Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j0JTnGUOx6fca4LbyhbhW8Ep6gY.cer
File: j0JTnGUOx6fca4LbyhbhW8Ep6gY.cer (raw, json)
Hash identifier: V2V1SVSS6yf8SilJIUotDhnFUVtvts5lEqKF+9fv0ew=
Subject key identifier: 8F:42:53:9C:65:0E:C7:A7:DC:6B:82:DB:CA:16:E1:5B:C1:29:EA:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 99C890DB68
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/c68302-6f78-4cc2-bdd6-ff9c2104a70d/1/j0JTnGUOx6fca4LbyhbhW8Ep6gY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/c68302-6f78-4cc2-bdd6-ff9c2104a70d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:01:23 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 56817
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660494932840 (0x99c890db68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:01:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f42539c650ec7a7dc6b82dbca16e15bc129ea06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:46:ae:53:9f:0b:c0:f2:62:f8:99:6c:6b:fe:
8d:c5:14:d5:c5:5f:49:88:12:77:ad:16:c9:ec:e9:
65:b7:ff:cf:55:1a:e5:a2:57:0a:7b:a2:93:16:40:
05:7e:bf:44:53:d2:27:bd:78:cc:ca:b5:88:b8:68:
52:b2:99:2b:9e:bc:06:5a:76:29:99:1c:33:c7:90:
39:e6:1d:d4:2e:e9:65:53:e8:ff:5d:d6:a5:e0:0e:
b5:9f:d9:ff:4b:93:94:96:85:24:c9:5f:c7:52:1f:
30:b8:bf:51:88:65:7f:76:5f:8e:f8:c9:07:6d:7d:
d2:6e:e8:fd:2d:af:73:a1:09:a4:a5:56:80:88:3c:
24:f2:f9:c6:ba:04:5e:a3:40:2c:ee:dd:7d:10:32:
46:12:cf:0a:a0:0e:73:cb:a1:33:85:b1:d2:a6:7d:
71:62:80:5f:43:af:02:76:0e:2a:62:97:25:cb:a4:
fc:61:c0:d7:84:e4:0a:93:d6:d8:3a:4e:50:f0:4f:
f3:ed:d6:0c:61:7f:3f:40:be:d1:32:e4:db:9b:fa:
85:50:2a:c7:e5:19:d7:86:be:be:c4:4b:51:2d:5a:
b5:9b:bf:14:19:15:2b:80:10:ef:4a:32:fb:48:4a:
79:9f:01:33:43:de:df:5d:45:5c:28:b6:fb:71:ca:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:42:53:9C:65:0E:C7:A7:DC:6B:82:DB:CA:16:E1:5B:C1:29:EA:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c68302-6f78-4cc2-bdd6-ff9c2104a70d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c68302-6f78-4cc2-bdd6-ff9c2104a70d/1/j0JTnGUOx6fca4LbyhbhW8Ep6gY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56817
Signature Algorithm: sha256WithRSAEncryption
1b:f2:e8:8f:ac:50:3b:a4:5f:fe:9d:9f:1f:09:ed:2a:63:36:
c0:24:08:14:32:3e:2b:45:99:c4:19:00:2b:e9:65:6a:4f:76:
c5:96:3e:64:32:b8:a9:b3:3b:9b:5f:33:ee:0f:4a:66:e1:62:
39:57:82:71:45:22:a9:ef:06:cf:95:58:1b:6d:ef:b8:bf:61:
90:4c:a6:90:58:57:5d:4d:17:38:8d:70:b1:9a:7d:a6:de:2e:
cf:4d:15:2a:68:00:57:17:60:6a:7c:54:78:df:a9:27:ef:eb:
60:d1:eb:be:a0:61:bb:84:dc:a7:53:e8:9e:2d:f4:2d:e5:64:
9a:e4:a9:fa:28:91:d1:94:fe:d8:e9:86:3b:16:ee:07:90:18:
cb:f4:49:2a:11:2d:17:fd:76:64:bc:11:4a:55:b5:6f:3d:09:
76:18:be:7d:84:5c:e8:79:33:a6:f4:eb:60:4b:c9:16:40:55:
c1:4d:df:cb:f6:ca:ca:fa:35:f1:53:cb:fc:f6:88:2e:74:0e:
e4:7e:12:64:40:67:75:fb:d1:54:dd:bf:a8:6c:c0:7c:e7:d2:
a9:f3:c2:06:88:e0:68:63:35:84:a4:90:99:43:9d:7e:0a:8e:
01:79:d3:17:df:d9:0e:7e:e7:61:ad:98:f3:5b:47:d7:54:db:
1a:4e:da:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:45 2024 by rpki-client on console-fra.rpki-client.org