Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iNp-bAu_TE2XCeEd9r5aBoVM95k.cer
File: iNp-bAu_TE2XCeEd9r5aBoVM95k.cer (raw, json)
Hash identifier: 9HlNPn+ccE7W+6+7qBIgVps5EypBVc4cfyJ4VQdf8nQ=
Subject key identifier: 88:DA:7E:6C:0B:BF:4C:4D:97:09:E1:1D:F6:BE:5A:06:85:4C:F7:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9E7D3A8677
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/8c5153-6841-4b93-8d2d-2855ef24fd01/1/iNp-bAu_TE2XCeEd9r5aBoVM95k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/8c5153-6841-4b93-8d2d-2855ef24fd01/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:03:34 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 203724
IP: 185.125.224.0/22
IP: 2a06:bcc0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680705820279 (0x9e7d3a8677)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:03:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88da7e6c0bbf4c4d9709e11df6be5a06854cf799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:46:21:a3:8e:55:ec:61:1c:e7:7e:a5:7b:cc:
ea:49:5d:1e:9e:81:62:8b:f2:4c:61:e5:22:d9:4a:
28:fb:66:1b:27:3c:ee:4c:bc:5a:e6:a5:2c:28:cf:
54:ab:1d:2a:3a:94:09:ba:6b:1d:1d:c9:ad:94:be:
58:3b:e2:2a:bc:94:db:3d:58:da:18:3c:92:64:4a:
b7:90:dc:e3:27:8b:75:96:24:34:33:47:09:9a:90:
3c:83:1a:b4:bb:c6:48:80:7a:09:5d:06:ba:fa:12:
b1:37:91:07:72:35:d6:04:6f:6d:e8:46:d2:24:d0:
24:ac:c3:7f:70:db:cd:ce:7d:bb:65:9a:02:29:ba:
4c:6f:a4:6a:28:23:ce:95:21:03:29:7b:48:84:de:
fa:32:e5:63:33:65:85:ab:be:d8:cb:a9:40:b3:d6:
c2:7f:f3:85:24:a4:61:6f:d7:b7:47:1c:5c:5c:4f:
5f:ab:6e:b6:53:69:e1:63:2a:46:43:a3:1f:5f:be:
af:81:87:37:d2:7b:f0:e2:41:31:d0:63:d4:35:a2:
10:77:64:95:7c:e2:ef:4e:33:e7:b8:92:c3:6e:10:
14:7f:72:64:97:86:79:48:e5:b3:02:9c:1b:62:72:
6e:8d:ba:a8:82:0e:5d:86:40:fb:0d:fc:c4:a6:04:
15:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DA:7E:6C:0B:BF:4C:4D:97:09:E1:1D:F6:BE:5A:06:85:4C:F7:99
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/8c5153-6841-4b93-8d2d-2855ef24fd01/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/8c5153-6841-4b93-8d2d-2855ef24fd01/1/iNp-bAu_TE2XCeEd9r5aBoVM95k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.224.0/22
IPv6:
2a06:bcc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203724
Signature Algorithm: sha256WithRSAEncryption
70:00:be:be:bd:ed:60:6a:21:6f:d0:33:6f:a6:21:1d:92:5e:
0b:fb:9d:ac:91:92:64:2d:25:70:eb:fa:cc:13:85:cf:08:ae:
7c:c7:56:16:25:b4:58:58:8b:a4:9b:55:a3:76:7f:3b:ae:64:
07:64:d3:d5:29:e4:45:30:4e:32:82:a3:f6:84:84:ed:eb:4a:
e0:c2:a6:ae:db:36:6c:f7:db:01:f4:cd:41:62:7c:71:33:48:
24:4e:a5:1a:89:9b:02:f6:38:47:e4:8a:94:5c:6d:40:17:4d:
ab:5a:5f:54:82:33:3b:8b:5e:61:de:74:ed:f5:47:3d:5c:83:
f1:64:1d:03:2f:82:9d:99:c9:90:4e:bc:75:fb:6a:65:f6:85:
16:4b:6f:ef:2a:44:d2:81:0b:da:a2:7d:4f:4a:a9:f8:f6:17:
f3:92:22:3a:58:b3:e2:35:9e:1a:bd:42:f2:b7:03:67:f7:7b:
57:16:05:d7:5e:fc:d8:17:72:21:9b:26:85:79:60:87:5c:62:
c5:fa:20:ef:78:c0:03:5c:58:05:f6:c7:bb:7b:65:3a:bc:5f:
76:72:39:fa:05:37:22:3e:7f:d2:c6:32:52:6b:3e:a8:eb:80:
ca:7e:9c:6f:1d:d0:d6:57:63:ca:ed:47:48:73:18:5a:14:8b:
88:d5:c3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:40 2024 by rpki-client on console-fra.rpki-client.org