Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jOAlJLw9JfyHOi9cRUpyjMUIAJ4.cer
File: jOAlJLw9JfyHOi9cRUpyjMUIAJ4.cer (raw, json)
Hash identifier: 8KqHHnoREjf7t2X+T3jMEx004JNDkRQrxbTOAVDtrRE=
Subject key identifier: 8C:E0:25:24:BC:3D:25:FC:87:3A:2F:5C:45:4A:72:8C:C5:08:00:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A59AF2C4E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/a9e8d1-e8a9-467b-8b7c-1dfd8de34e84/1/jOAlJLw9JfyHOi9cRUpyjMUIAJ4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/a9e8d1-e8a9-467b-8b7c-1dfd8de34e84/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:03:59 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 213118
IP: 2a0f:7800::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 711269205222 (0xa59af2c4e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:03:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ce02524bc3d25fc873a2f5c454a728cc508009e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2e:db:ee:dc:01:f5:06:2b:ec:3f:39:3d:1c:
20:1b:c5:81:f6:f0:e4:a1:42:a0:9f:33:df:43:aa:
6d:9d:67:3c:18:73:1e:eb:a8:23:ba:8a:64:3d:94:
18:cd:b8:c9:3d:6d:5e:d1:41:38:1e:50:56:d8:db:
0e:e2:e4:b2:8d:71:51:70:99:c6:7f:e2:d0:e7:1a:
92:10:fe:8f:e3:ec:dd:f6:ad:e0:fb:d9:c2:08:66:
33:24:6f:3a:36:03:07:d2:5d:c7:5b:59:6d:1a:91:
2d:c6:30:e6:25:4c:85:ee:0a:87:a7:3c:67:62:87:
3a:fc:fa:83:5b:20:75:7d:7c:a3:71:fc:48:f5:c7:
d1:ca:b3:a6:ce:13:ad:63:bf:3a:4b:8a:72:dd:9a:
c4:3b:9e:82:89:ad:e9:e7:6c:52:ae:18:90:ac:b3:
10:33:56:16:8d:b2:d3:95:de:1a:0e:74:e5:05:a1:
d0:e9:a7:55:7c:97:2d:ae:0a:5c:50:7d:d1:05:fc:
ad:a2:e0:1a:db:2c:8b:ea:fa:79:a6:26:b0:39:dc:
ec:ff:4f:62:69:3c:4c:b0:e2:3e:93:66:9a:6d:99:
73:8e:3b:49:95:a4:03:95:6c:62:0d:62:65:aa:8c:
84:36:20:9c:eb:a9:d1:15:08:5a:17:f9:1e:d4:b3:
c3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E0:25:24:BC:3D:25:FC:87:3A:2F:5C:45:4A:72:8C:C5:08:00:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a9e8d1-e8a9-467b-8b7c-1dfd8de34e84/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a9e8d1-e8a9-467b-8b7c-1dfd8de34e84/1/jOAlJLw9JfyHOi9cRUpyjMUIAJ4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213118
Signature Algorithm: sha256WithRSAEncryption
2f:df:cb:54:d8:1b:6c:b9:d0:6c:0c:12:0b:1d:a0:47:9d:a2:
20:c3:f1:86:06:c6:aa:57:21:73:4d:47:04:66:b8:5b:c2:6d:
17:89:59:5f:ca:40:a2:ba:26:16:39:ed:fe:67:e1:fd:b2:56:
bc:75:4f:32:5d:ef:97:13:0f:40:74:00:af:00:78:c6:8b:ac:
0d:de:e2:76:04:9a:ae:d7:10:5e:fc:6d:72:9f:cf:25:df:3a:
1d:24:6e:13:dd:9b:c4:23:73:9a:cb:46:d1:4e:e3:bf:bc:b5:
94:64:05:7d:ed:40:92:3c:d6:13:08:02:c1:92:5f:18:72:6b:
68:19:30:8f:68:de:9e:4b:5e:e8:91:89:71:67:4d:7b:05:06:
56:84:07:b4:70:7b:73:75:83:e2:44:10:a3:df:46:b0:e1:4d:
38:47:9d:cf:4b:6b:d8:e1:ee:f1:f5:87:ee:7e:a0:49:a7:51:
9e:2b:9b:69:dc:bc:f0:c7:bb:51:f6:ca:11:5e:73:31:9f:c4:
53:58:29:ed:9c:6f:76:42:fd:b4:5f:46:ea:d0:93:6e:4f:6c:
50:09:45:b9:d5:9c:e2:2c:fa:aa:71:22:b1:1c:16:e7:92:ca:
9c:3c:f1:b2:36:21:83:6d:54:24:68:82:df:9e:18:41:8f:b2:
71:66:b4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:49 2024 by rpki-client on console-fra.rpki-client.org