Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer
File: gqGyfHTn9dwDDkAcU0phsbw8pRI.cer (raw, json)
Hash identifier: 4DYdqBZjChX+wEESRukvMNMgiGpCsgOHkypL0GaRTfY=
Subject key identifier: 82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 98C51EC7B9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.mft
caRepository: rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/
Notify URL: https://chloe.sobornost.net/rpki/news-public.xml
Certificate not before: Sat 01 Jan 2022 00:14:27 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 199036
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656142157753 (0x98c51ec7b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:14:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0c:a2:d4:34:b9:1d:1f:1b:fd:7b:e5:0c:b3:
d3:45:2b:14:6b:5d:80:f0:75:22:2c:1e:d9:08:a0:
37:89:d9:5e:23:59:06:90:4e:e0:06:f8:6d:7b:9b:
4a:3d:ba:4b:c2:9e:27:ab:0b:01:80:6d:c8:61:7b:
a5:aa:1f:cc:87:76:fc:d3:95:95:3a:b0:21:22:d0:
8b:f0:41:bc:59:0f:35:41:21:ab:74:61:f2:0a:80:
75:75:1d:f7:79:82:12:7b:75:83:15:d3:0c:49:14:
40:8e:27:04:81:f9:4f:9d:a3:c0:3c:bb:46:ea:18:
74:a3:62:9e:c8:1b:63:47:40:35:11:ad:3b:9e:7e:
ab:59:67:6c:e2:bb:7a:64:a8:ce:7f:6d:88:32:a4:
df:2a:03:2d:8f:f9:97:9f:35:9d:cf:07:c8:11:08:
8f:4a:88:4b:53:48:c9:b0:95:1e:19:53:17:52:ba:
1a:52:8b:b2:f8:e9:ba:b6:00:ea:b5:90:44:94:ad:
16:71:9d:97:bd:82:5d:55:9a:67:8b:4d:0f:0e:62:
25:c1:02:fb:ab:27:90:63:74:35:c8:dd:ee:5f:95:
b5:46:f7:ab:ae:74:b6:c8:65:e7:4d:c9:f3:38:68:
7c:0f:2f:7c:4d:da:bf:1c:9d:12:5e:d4:b0:26:eb:
1f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/
RPKI Manifest - URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.mft
RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199036
Signature Algorithm: sha256WithRSAEncryption
21:e8:6b:a4:a2:93:53:4c:a6:c9:71:95:9c:44:3d:cd:53:e1:
0a:98:bd:c6:e4:e9:74:8c:a3:39:21:f1:c6:46:72:b3:0c:20:
b4:81:22:6e:c7:da:58:8b:b0:1e:f2:4d:a9:1b:67:1d:1f:94:
79:31:c3:89:d6:d6:07:d0:9a:f3:d8:aa:87:cf:6d:36:ca:45:
2d:be:37:2e:fe:a0:56:99:96:9e:1c:dc:4b:61:41:37:1b:fd:
a7:76:80:76:72:b3:04:4b:31:84:e6:eb:c3:3f:d7:a9:f3:b9:
62:1c:c8:8e:20:1b:df:29:ca:75:9b:5b:97:24:59:8b:1c:f0:
39:aa:84:43:dc:16:da:a9:b6:1b:16:f3:0b:33:e7:43:b8:8f:
0f:cc:35:64:5e:69:91:15:0d:78:52:a5:49:9e:ba:f0:c3:6d:
58:11:05:bb:0a:e7:a2:2e:a2:22:62:d2:64:ab:6c:77:43:0f:
8b:79:3c:0e:63:65:1e:1f:5e:f3:8f:da:84:75:08:47:9c:96:
31:fe:b8:55:6c:44:95:80:2b:d8:b8:98:23:c5:e7:c2:88:21:
5f:a2:1a:db:0e:58:73:a1:4a:f4:87:d9:81:3e:2c:8e:f8:9a:
34:33:3a:56:e2:f9:aa:a2:33:28:25:e3:7e:56:17:e7:d0:04:
76:cd:5c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:09 2024 by rpki-client on console-ams.rpki-client.org