Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jYeQsHVWzCSkQ4F-s6fVDAj7RLs.cer
File: jYeQsHVWzCSkQ4F-s6fVDAj7RLs.cer (raw, json)
Hash identifier: i7k7L27/LWGlNffDtMNM66Iaq7Kmk4wVqbfnQMdM0bY=
Subject key identifier: 8D:87:90:B0:75:56:CC:24:A4:43:81:7E:B3:A7:D5:0C:08:FB:44:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A492A14339
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/7ffe90-b853-430b-85f4-bc3192855109/1/jYeQsHVWzCSkQ4F-s6fVDAj7RLs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/7ffe90-b853-430b-85f4-bc3192855109/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:53:49 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 207142
IP: 91.197.55.0/24
IP: 2001:678:46c::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 706834678585 (0xa492a14339)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:53:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d8790b07556cc24a443817eb3a7d50c08fb44bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:fd:e2:46:8e:4a:5e:89:89:43:69:7e:ab:
78:bc:a8:85:55:0f:55:2d:87:ca:30:dd:d6:66:a1:
7e:dd:a1:93:eb:b1:6e:d3:45:04:b5:47:d3:dc:2c:
09:64:97:7b:3f:2f:21:0e:bf:af:67:86:08:90:0c:
48:20:0e:34:59:bc:48:a3:24:f0:5a:d3:5f:1d:a0:
c2:a2:f3:7b:35:a3:93:23:3b:fb:3f:43:f0:d0:7a:
ec:ab:14:96:e3:be:c1:b2:66:a9:0c:8a:2d:56:f8:
3b:9f:c8:26:84:3a:1e:7f:d3:bb:12:9f:83:93:17:
85:b0:6e:1e:ae:6f:e3:f6:cd:f2:b4:64:a4:e7:ea:
bf:f0:2b:b2:79:21:17:4d:8a:32:da:23:82:ba:0e:
11:45:8d:f0:5f:82:2f:e2:9d:f8:ac:aa:cf:b1:6e:
60:bc:9e:2d:28:52:c9:d4:e6:6b:12:3b:7d:cc:09:
f3:9e:70:07:bc:42:d8:4a:fd:e7:1a:62:d4:d3:41:
fe:29:4b:da:6b:8e:f3:ad:64:29:b3:2f:45:95:c7:
c8:f6:c5:0f:40:65:9f:9d:a6:e6:e4:e1:6c:fc:25:
8e:0e:a0:3d:2e:89:eb:0a:22:9e:f4:07:f9:15:a7:
f6:8b:a9:87:53:05:df:be:b4:0e:aa:37:ff:22:62:
c4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:87:90:B0:75:56:CC:24:A4:43:81:7E:B3:A7:D5:0C:08:FB:44:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7ffe90-b853-430b-85f4-bc3192855109/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7ffe90-b853-430b-85f4-bc3192855109/1/jYeQsHVWzCSkQ4F-s6fVDAj7RLs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.55.0/24
IPv6:
2001:678:46c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207142
Signature Algorithm: sha256WithRSAEncryption
3b:88:a0:42:2c:37:c0:0f:cb:ad:25:f8:af:6a:20:a8:93:47:
78:2a:77:3c:39:b4:09:96:7b:91:18:97:a1:24:a6:95:60:09:
a5:06:7d:5f:11:93:a7:c7:44:21:a5:16:90:e2:10:3e:0b:df:
e3:87:06:93:b6:e1:b4:f9:34:f3:7c:dc:7d:52:48:f7:af:60:
42:4c:73:5e:ec:15:dd:48:58:dd:9b:60:2b:5a:54:27:f1:3b:
e8:a2:8d:dd:54:9c:41:25:34:a9:9c:4f:e0:77:48:55:26:e0:
83:fc:47:39:6e:9c:2f:ae:49:5b:a4:f3:01:99:dc:4e:2b:ed:
4c:dd:84:35:a4:43:73:6f:eb:00:e2:e3:b3:4b:e4:b4:ce:37:
a4:54:b3:c4:ed:43:14:a3:44:9b:08:75:be:9b:65:a9:84:aa:
ce:04:87:b3:c9:c8:0f:32:17:09:d9:53:b0:75:f0:43:26:5c:
fd:93:9b:d7:63:9a:b3:41:c3:f6:32:45:5a:70:91:14:60:5c:
6f:fc:03:99:81:4b:f8:02:87:c5:13:ab:34:3e:d7:ba:e4:73:
0f:e9:ab:8a:61:dd:c0:7c:60:eb:d9:4b:47:1e:d2:d5:c4:07:
c3:4e:bd:07:71:53:d9:6a:b7:83:b7:6f:8f:78:83:96:d3:b1:
b3:28:b4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:40 2024 by rpki-client on console-ams.rpki-client.org