Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eqiKpsaTMKzFMt6-qphTAIKNrRs.cer
File: eqiKpsaTMKzFMt6-qphTAIKNrRs.cer (raw, json)
Hash identifier: Ie7mP4InjF2qzgoBbv0vawZrjiThwEHn7oO0Ya/g7aw=
Subject key identifier: 7A:A8:8A:A6:C6:93:30:AC:C5:32:DE:BE:AA:98:53:00:82:8D:AD:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A2D80CE101
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/43026d-6ab9-4000-909f-a26613b19c32/1/eqiKpsaTMKzFMt6-qphTAIKNrRs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/43026d-6ab9-4000-909f-a26613b19c32/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:59:52 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 213224
IP: 195.8.46.0/24
IP: 2a0c:6c00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699409424641 (0xa2d80ce101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:59:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7aa88aa6c69330acc532debeaa985300828dad1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3d:80:d9:45:0f:4b:d6:e0:6a:86:04:4a:85:
e1:0c:a3:9c:03:9b:b4:b8:26:89:50:06:6b:16:45:
f8:40:21:5b:89:c5:ad:ff:57:e4:3a:84:47:49:3e:
97:f3:ba:db:cb:e5:08:cf:cf:49:3f:92:f7:52:f9:
f2:3f:06:e8:37:b4:71:69:2b:f3:68:0e:48:63:ec:
c0:6a:8f:df:22:44:4b:21:e9:9a:7f:a9:37:5b:83:
7b:76:da:a6:20:f2:59:92:bd:26:59:90:e1:47:cf:
89:e5:b8:a0:dc:8c:7f:9e:87:a2:95:46:fa:cf:80:
89:81:b7:f1:0a:48:b8:b8:aa:a5:0f:b3:f8:89:85:
7b:a0:51:11:ad:fb:88:1a:69:da:06:01:e5:37:65:
eb:62:f7:8d:87:c1:f2:fd:6d:2e:d5:cd:19:54:87:
d2:13:f7:97:ce:33:e1:a8:9f:ab:e8:2a:86:46:aa:
f6:4e:ee:37:63:14:a9:5d:55:24:32:eb:0a:48:dc:
aa:68:c4:86:45:2c:93:72:47:0d:3f:3f:1d:dc:07:
4b:e6:81:d4:6a:a2:18:8a:38:95:b2:12:69:f1:87:
6d:d0:47:ce:33:6f:87:92:3f:b1:74:08:ff:0f:e9:
ae:05:0f:d0:cd:8c:ea:36:4f:23:88:49:4b:76:32:
7e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A8:8A:A6:C6:93:30:AC:C5:32:DE:BE:AA:98:53:00:82:8D:AD:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/43026d-6ab9-4000-909f-a26613b19c32/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/43026d-6ab9-4000-909f-a26613b19c32/1/eqiKpsaTMKzFMt6-qphTAIKNrRs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.46.0/24
IPv6:
2a0c:6c00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213224
Signature Algorithm: sha256WithRSAEncryption
7c:e9:c4:ea:4c:3a:74:e3:01:40:67:12:7c:54:fe:14:cd:0e:
2f:5c:5f:6e:fd:d0:6c:30:a2:d0:1e:c1:c8:3f:13:8f:67:f7:
6f:fb:d2:70:aa:10:8c:ab:3f:3c:c7:25:75:11:ca:cc:b2:3c:
43:f3:67:53:44:13:c0:16:60:8d:ca:35:24:61:66:66:51:b9:
79:6b:8c:fa:7f:1f:67:bd:5c:60:d0:ee:10:d3:1c:11:1b:a6:
6b:92:c4:99:85:b6:21:7c:32:df:d9:da:52:31:54:a6:8b:79:
9b:ec:2d:ab:9e:f9:e3:1b:77:01:f1:0f:d4:02:b2:37:b8:26:
b6:82:fc:3f:61:a1:33:4f:76:45:5f:67:48:4f:4f:d8:86:ad:
64:b9:87:4b:72:eb:a8:05:98:22:de:ef:30:60:66:0c:bc:e5:
fe:7d:16:45:28:cb:11:05:c2:39:8a:7b:61:35:e9:a7:aa:94:
70:b7:2c:37:88:45:f0:77:d0:2f:ed:d5:09:a2:44:16:96:b3:
82:d3:2c:92:77:db:0b:c3:cd:14:fa:5c:6f:46:58:5c:4b:dc:
d8:5c:de:f3:33:6a:8f:4e:02:fb:6c:7a:5e:5e:8c:bb:21:12:
3d:dd:a4:55:85:fb:49:95:02:cd:8c:66:d0:73:8c:7c:5f:e7:
6c:d3:7c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:04 2024 by rpki-client on console-fra.rpki-client.org