Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jvc06057H4dkHEKT2yIzgrx1up4.cer
File: jvc06057H4dkHEKT2yIzgrx1up4.cer (raw, json)
Hash identifier: WoeG4qyJh+YF/CPLcrspufihhYi6irbQSxpimWAqSWM=
Subject key identifier: 8E:F7:34:EB:4E:7B:1F:87:64:1C:42:93:DB:22:33:82:BC:75:BA:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AB24252381
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/c2fdb2-f7e7-4384-8ebf-a8c056ababdf/1/jvc06057H4dkHEKT2yIzgrx1up4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/c2fdb2-f7e7-4384-8ebf-a8c056ababdf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 16:05:43 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 42084
IP: 91.189.0.0/21
IP: 176.107.40.0/21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 735045821313 (0xab24252381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:05:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ef734eb4e7b1f87641c4293db223382bc75ba9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:cb:33:61:8e:8b:e5:43:ce:98:73:52:c5:
36:0e:86:2e:21:86:3f:47:e8:78:4f:c2:48:b0:8e:
51:a0:45:e0:f7:f0:7c:66:a4:0f:f3:82:18:c2:1b:
0e:cd:78:c7:69:fb:2e:dd:25:af:33:f1:8c:e1:85:
ac:ab:33:b5:75:1f:2a:cf:83:7c:75:13:ab:13:a5:
a0:9b:91:06:85:80:35:ec:f9:27:70:b6:84:05:6d:
a2:45:4c:74:30:af:9d:f0:cb:46:ae:e2:01:98:b9:
be:81:65:c6:6c:e3:46:92:4f:68:d4:87:a5:41:e2:
32:a4:39:ec:a7:e7:b9:c6:e1:ae:e3:10:b2:f4:da:
8a:c4:42:09:4d:d2:de:68:23:56:93:18:7b:b3:f4:
92:6e:00:bd:96:bc:ac:44:52:3c:13:77:2c:b1:d1:
f1:c4:57:49:33:19:da:f9:6a:58:98:88:58:c4:5a:
92:7d:c9:3f:62:bd:1f:f4:d3:19:c0:8a:ff:5d:67:
0d:34:eb:c7:e1:02:fb:af:9e:fd:62:35:f4:0c:2c:
1d:1d:bb:53:4f:2c:c3:a3:ba:49:83:cc:a2:63:1e:
a0:24:ba:66:f8:ea:14:d2:f7:99:e1:c0:42:f6:18:
ca:e7:d7:76:eb:8e:9d:3e:16:42:35:72:d5:2d:80:
ce:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F7:34:EB:4E:7B:1F:87:64:1C:42:93:DB:22:33:82:BC:75:BA:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c2fdb2-f7e7-4384-8ebf-a8c056ababdf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c2fdb2-f7e7-4384-8ebf-a8c056ababdf/1/jvc06057H4dkHEKT2yIzgrx1up4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.189.0.0/21
176.107.40.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42084
Signature Algorithm: sha256WithRSAEncryption
6a:13:7c:df:27:89:51:df:4c:95:56:73:28:e4:41:4f:19:4f:
10:b8:cb:58:3b:43:0c:a5:5c:46:26:66:df:3a:11:79:20:63:
49:d4:ed:e1:81:39:2a:c2:29:e5:d9:e7:a7:a7:6d:9f:fa:f5:
c4:c9:fd:4d:0d:0c:45:0e:cf:54:99:19:73:5a:95:27:e8:19:
d9:02:58:32:6a:b6:a3:ab:a1:23:2d:c7:25:72:69:cf:e9:c1:
0c:d1:43:5e:64:90:69:a0:cb:ec:69:16:8e:13:c1:91:f7:f8:
d3:df:9c:f3:58:e9:cb:3e:45:83:dc:92:f5:bf:1f:bc:cd:ff:
7f:cc:21:9c:8a:81:5d:44:90:c8:9f:0b:ea:c9:c6:a9:1e:91:
b7:8f:8d:f1:c1:cd:40:61:cb:27:53:e7:ea:35:c1:84:75:3f:
5e:28:0c:05:c9:de:78:8b:05:07:38:50:cd:ca:aa:a8:be:6c:
d7:38:03:b4:5e:ea:80:a8:8a:61:15:67:b7:25:09:c8:91:d8:
7a:e9:a1:6f:54:11:bd:81:82:a9:04:85:6d:d4:28:84:ac:e4:
7a:e3:9d:31:de:dd:cf:13:22:f2:e7:e2:12:4f:94:39:11:b0:
55:d7:91:86:33:c8:58:8b:cb:cb:61:7e:11:3f:35:cc:01:20:
4c:8c:e6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:45 2024 by rpki-client on console-ams.rpki-client.org