Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jxt-34J9sTZt5XHwC0pc_bI5zGE.cer
File: jxt-34J9sTZt5XHwC0pc_bI5zGE.cer (raw, json)
Hash identifier: eIb9fb8Vqn6Ew3DjCZMYooNq6tqd6BsKV6xKI5+MWhA=
Subject key identifier: 8F:1B:7E:DF:82:7D:B1:36:6D:E5:71:F0:0B:4A:5C:FD:B2:39:CC:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A7731CB6A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/2c293c-6df0-4112-b800-3c18bc87c65c/1/jxt-34J9sTZt5XHwC0pc_bI5zGE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/2c293c-6df0-4112-b800-3c18bc87c65c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:00:15 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 15782
AS: 28908
AS: 45011
AS: 208043
IP: 46.236.64.0/18
IP: 62.182.0.0/21
IP: 80.244.64.0/19
IP: 81.88.0.0/20
IP: 81.186.240.0/20
IP: 85.235.0.0/19
IP: 87.253.64.0/19
IP: 88.83.32.0/19
IP: 88.129.0.0/16
IP: 89.236.0.0/18
IP: 94.198.64.0/21
IP: 94.245.0.0/18
IP: 109.124.128.0/18
IP: 185.52.180.0/22
IP: 185.58.144.0/22
IP: 213.21.64.0/18
IP: 213.142.0.0/19
IP: 213.185.0.0/19
IP: 217.72.48.0/20
IP: 2001:7a0::/32
IP: 2a01:b700::/32
IP: 2a02:23c0::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 719190800039 (0xa7731cb6a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:00:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f1b7edf827db1366de571f00b4a5cfdb239cc61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:48:3b:cd:6c:9f:c5:c4:82:ce:9c:af:e3:
b9:12:54:ed:37:84:25:8c:7e:9d:f4:15:77:20:2c:
ab:4d:2a:db:76:cd:1f:46:95:67:24:7d:79:e9:96:
62:24:28:b5:27:7b:71:3d:21:1a:25:f7:a8:35:4c:
b5:92:43:e6:d7:66:bc:82:d9:b5:61:2a:83:6e:cb:
ff:98:65:27:1f:ef:55:fb:20:1b:4f:26:5f:38:3e:
06:37:66:66:44:97:fe:aa:7f:64:c2:70:5a:25:16:
08:03:33:36:c7:bf:03:d6:8c:7c:a0:39:ec:c7:c9:
7f:f0:3c:93:07:6f:41:e7:ca:bb:8f:6b:3e:10:3f:
74:3b:4d:77:97:41:52:30:fd:96:cb:57:58:ca:d9:
af:8f:2c:5a:e4:5e:0a:0f:e7:b3:00:5d:6e:f3:1f:
82:29:6a:b0:88:75:21:f1:ca:0e:ec:8a:27:d6:08:
76:b4:05:dc:63:ba:11:a5:67:b6:3e:3c:82:19:c9:
95:8a:d4:72:9f:d6:e3:b5:ed:42:6e:53:96:b5:84:
64:3f:7c:24:14:23:af:b6:44:25:77:ce:df:44:c9:
61:82:67:31:a7:9f:55:21:65:dc:de:26:6b:1f:25:
dc:81:f3:6d:b4:73:7b:12:b3:c3:b5:13:3b:31:32:
d0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1B:7E:DF:82:7D:B1:36:6D:E5:71:F0:0B:4A:5C:FD:B2:39:CC:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2c293c-6df0-4112-b800-3c18bc87c65c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2c293c-6df0-4112-b800-3c18bc87c65c/1/jxt-34J9sTZt5XHwC0pc_bI5zGE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.64.0/18
62.182.0.0/21
80.244.64.0/19
81.88.0.0/20
81.186.240.0/20
85.235.0.0/19
87.253.64.0/19
88.83.32.0/19
88.129.0.0/16
89.236.0.0/18
94.198.64.0/21
94.245.0.0/18
109.124.128.0/18
185.52.180.0/22
185.58.144.0/22
213.21.64.0/18
213.142.0.0/19
213.185.0.0/19
217.72.48.0/20
IPv6:
2001:7a0::/32
2a01:b700::/32
2a02:23c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15782
28908
45011
208043
Signature Algorithm: sha256WithRSAEncryption
95:cb:3a:a3:85:57:06:02:9f:7a:38:e6:85:c8:a0:d7:84:64:
b0:9d:36:3e:a1:5c:c4:89:25:19:c0:d2:31:96:87:00:fb:5c:
b6:c2:3e:b0:82:df:ea:79:3d:1c:3f:47:ca:0c:49:b3:b7:a4:
1a:0b:bf:f6:02:5c:b5:ca:10:cb:29:f1:9e:b3:9a:fc:54:05:
84:86:d5:79:34:3e:ac:14:bc:25:ac:fb:90:24:d2:04:31:a3:
fd:23:6d:9a:ec:97:bf:0e:0a:27:c0:a2:5c:b0:bc:04:a4:cf:
e5:aa:01:c2:be:96:2e:79:fd:fb:9b:e1:0f:79:85:8a:1d:cf:
44:f1:e3:95:f0:93:86:68:33:18:3b:d0:95:5f:7d:d0:4b:f5:
ac:8f:c7:f2:e4:77:df:ee:c1:11:e6:1d:09:89:ee:d6:c9:45:
a8:82:74:0e:4b:62:52:8d:1d:e0:94:1e:ab:1c:2c:d9:24:81:
2c:dd:fa:5d:76:ba:31:0e:8c:69:cd:02:1b:63:d5:b0:c6:f4:
b2:33:09:a5:a0:2d:4f:1a:3c:17:fb:18:ed:6c:3f:f2:9e:4a:
78:dd:c7:7b:2c:cd:67:a7:cb:cf:10:f8:fe:7b:23:86:34:6f:
b2:1c:5e:d0:a9:ac:d0:3c:78:fa:5b:34:5d:fb:1b:c3:d7:83:
ae:8d:6f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:45 2024 by rpki-client on console-ams.rpki-client.org