Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ioilm7BIC_TaH4vQxB8h0MHuZSQ.cer
File: ioilm7BIC_TaH4vQxB8h0MHuZSQ.cer (raw, json)
Hash identifier: 3GD9K1dURUu1Oxoh2FwyzopGqNBotvSUy5U6x6Z2DDc=
Subject key identifier: 8A:88:A5:9B:B0:48:0B:F4:DA:1F:8B:D0:C4:1F:21:D0:C1:EE:65:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A1D36BA505
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/b106d5-f46d-434d-8bb5-3b2e11119ce4/1/ioilm7BIC_TaH4vQxB8h0MHuZSQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/b106d5-f46d-434d-8bb5-3b2e11119ce4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:01:23 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 34553
AS: 205907
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 695036781829 (0xa1d36ba505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:01:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a88a59bb0480bf4da1f8bd0c41f21d0c1ee6524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:72:2b:f2:72:71:e2:b6:92:59:4b:92:96:6e:
f3:c5:59:93:7c:fd:0f:ab:0a:32:3a:d4:9c:a6:9f:
3f:f5:d7:af:98:bf:6a:81:39:51:5c:c9:fc:9a:6f:
28:3e:92:fe:91:44:9f:42:4e:f3:84:f5:87:c5:34:
15:43:9a:cc:c1:26:4e:97:57:24:6a:ed:6e:e5:a4:
12:d4:33:4d:11:39:87:69:e7:82:ec:c2:7a:43:6c:
aa:f7:4d:2c:07:1b:16:01:4c:a7:36:59:1c:43:0a:
9d:bb:70:2e:1f:40:9d:c8:1c:aa:31:56:c7:6a:c0:
5b:34:67:f2:86:49:36:6e:0f:74:68:93:07:68:35:
8d:db:e4:b6:8e:2a:6e:5e:2d:a2:34:a5:da:23:09:
c4:7b:18:cd:1c:2e:90:4a:9c:e1:a9:94:52:05:63:
30:41:de:fb:20:6b:72:be:e4:b3:b4:2e:8a:c9:34:
fa:e4:a1:7e:04:71:60:54:93:b7:6a:69:a7:61:b8:
cf:63:c0:df:1d:d5:ce:73:a8:d4:75:9e:e7:01:9b:
5d:b2:57:f6:d7:b9:3f:02:ad:4f:b3:c2:6a:b1:16:
16:fe:22:2f:5f:a2:0b:a6:be:bf:47:30:d1:7a:ad:
63:d2:de:96:52:c4:79:05:4f:d2:5d:2c:38:63:45:
43:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:88:A5:9B:B0:48:0B:F4:DA:1F:8B:D0:C4:1F:21:D0:C1:EE:65:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b106d5-f46d-434d-8bb5-3b2e11119ce4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b106d5-f46d-434d-8bb5-3b2e11119ce4/1/ioilm7BIC_TaH4vQxB8h0MHuZSQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34553
205907
Signature Algorithm: sha256WithRSAEncryption
94:e9:5c:f4:9c:82:bc:a1:5d:25:ed:f0:7e:68:fa:ff:49:10:
b5:f0:7b:73:46:8c:5e:12:13:b2:20:ad:4c:d8:13:2b:5c:d4:
db:82:74:27:a2:c5:b7:f0:cb:1a:70:40:10:71:84:02:3c:40:
72:52:87:55:bc:ea:e8:b0:75:4e:b4:fe:29:aa:19:2e:96:ad:
f2:3d:74:85:69:f7:b2:27:b3:6e:db:24:09:0d:ba:75:89:34:
d2:1c:25:46:dc:fe:34:55:e5:c3:bc:75:3c:5d:79:66:93:13:
1a:92:b4:af:43:70:f4:8c:69:32:bb:5e:f9:e6:c6:92:8a:a2:
61:a1:b9:60:af:5a:9a:19:4d:0a:8a:f5:ef:81:52:bb:fa:6f:
f0:81:3b:6f:69:2e:20:c1:0f:76:5b:a2:26:31:71:6b:7d:3a:
e3:8c:aa:59:c1:80:52:20:4b:73:a7:96:dd:b1:09:19:00:80:
a8:01:10:dd:4b:e9:b0:72:57:06:d0:37:7f:30:ef:09:6e:17:
18:03:5b:f4:c6:b3:d5:4b:53:fb:e8:03:2b:2e:a6:8f:ae:7f:
7d:af:c2:9b:af:61:f5:15:66:bd:76:be:3b:28:bd:05:40:04:
e9:b4:4c:96:47:93:64:e4:50:f2:80:e1:e7:46:70:ab:77:95:
72:95:db:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:31 2024 by rpki-client on console-ams.rpki-client.org