSPKk5GhQiC1mLNkC6oyQ11JdEpjQpunc=
Subject key identifier: 79:25:E4:A5:62:0F:48:BE:F5:6F:82:13:2A:31:CC:D8:41:46:8D:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 98B3EE9277
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/4/7925E4A5620F48BEF56F82132A31CCD841468D45.mft
caRepository: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/4
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Sat 01 Jan 2022 00:00:44 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 211777
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655853785719 (0x98b3ee9277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:00:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7925e4a5620f48bef56f82132a31ccd841468d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a6:ac:0f:b9:05:0f:c6:57:70:f0:11:9c:f0:
52:b8:c3:15:b5:79:95:20:68:82:00:dd:d7:2d:64:
59:d1:71:47:22:cd:d6:6f:29:0d:4b:87:62:cb:d6:
36:b5:f6:25:56:46:06:7c:19:17:c4:73:e2:f7:a6:
26:0f:29:35:8b:af:f4:cd:0e:c0:23:d2:4e:72:b3:
91:e2:1e:80:38:72:b5:a5:0c:4a:60:fe:d6:e6:66:
e2:fe:17:91:31:ef:00:52:68:3f:52:2f:f7:79:50:
0b:32:e3:3e:de:87:4e:9e:28:ad:9b:af:ac:44:19:
ff:40:11:4e:dc:c5:ff:1c:8c:15:02:6a:ed:97:30:
91:7a:58:22:c4:45:3c:52:3a:03:6a:7e:38:33:1c:
34:7a:e6:67:77:98:14:ab:8a:25:d8:92:92:a1:6d:
8a:e8:c1:b4:ba:7e:2c:b9:91:89:a4:a6:a9:67:39:
53:c2:c5:ca:38:0a:c8:14:8c:bb:16:90:0a:b5:46:
d4:4b:1f:5f:d5:9c:45:9b:64:c7:4e:b4:b0:a9:83:
e1:05:e2:74:12:58:26:e2:6c:c9:dd:7f:90:3d:a6:
3a:c0:79:22:e4:b8:da:43:82:7b:6e:5c:a4:74:d9:
ff:d0:80:d9:4d:79:b2:1b:df:02:c7:fb:19:1e:55:
a3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:25:E4:A5:62:0F:48:BE:F5:6F:82:13:2A:31:CC:D8:41:46:8D:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/4
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/4/7925E4A5620F48BEF56F82132A31CCD841468D45.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211777
Signature Algorithm: sha256WithRSAEncryption
a5:c1:d3:51:6b:5a:23:63:9e:18:96:bc:6d:97:69:78:7d:ef:
e4:ea:fc:38:2e:70:6c:1f:70:25:b1:8a:46:0e:a9:96:60:ec:
b0:f8:6f:cd:98:c8:27:ce:2c:29:ca:df:9d:67:01:32:3f:d3:
8b:61:63:b7:2b:94:b7:8a:f2:72:fb:b7:83:db:52:b9:31:49:
c1:e4:40:a4:bc:b3:7b:c2:91:23:b1:0d:f8:6e:25:ca:dd:53:
0e:f8:6f:13:a8:4d:39:e6:8d:0a:0f:16:8d:de:55:c8:f5:98:
9a:81:9d:be:f9:1f:f1:b4:89:ca:1d:cf:42:e4:34:83:86:70:
67:2f:c6:18:10:a2:c1:b9:67:d0:d8:9c:57:9d:39:83:72:10:
58:69:d0:6c:27:f4:2b:cc:49:a9:0d:7e:2d:69:e3:5e:b3:59:
29:1f:f9:e8:7c:f3:bc:8a:20:39:2b:67:d4:c9:b1:a0:54:a6:
4a:e1:9e:09:25:3a:90:9f:54:41:b9:8f:d6:10:23:28:74:6b:
6b:bf:56:a9:0f:68:e9:93:50:92:ba:5d:d1:cd:5f:e2:4a:72:
70:46:08:1f:b1:4a:8b:cc:08:d0:cd:a1:88:29:59:e7:33:1a:
62:4b:ec:15:a2:0a:ca:48:27:3f:f9:19:e7:4f:db:0c:cf:a0:
d9:34:38:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:37 2024 by rpki-client on console-ams.rpki-client.org