Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i8a51lHbAsBpLUI5LTvsXZPgOF0.cer
File: i8a51lHbAsBpLUI5LTvsXZPgOF0.cer (raw, json)
Hash identifier: Ja4EKpndBBscgnWX2K8nW0Br6Jb0+Ry6lGzVeM9O87o=
Subject key identifier: 8B:C6:B9:D6:51:DB:02:C0:69:2D:42:39:2D:3B:EC:5D:93:E0:38:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9C815473A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/79acd5-4d63-4ec1-8e3b-994af87e53bd/1/i8a51lHbAsBpLUI5LTvsXZPgOF0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/79acd5-4d63-4ec1-8e3b-994af87e53bd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:52:21 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 199343
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672184693672 (0x9c815473a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:52:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8bc6b9d651db02c0692d42392d3bec5d93e0385d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:18:b9:75:14:e3:e3:68:15:9e:98:1c:f8:0d:
20:62:a6:a5:fa:0f:68:33:9e:07:36:91:12:61:25:
13:e8:19:32:0c:c2:36:df:21:03:13:30:40:30:b0:
51:15:fe:05:fe:95:d7:f7:ce:42:31:a0:7a:34:95:
81:88:33:16:68:26:ac:03:18:6c:7f:0b:b9:c1:15:
8d:c4:d4:2a:15:c3:db:dd:ae:63:29:79:3d:a7:23:
13:67:6d:16:c3:a5:9f:f3:16:dd:55:d5:72:5c:2b:
59:ae:37:39:d4:4b:95:cc:6a:e1:96:64:83:4d:b1:
ab:d4:3c:af:0a:b5:9b:d9:bc:d4:37:3e:45:2d:db:
87:e6:76:fb:4f:6f:fa:4d:00:dd:0f:65:09:1a:69:
c0:e5:77:0a:3b:80:9a:d1:a1:33:4b:80:e0:c5:fb:
55:7c:74:67:db:6f:4e:f6:ba:59:a3:f9:83:05:81:
ec:4a:6f:da:a6:31:71:59:ab:ce:9c:ce:ad:00:58:
4f:80:a1:74:47:12:2c:f5:77:ef:b4:86:e4:9d:c0:
0a:2f:3c:37:29:ad:b0:1c:1f:16:0a:bb:a8:16:9a:
b7:7e:58:7e:b7:93:6b:36:54:57:8c:ba:3f:9f:ff:
d5:99:e2:85:c5:d5:c3:b6:1d:5e:1e:f7:11:6b:a5:
54:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C6:B9:D6:51:DB:02:C0:69:2D:42:39:2D:3B:EC:5D:93:E0:38:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79acd5-4d63-4ec1-8e3b-994af87e53bd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79acd5-4d63-4ec1-8e3b-994af87e53bd/1/i8a51lHbAsBpLUI5LTvsXZPgOF0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199343
Signature Algorithm: sha256WithRSAEncryption
aa:0d:54:0e:46:1b:63:ba:c4:57:48:69:e0:15:5e:92:fb:6c:
b4:73:29:bb:6e:59:25:6b:45:ad:f4:95:85:b6:df:78:49:18:
67:36:91:65:0d:e9:a0:e8:9e:88:7f:36:3e:92:83:4d:97:5b:
01:20:7f:4c:8f:03:81:5e:43:55:a2:b1:1c:be:0a:1c:02:ef:
57:64:58:2d:26:d0:87:38:5e:65:58:5f:2b:95:4d:af:28:95:
cd:6b:35:c2:4c:9a:bd:64:c5:30:68:48:7e:9a:35:61:43:ce:
87:aa:a2:b3:3f:75:f9:a8:b2:d0:12:db:bc:a8:e6:d2:0c:17:
93:f3:96:e7:2b:6f:c5:66:0f:a5:df:b1:23:19:a6:40:e0:2e:
99:d4:d9:d6:d6:59:e9:13:61:7c:5e:e8:a7:62:57:7a:8a:52:
f5:64:05:72:51:62:df:c3:3f:e8:ab:a5:b4:3a:0e:c5:82:d7:
ec:c4:c0:b7:d4:bb:e6:23:ba:b4:64:10:d2:67:3b:de:69:84:
47:e4:3e:77:0d:27:c6:c3:8e:16:57:8a:25:7a:f5:9e:73:bd:
cf:6f:ab:47:60:5a:09:fc:b9:e9:15:77:ac:24:36:e9:3d:a4:
e7:80:50:01:9e:65:9f:fb:e5:b0:5d:3e:39:8c:e4:90:ab:5e:
cf:31:15:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:23 2024 by rpki-client on console-ams.rpki-client.org