Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fnpBH3uE1qMCQXk904Y3bc9Ovq8.cer
File: fnpBH3uE1qMCQXk904Y3bc9Ovq8.cer (raw, json)
Hash identifier: 8derjDDgeOxHu9BeETwreVOeZdg6sJgtUxPYNput4A0=
Subject key identifier: 7E:7A:41:1F:7B:84:D6:A3:02:41:79:3D:D3:86:37:6D:CF:4E:BE:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A65A9F7BEA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/e374f0-9f1b-4f66-8f31-620e4993a4c1/1/fnpBH3uE1qMCQXk904Y3bc9Ovq8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/e374f0-9f1b-4f66-8f31-620e4993a4c1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:01:17 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 44647
IP: 92.53.128.0/19
IP: 2a00:1c80::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 714484972522 (0xa65a9f7bea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:01:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e7a411f7b84d6a30241793dd386376dcf4ebeaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5c:a3:7c:5a:02:8b:8d:b3:9f:81:da:cc:1e:
d4:43:91:64:b7:23:e8:4f:86:3c:ab:8e:d4:99:86:
e8:8d:26:2b:f4:89:c3:cf:74:3e:a2:6e:dd:81:fe:
35:5e:ef:7b:3f:f4:54:ab:1b:a1:84:cc:05:39:03:
c1:c0:43:0b:24:c8:5b:1d:cc:39:83:df:75:f8:30:
a0:7c:49:20:b5:7b:a6:6d:d6:50:a2:33:2c:97:b1:
a7:34:fb:2f:78:de:ef:a9:b4:0d:b8:7a:10:e5:7b:
06:ab:56:55:af:32:2d:a7:34:c6:2e:7b:83:22:72:
8d:69:e1:71:70:1e:36:57:29:0e:29:a0:44:4c:c9:
6c:66:8e:82:31:f5:c4:0c:64:d6:e6:ff:f8:60:38:
7e:42:ee:f9:47:5b:71:40:3c:07:92:b6:dd:96:1e:
1a:13:4c:28:d7:e1:3f:a7:48:0e:0d:bd:d1:9a:27:
90:13:da:93:de:da:a8:72:3f:df:5f:61:f3:2b:ef:
31:6f:ee:36:d4:f9:ae:b1:7a:22:c0:a2:29:40:e8:
07:f0:fe:13:c3:6b:3b:d5:3a:39:7d:73:62:27:7a:
af:8a:0a:8e:fe:49:8f:c5:33:65:51:cf:7c:6f:ad:
a1:85:92:6e:42:96:17:3b:ac:77:fd:48:d8:90:c1:
36:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7A:41:1F:7B:84:D6:A3:02:41:79:3D:D3:86:37:6D:CF:4E:BE:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e374f0-9f1b-4f66-8f31-620e4993a4c1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e374f0-9f1b-4f66-8f31-620e4993a4c1/1/fnpBH3uE1qMCQXk904Y3bc9Ovq8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.128.0/19
IPv6:
2a00:1c80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44647
Signature Algorithm: sha256WithRSAEncryption
02:9b:ba:f4:c7:79:8a:90:94:a1:b5:ad:76:36:c6:67:cd:cf:
55:ab:95:a1:7c:2c:17:fd:ec:89:1e:39:7b:b0:a3:5f:fa:5e:
9a:cb:e0:70:8c:16:a7:56:e2:93:40:1d:c2:ad:f1:9a:80:a7:
58:eb:b7:49:6a:66:4d:65:e5:31:a9:30:61:0a:5b:ec:53:38:
37:5d:da:9e:b4:01:2f:51:a6:6f:35:e5:cb:f1:72:83:64:a6:
fa:09:89:18:ca:61:2b:4d:c4:ba:55:90:e1:66:b7:ae:46:1d:
7b:4d:d8:96:0d:9b:b4:cc:2b:53:d5:4f:1c:f4:53:46:f9:5e:
1a:d4:bb:c7:8c:19:c5:69:4d:9e:4a:cc:db:0a:64:79:08:4a:
50:90:bb:78:ad:c4:a1:f3:ea:af:e7:42:a7:c9:0b:09:8d:a2:
1f:5e:2e:74:72:4b:15:f6:e2:6b:c0:fc:1c:2c:7c:ad:97:25:
9d:08:62:db:f2:32:fd:5a:90:cb:fd:f3:fa:d5:86:24:5c:e2:
04:f4:3f:c3:eb:b7:61:7f:b1:b8:1c:ff:13:7d:15:e5:03:36:
f8:07:2f:85:93:2c:eb:f2:be:37:c2:d1:7a:ba:c4:6d:bb:4e:
61:06:f7:9b:70:88:96:92:6a:9a:dd:bf:69:c9:fa:b6:c2:99:
25:78:ae:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:19 2024 by rpki-client on console-fra.rpki-client.org