Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kt7LUF4qTiEJLkC6O6Lothzd2uQ.cer
File: kt7LUF4qTiEJLkC6O6Lothzd2uQ.cer (raw, json)
Hash identifier: en3rWwxVU/hXZzZbtqNMgobJAZYC52PmL6R3Y5bTLjc=
Subject key identifier: 92:DE:CB:50:5E:2A:4E:21:09:2E:40:BA:3B:A2:E8:B6:1C:DD:DA:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01831261525916C4F4EB0885A61B8DBFBAB0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/45beb1-77e6-442c-aa1f-5f14b3dec0b8/1/kt7LUF4qTiEJLkC6O6Lothzd2uQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/45beb1-77e6-442c-aa1f-5f14b3dec0b8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 06 Sep 2022 10:38:31 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 199115
IP: 2a01:97c0::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:12:61:52:59:16:c4:f4:eb:08:85:a6:1b:8d:bf:ba:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 6 10:38:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92decb505e2a4e21092e40ba3ba2e8b61cdddae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8b:4e:ba:a6:73:43:88:9e:34:80:3a:ec:11:
00:91:cb:43:54:79:24:d7:36:de:06:2d:db:75:6a:
8b:17:ea:24:b9:ae:43:de:bc:b4:b3:9a:aa:7b:0d:
9a:bf:b8:75:6b:b0:b1:a3:41:09:ef:b0:8a:1f:4d:
7a:b8:f9:08:a7:76:7b:10:58:83:fb:95:b0:de:21:
79:b8:32:d4:a8:da:2c:71:de:f7:23:55:ff:b0:c3:
23:dc:24:37:64:cf:5e:54:9b:90:67:e0:fe:25:10:
e7:7b:d5:d7:8f:9e:dd:c4:a1:5a:0d:ce:78:c5:8f:
38:4e:f4:9b:6e:4c:41:98:b9:e9:29:eb:35:18:68:
b9:6e:d8:44:03:a1:27:fd:0c:3b:ed:65:e4:73:85:
fe:ea:75:a2:40:23:27:31:0e:1c:8d:d6:ab:50:e4:
12:df:9f:d7:d5:e1:50:69:bd:38:d8:b5:ae:04:1c:
83:02:15:a6:03:ee:aa:73:ac:39:14:2a:63:a9:37:
a1:ef:e7:6a:1c:8e:38:6b:6b:48:21:9b:87:fb:56:
30:fe:39:18:93:fa:4e:81:c7:e0:46:3e:01:86:51:
8f:e4:1c:f4:77:c0:0f:63:f7:e3:a2:53:38:eb:0a:
7f:27:36:77:30:0c:da:27:46:47:f1:a9:f4:ac:d9:
12:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DE:CB:50:5E:2A:4E:21:09:2E:40:BA:3B:A2:E8:B6:1C:DD:DA:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/45beb1-77e6-442c-aa1f-5f14b3dec0b8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/45beb1-77e6-442c-aa1f-5f14b3dec0b8/1/kt7LUF4qTiEJLkC6O6Lothzd2uQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:97c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199115
Signature Algorithm: sha256WithRSAEncryption
5e:59:b0:ca:88:be:81:d4:cf:bc:e0:f6:91:e5:7a:71:62:8b:
f1:21:00:7e:88:5e:d9:55:9d:00:c7:b1:62:d4:8d:2f:28:f9:
4d:6a:8b:25:4d:59:a8:94:5e:7d:bb:38:9f:35:5f:48:0a:ee:
96:fa:27:e9:ed:13:e5:0d:9e:3f:f9:3c:01:73:7d:b1:83:45:
e2:3a:27:6a:6f:71:4c:80:3b:66:c9:c9:08:18:a5:15:cd:2f:
f3:05:42:a6:cd:93:6b:0b:17:b8:c1:1d:8e:d0:41:5c:d4:e8:
9a:7f:6e:ea:dc:4e:2a:14:a9:1a:bd:f4:96:03:21:59:ca:9e:
6e:84:21:31:0c:ce:89:1c:ed:c0:82:ea:98:f8:15:93:5e:04:
b2:cd:d2:44:c7:e4:98:72:71:d7:57:8d:79:e3:d7:f4:20:12:
a1:2e:60:e6:93:48:1e:ff:ee:a2:f0:6a:46:0b:e5:0d:13:9b:
22:ce:c1:c8:43:e1:e2:d9:80:2e:59:3a:40:36:07:73:0b:de:
ee:a9:11:e6:82:23:7f:a8:3e:ec:e2:f3:bc:f8:89:5b:93:ff:
8a:28:2b:a0:f9:d8:4f:4c:8e:36:81:c6:d9:85:18:8b:4d:2e:
9d:da:ef:f4:be:47:87:91:5d:0f:7a:44:41:cd:1e:2a:77:17:
76:24:b5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:56 2024 by rpki-client on console-ams.rpki-client.org