Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3VUwXDbTCmsDMEjUW_7bJL-qc8.cer
File: f3VUwXDbTCmsDMEjUW_7bJL-qc8.cer (raw, json)
Hash identifier: XBdEGn+wQJ8PBZrWEg/s7FWP9Hj/8ahyuQEofGRdFS8=
Subject key identifier: 7F:75:54:C1:70:DB:4C:29:AC:0C:C1:23:51:6F:FB:6C:92:FE:A9:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9A4BD7DB89
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/18b1a0-9dcf-43ef-b3fc-2bbfbe1f86a8/1/f3VUwXDbTCmsDMEjUW_7bJL-qc8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/18b1a0-9dcf-43ef-b3fc-2bbfbe1f86a8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:53:41 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 201435
IP: 185.72.52.0/22
IP: 2a03:3be0::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662697401225 (0x9a4bd7db89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:53:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f7554c170db4c29ac0cc123516ffb6c92fea9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7a:40:e4:3f:09:cf:cf:1d:05:41:38:99:65:
ce:68:b1:f2:d2:4c:93:c9:09:fb:e2:16:14:6d:15:
41:f5:0d:06:38:f2:84:11:13:80:ae:91:60:fc:4f:
2d:92:72:4e:bc:91:72:5a:ad:b9:f6:2f:64:bd:ec:
1e:d2:c3:5b:46:9e:7f:4c:6f:e6:d1:69:8c:38:26:
ce:34:1e:49:12:fe:b3:54:9a:f7:17:61:53:05:1f:
88:27:08:1a:82:ba:3e:1e:76:68:0c:9a:be:ae:0f:
d2:55:17:b8:64:7c:65:c9:74:84:b1:63:91:41:9c:
de:23:bb:fd:ec:05:5e:e5:8e:6a:dc:cd:8a:06:d9:
24:56:d0:8e:f5:7b:6d:a5:fc:e5:0e:b3:6e:fc:6a:
6e:4f:cf:79:02:6c:59:88:e2:a3:bf:47:3f:a2:32:
52:88:e9:a4:05:4d:d2:c7:8e:5d:43:5a:37:59:ce:
32:21:af:a6:6f:f1:56:05:56:cf:3b:bb:f1:bd:f7:
cb:0b:9d:12:e9:ba:79:41:16:b2:68:e5:a0:3d:a6:
f2:7a:60:f9:e8:9a:51:96:ad:54:0a:6e:1e:b2:d8:
a3:17:95:1d:57:5f:6f:fe:b4:d3:66:4f:32:81:37:
cf:5c:54:ba:42:6f:92:17:8d:17:28:bf:79:76:2a:
ec:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:75:54:C1:70:DB:4C:29:AC:0C:C1:23:51:6F:FB:6C:92:FE:A9:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18b1a0-9dcf-43ef-b3fc-2bbfbe1f86a8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18b1a0-9dcf-43ef-b3fc-2bbfbe1f86a8/1/f3VUwXDbTCmsDMEjUW_7bJL-qc8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.52.0/22
IPv6:
2a03:3be0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201435
Signature Algorithm: sha256WithRSAEncryption
52:3d:10:16:91:1b:8e:41:1b:68:61:22:5e:bc:70:fb:89:c3:
c6:4a:6d:e7:df:52:c2:c7:6a:a9:70:c7:f7:dc:7c:de:bd:bf:
31:ff:70:63:ad:e4:ae:b7:e3:31:13:db:99:da:68:aa:1b:47:
a6:6b:73:50:cf:cc:d0:c3:dd:6d:00:90:ff:c6:87:ba:9a:d7:
28:90:74:7d:12:ae:c3:34:44:c2:25:45:5a:96:6a:90:d1:ca:
d6:ac:0b:4a:49:06:85:53:68:b5:f2:83:f0:c9:e7:7c:03:9a:
74:d0:ec:54:fd:d6:9b:a9:ae:02:a3:ab:f6:d0:ec:3d:71:f4:
5d:06:a7:4a:c7:27:43:9e:df:43:2e:c2:9e:eb:c1:13:7c:41:
ce:ef:3e:da:46:06:3c:33:8b:f2:75:4d:d1:db:bd:9f:d1:ec:
c6:7b:be:0a:0a:63:3a:06:7e:16:1e:33:24:76:9a:a5:f9:d9:
bb:12:32:5b:b4:3a:e7:f5:45:3c:0e:5a:6c:95:6b:05:12:5b:
36:31:36:2a:78:25:fe:75:57:76:82:21:36:84:b2:68:4a:a8:
ee:9c:f9:ce:22:f5:8f:49:1e:5f:c3:c6:9d:7a:15:21:93:ce:
12:7c:a6:be:70:93:55:ca:89:8d:64:8c:b9:cb:27:03:dd:12:
43:9f:7b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:33 2024 by rpki-client on console-ams.rpki-client.org