Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ix-nI6qXhGnZmOTApRSUVcPHkfQ.cer
File: ix-nI6qXhGnZmOTApRSUVcPHkfQ.cer (raw, json)
Hash identifier: ZYX7hdAyuLJVEvZ+NwbHYD0GDWwV88Ny7FSVFysMugI=
Subject key identifier: 8B:1F:A7:23:AA:97:84:69:D9:98:E4:C0:A5:14:94:55:C3:C7:91:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9C2EBF30EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/cae8a6-12c3-4464-8c7f-f8a003848abd/1/ix-nI6qXhGnZmOTApRSUVcPHkfQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/cae8a6-12c3-4464-8c7f-f8a003848abd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:00:48 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 5598
AS: 12959
IP: 176.101.96.0/19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670799180014 (0x9c2ebf30ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:00:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b1fa723aa978469d998e4c0a5149455c3c791f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:b1:a5:13:87:1e:c2:be:21:c7:e0:6c:39:
6e:0b:e9:a7:f2:a3:0d:e1:d1:08:8b:7c:91:41:a9:
32:38:23:f1:ad:4c:8e:69:72:44:40:02:1f:06:3c:
61:04:50:33:28:4b:a1:a9:ac:57:97:b2:8c:87:9e:
fe:74:10:52:9d:4d:b1:bb:57:88:8f:ec:49:1b:91:
f2:a6:45:f9:27:3e:ff:e0:97:07:9d:5d:e8:74:ec:
9f:88:aa:27:cf:4e:5d:2f:a5:77:35:33:5b:43:23:
1e:ff:b2:a3:2d:b0:2d:ad:2c:51:0c:1b:e1:24:8f:
4b:6b:2f:e6:2c:9f:f7:67:31:37:e6:a3:fc:7b:af:
88:59:e5:e2:2a:d3:d3:ef:51:73:44:8e:76:71:a4:
6b:d6:92:b2:10:f0:a0:f0:c9:d4:dc:d5:63:9d:7a:
9e:53:ec:27:75:b4:c3:c4:4d:c2:0d:2e:e0:04:95:
83:f0:ef:0b:bd:82:d2:25:03:7d:69:05:0a:ac:c7:
26:fb:fa:5e:e3:0e:b2:3e:6d:1c:f5:24:1e:31:51:
cc:57:33:20:fc:e4:a5:51:07:fd:a7:52:43:b9:46:
5f:6f:64:a1:f8:a2:f5:d5:fb:ff:05:65:b9:93:b1:
a9:a7:62:ca:b2:33:b7:9c:b0:3c:33:df:7f:e8:13:
d8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1F:A7:23:AA:97:84:69:D9:98:E4:C0:A5:14:94:55:C3:C7:91:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cae8a6-12c3-4464-8c7f-f8a003848abd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cae8a6-12c3-4464-8c7f-f8a003848abd/1/ix-nI6qXhGnZmOTApRSUVcPHkfQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.101.96.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5598
12959
Signature Algorithm: sha256WithRSAEncryption
a0:64:8a:e6:52:04:bc:3a:e9:17:4a:16:ad:e9:2f:18:12:bc:
98:ef:b3:cb:ab:ab:e9:58:52:1e:7e:b9:fd:d9:4a:8d:ec:79:
f0:96:1a:f0:af:9b:c1:18:6f:31:b9:ae:d4:58:6e:66:70:09:
46:fb:e5:58:37:00:9d:a1:7c:42:12:d3:38:83:d8:2b:ea:1f:
53:6d:d2:c0:4a:3d:88:02:b1:4a:c6:23:90:01:71:a1:8d:6b:
a0:ea:45:b3:60:da:4d:29:1d:f9:46:00:0e:8d:48:5f:c7:4e:
9c:fc:9f:9a:53:47:26:d0:01:77:f0:57:48:9a:35:32:52:a8:
48:ce:2e:3f:be:34:83:8d:29:4b:4c:54:fc:54:61:65:5d:72:
5b:c2:45:3f:87:53:c7:06:b3:8d:45:96:c0:6e:a3:5d:8b:f5:
45:71:c9:54:48:7a:f9:66:75:ab:a6:97:45:d3:46:02:54:ea:
ce:8e:96:7c:a6:94:77:4d:ad:1b:28:d6:88:dc:60:f5:fc:f6:
dd:12:be:53:9b:21:7d:df:11:b1:c4:65:db:25:70:5e:f1:69:
05:c6:b9:a0:a5:cb:3e:0a:f5:fe:6a:03:9c:fe:fa:32:26:42:
98:83:85:9a:2e:21:9f:ac:dd:82:7b:58:81:b2:a7:98:2a:ab:
e8:88:b2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:45 2024 by rpki-client on console-fra.rpki-client.org