Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g6f-e9jHZ7PONZDiW6NS078BCzE.cer
File: g6f-e9jHZ7PONZDiW6NS078BCzE.cer (raw, json)
Hash identifier: /A5YBAhyIy2XQHRdLWivDlOxT18RhoHlvsQXMaMJlog=
Subject key identifier: 83:A7:FE:7B:D8:C7:67:B3:CE:35:90:E2:5B:A3:52:D3:BF:01:0B:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A1B836AED3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/e2f959-ad13-431e-a4e2-0bdcc8fc0c4b/1/g6f-e9jHZ7PONZDiW6NS078BCzE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/e2f959-ad13-431e-a4e2-0bdcc8fc0c4b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:59:25 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 208446
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694580326099 (0xa1b836aed3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:59:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83a7fe7bd8c767b3ce3590e25ba352d3bf010b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d3:86:ce:44:54:5d:b0:7d:b7:ea:e0:de:c8:
d2:2f:d5:a1:9a:2f:a6:ef:a2:3b:07:07:a9:27:df:
14:43:cd:60:81:63:24:9c:c9:87:51:05:57:37:4a:
60:41:07:3b:25:58:65:57:b1:ed:ef:4e:a0:4d:2f:
d0:b3:e9:3e:8d:9a:fd:e8:02:fb:e0:5c:c7:e3:08:
63:5e:f4:a1:d8:22:43:1e:31:72:4f:f7:b8:93:bf:
bd:c3:d0:88:f8:59:b0:fa:77:51:94:ef:1f:68:d3:
71:52:8e:1c:84:e9:4e:f8:69:db:ad:b3:aa:99:63:
6d:79:95:1a:94:37:28:df:ee:ed:58:67:a4:f0:d6:
5a:fb:3f:2e:ca:8d:6e:b3:1e:eb:04:80:ac:60:07:
6d:14:64:35:c3:ea:2c:c1:84:a3:e3:5d:36:4a:70:
c4:d1:14:ab:a3:7a:71:4b:92:82:8a:f2:db:38:12:
81:98:1a:4a:a5:8f:ae:bb:0f:bd:77:1e:1e:6f:23:
db:fb:c9:a1:15:f1:7e:d5:cc:24:06:f9:fe:4b:4d:
08:71:8d:da:72:d4:da:34:4a:ea:dc:c3:6b:bb:9a:
8d:ff:d2:f1:44:c0:5e:3f:96:5e:82:48:0d:85:ac:
44:22:e8:72:b6:e0:1f:7c:86:21:a0:92:4b:b9:c0:
7b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A7:FE:7B:D8:C7:67:B3:CE:35:90:E2:5B:A3:52:D3:BF:01:0B:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e2f959-ad13-431e-a4e2-0bdcc8fc0c4b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e2f959-ad13-431e-a4e2-0bdcc8fc0c4b/1/g6f-e9jHZ7PONZDiW6NS078BCzE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208446
Signature Algorithm: sha256WithRSAEncryption
48:93:29:86:7d:d7:f0:19:3a:10:6a:14:3b:82:40:f6:3a:32:
a7:1f:ca:4b:20:51:8a:c9:24:53:73:51:8e:ad:07:c1:59:0d:
7a:4b:4a:7d:4d:92:ed:f4:78:fd:5d:27:c3:32:09:90:fd:d5:
70:44:7a:e8:94:a7:65:0d:0b:04:4f:ec:99:1b:eb:4f:77:a6:
4e:ea:10:7c:4c:f5:4a:64:ab:75:17:99:c8:c8:6c:23:26:30:
aa:ba:c6:a9:68:42:52:0a:59:cd:5f:9f:57:40:9f:a4:43:5c:
3e:a9:e1:9c:b3:51:36:c8:39:c9:24:cf:8c:5f:97:68:91:78:
8c:d9:f5:d4:dc:09:26:f9:fc:21:5d:2b:35:3e:2f:94:ff:27:
bd:f7:d6:97:c3:6d:16:9b:15:03:04:4c:a7:7f:6d:5d:96:93:
86:83:76:ff:9f:ad:12:33:5f:10:b6:17:a7:fb:2d:08:d1:59:
09:5b:d6:3e:28:53:50:47:9f:29:63:29:65:d5:c6:c4:7e:e4:
a8:10:f4:a4:27:14:9e:45:db:ca:f1:2a:9e:ee:bb:7e:fd:64:
52:18:71:54:2d:aa:cd:cf:b3:21:db:ee:2b:9d:d1:97:a0:24:
0d:f9:93:b4:7f:25:bc:9d:8b:86:00:fa:84:2f:ad:6a:18:f3:
36:5c:77:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:59 2024 by rpki-client on console-ams.rpki-client.org