Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fj-AUWAcaVT8cW2XcGJNcJ-uBuk.cer
File: fj-AUWAcaVT8cW2XcGJNcJ-uBuk.cer (raw, json)
Hash identifier: SYFwW9sSAQP1scEWTfRFVm4TftaUck49tJSSQtpylJ4=
Subject key identifier: 7E:3F:80:51:60:1C:69:54:FC:71:6D:97:70:62:4D:70:9F:AE:06:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A4683E24E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/9d5d30-b8bd-4527-9966-6bcb6b07ba9c/1/fj-AUWAcaVT8cW2XcGJNcJ-uBuk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/9d5d30-b8bd-4527-9966-6bcb6b07ba9c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:04:39 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 198771
IP: 91.239.13.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 706123539686 (0xa4683e24e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:04:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e3f8051601c6954fc716d9770624d709fae06e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:7a:5f:5d:e1:51:b6:9a:7b:9a:a6:55:6d:
01:5c:4b:a7:8b:f7:de:2e:3a:81:03:e9:cc:9d:e7:
44:23:11:ea:6c:e6:98:a9:b4:45:9d:e5:26:6e:a3:
ee:d8:40:15:3c:3a:36:3a:a5:cd:46:78:f3:75:09:
15:75:e6:d6:d7:ad:5d:18:32:b0:5b:08:88:c6:c0:
ef:42:e5:b3:87:52:af:90:a6:c9:d9:0b:f8:9b:fd:
7b:f3:ec:2e:d3:68:a4:0d:1a:dc:1b:87:ee:44:c6:
d0:32:7e:6f:77:44:2e:1e:ae:30:91:17:0b:13:2f:
5f:77:dc:f3:f7:ff:02:93:b9:23:bb:06:02:27:57:
37:9e:a3:40:80:0c:bd:74:8c:9d:34:fa:05:33:9b:
f8:89:0e:76:aa:c6:25:38:84:82:c1:17:3b:61:9d:
87:0a:04:13:34:cd:94:9e:87:bf:26:79:1d:fd:50:
c9:57:dc:ce:db:dd:2a:2a:9a:fe:90:5e:df:bc:ef:
e8:26:37:b1:24:ea:27:90:99:3b:42:e5:cb:bb:4c:
3e:bf:62:89:05:e1:97:09:0a:5b:33:3f:bc:28:fb:
c1:73:08:c8:77:9c:da:34:dd:97:09:fe:55:4f:c8:
aa:32:6e:91:71:03:92:30:6a:c3:bf:0c:ea:aa:76:
c5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3F:80:51:60:1C:69:54:FC:71:6D:97:70:62:4D:70:9F:AE:06:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9d5d30-b8bd-4527-9966-6bcb6b07ba9c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9d5d30-b8bd-4527-9966-6bcb6b07ba9c/1/fj-AUWAcaVT8cW2XcGJNcJ-uBuk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.13.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198771
Signature Algorithm: sha256WithRSAEncryption
ae:3c:b3:f2:8b:bf:90:6d:dc:4d:15:6d:05:69:32:c6:7a:ac:
0b:d1:e4:37:b5:54:c7:60:5c:5d:15:99:f6:41:78:11:4d:dc:
8c:75:50:5a:2a:b1:5f:84:31:27:4e:84:c0:a3:37:16:ff:4b:
a9:a0:21:96:ac:b6:84:b3:b9:0d:52:52:29:29:d8:6d:8b:c0:
c2:26:c8:2d:18:39:67:97:9e:c8:4f:56:c5:7a:23:0c:1c:93:
a4:7b:42:1f:88:f7:07:e9:9f:a1:ec:e2:fe:ef:29:9d:05:d8:
1a:13:f6:69:13:bc:3f:2a:f4:f6:05:c9:85:1c:27:4c:ae:59:
18:7c:bd:3d:82:5e:00:ab:7c:16:2e:00:10:70:93:cb:09:9b:
33:6c:d1:f9:3d:a1:79:2a:c0:22:b7:a1:69:38:4c:bc:35:c8:
05:1c:5e:32:0d:59:f3:1e:11:8e:20:ae:45:ed:c6:ac:f2:8c:
14:02:df:2d:7c:c8:19:ec:f3:71:5a:78:eb:d0:46:55:42:a5:
84:ac:2a:38:d0:86:c0:61:e8:27:48:fd:36:59:cf:fc:53:48:
16:56:bf:91:45:71:98:44:4d:7b:d5:fb:08:1f:6d:a1:a7:85:
1d:b3:52:6e:44:23:3a:b9:93:75:e9:69:8a:27:c9:ac:be:5d:
76:95:d6:43
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgIGAKRoPiTmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTAwNDM5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3ZTNmODA1MTYw
MWM2OTU0ZmM3MTZkOTc3MDYyNGQ3MDlmYWUwNmU5MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAx7t6X13hUbaae5qmVW0BXEuni/feLjqBA+nMnedEIxHq
bOaYqbRFneUmbqPu2EAVPDo2OqXNRnjzdQkVdebW161dGDKwWwiIxsDvQuWzh1Kv
kKbJ2Qv4m/178+wu02ikDRrcG4fuRMbQMn5vd0QuHq4wkRcLEy9fd9zz9/8Ck7kj
uwYCJ1c3nqNAgAy9dIydNPoFM5v4iQ52qsYlOISCwRc7YZ2HCgQTNM2Unoe/Jnkd
/VDJV9zO290qKpr+kF7fvO/oJjexJOonkJk7QuXLu0w+v2KJBeGXCQpbMz+8KPvB
cwjId5zaNN2XCf5VT8iqMm6RcQOSMGrDvwzqqnbF0QIDAQABo4ICoDCCApwwHQYD
VR0OBBYEFH4/gFFgHGlU/HFtl3BiTXCfrgbpMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmLzlkNWQzMC1iOGJkLTQ1Mjct
OTk2Ni02YmNiNmIwN2JhOWMvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvOWQ1ZDMwLWI4YmQtNDUyNy05
OTY2LTZiY2I2YjA3YmE5Yy8xL2ZqLUFVV0FjYVZUOGNXMlhjR0pOY0otdUJ1ay5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAW+8NMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMIczANBgkqhkiG
9w0BAQsFAAOCAQEArjyz8ou/kG3cTRVtBWkyxnqsC9HkN7VUx2BcXRWZ9kF4EU3c
jHVQWiqxX4QxJ06EwKM3Fv9LqaAhlqy2hLO5DVJSKSnYbYvAwibILRg5Z5eeyE9W
xXojDByTpHtCH4j3B+mfoezi/u8pnQXYGhP2aRO8Pyr09gXJhRwnTK5ZGHy9PYJe
AKt8Fi4AEHCTywmbM2zR+T2heSrAIrehaThMvDXIBRxeMg1Z8x4RjiCuRe3GrPKM
FALfLXzIGezzcVp469BGVUKlhKwqONCGwGHoJ0j9NlnP/FNIFla/kUVxmERNe9X7
CB9toaeFHbNSbkQjOrmTdelpiifJrL5ddpXWQw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:19 2024 by rpki-client on console-fra.rpki-client.org