Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hKYVegus-feRRHbUdoQuKvqkJrg.cer
File: hKYVegus-feRRHbUdoQuKvqkJrg.cer (raw, json)
Hash identifier: gwufczm7FuemhLXgY8yoHmL0ZpAIPFt+8+auvT5vGOo=
Subject key identifier: 84:A6:15:7A:0B:AC:F9:F7:91:44:76:D4:76:84:2E:2A:FA:A4:26:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9D9F332DC4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/30858b-d080-4cd5-9158-b7fae14b5163/1/hKYVegus-feRRHbUdoQuKvqkJrg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/30858b-d080-4cd5-9158-b7fae14b5163/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 04:52:33 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 211860
IP: 185.235.145.0/24
IP: 2a10:8540::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676980796868 (0x9d9f332dc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:52:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84a6157a0bacf9f7914476d476842e2afaa426b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8f:ab:bc:6f:e5:e9:ac:41:3a:46:b6:87:5f:
5f:84:1c:50:c6:4f:d2:d7:dd:c8:27:66:b5:1d:83:
45:95:63:4c:c2:ca:2d:d7:15:41:99:c4:29:32:cd:
b2:4a:27:9b:f8:35:93:81:a7:ba:7b:eb:e5:ff:1f:
46:80:0a:a4:2b:df:8c:41:8f:91:27:cf:26:b9:29:
c5:cd:1c:6f:e0:ef:f6:53:6b:22:d1:01:5c:69:c0:
d7:c9:15:31:15:5e:19:bb:c5:6b:49:45:b9:01:a8:
16:eb:b2:b3:12:5e:ad:22:6d:14:c9:4b:08:0a:a4:
6d:3c:eb:49:55:40:40:92:af:8e:7d:fd:4e:1b:3e:
04:d4:50:1c:ed:01:3b:38:dc:e9:36:95:65:b9:56:
87:f1:26:a7:8e:0d:3f:06:49:3b:d3:df:3e:17:83:
cf:ee:4c:02:5b:ce:8b:2d:95:dc:6f:2d:a8:fb:59:
32:c8:14:d8:4c:cf:25:e9:4e:f0:46:6e:01:b0:40:
bc:3a:1c:4a:04:36:6e:0a:3d:11:60:60:49:e9:57:
e7:a3:a8:c4:aa:e0:6d:1d:1f:86:a8:2d:93:f6:6f:
2c:ce:7d:ec:5e:54:94:e0:78:a0:1d:a7:96:c8:d6:
8e:a2:40:9d:fa:f2:4e:70:41:ab:ca:aa:11:91:36:
48:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A6:15:7A:0B:AC:F9:F7:91:44:76:D4:76:84:2E:2A:FA:A4:26:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/30858b-d080-4cd5-9158-b7fae14b5163/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/30858b-d080-4cd5-9158-b7fae14b5163/1/hKYVegus-feRRHbUdoQuKvqkJrg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.145.0/24
IPv6:
2a10:8540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211860
Signature Algorithm: sha256WithRSAEncryption
6c:2a:ec:51:20:2d:a0:ff:24:03:b8:17:87:11:4b:fd:0e:73:
7e:6d:8e:0c:36:09:26:8e:25:73:cd:06:e9:e5:9c:9f:0c:78:
64:df:33:c0:7c:4d:28:83:62:ac:20:42:af:4a:f2:46:f9:61:
07:9a:e6:bd:13:b5:d6:80:fa:6c:59:4d:55:aa:23:df:4c:ce:
2f:89:b4:35:c7:fa:a2:0c:e6:e8:74:10:9a:83:9b:c8:dc:fd:
cd:23:91:e2:70:bc:57:4b:90:65:3e:f1:69:9e:fd:33:b0:60:
63:27:f4:ac:b6:81:a6:c3:ca:09:9b:3a:e8:ab:e7:70:16:56:
d0:cc:1a:0e:c6:d1:26:b5:07:e2:1d:29:d4:a2:61:ac:9f:01:
b3:fd:52:ec:f5:4c:3e:87:7e:bf:c1:c1:cb:73:16:36:18:2d:
c9:d1:e4:83:0c:85:f5:9f:86:34:a2:84:d0:2e:60:1c:88:f9:
ba:b0:52:ec:0e:a1:e8:f6:9a:ff:30:f1:a9:c9:36:f0:34:11:
41:7b:1f:6e:b0:6c:1a:f3:3d:d2:2b:5a:f5:77:09:c8:bd:30:
6a:23:9f:79:ba:f3:28:52:66:13:8f:18:15:ea:74:b2:8a:66:
d3:6d:95:73:09:e7:9d:dd:87:2c:97:23:b0:5e:d3:de:05:f6:
26:8b:f4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:33 2024 by rpki-client on console-fra.rpki-client.org