Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mOS5KcAmUgmQUOIFIg0MZvs_E1Y.cer
File: mOS5KcAmUgmQUOIFIg0MZvs_E1Y.cer (raw, json)
Hash identifier: N1QQsFqHQ8EFDbaSDptHky8j6X3xtiJAqPWaFzqar1A=
Subject key identifier: 98:E4:B9:29:C0:26:52:09:90:50:E2:05:22:0D:0C:66:FB:3F:13:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B1711CB41E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/614767-ff05-4194-8f56-446a9d4f5970/1/mOS5KcAmUgmQUOIFIg0MZvs_E1Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/614767-ff05-4194-8f56-446a9d4f5970/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 09 May 2022 11:42:02 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 210864
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 762106917918 (0xb1711cb41e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 9 11:42:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98e4b929c02652099050e205220d0c66fb3f1356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:7c:42:be:96:1b:c1:41:e6:1b:ce:cb:eb:
a2:df:79:fe:51:cb:d8:a9:5b:89:e0:02:5a:90:55:
63:93:ae:5e:11:0a:06:36:0b:6f:dc:f9:3f:7e:24:
a9:79:17:c2:e4:5a:65:0a:b3:72:8d:87:b1:55:60:
d5:66:29:0a:b8:62:1e:99:ca:7a:80:3c:0c:f5:25:
e0:9b:1c:a3:0a:c1:3d:59:50:44:7f:ac:37:7e:99:
62:7e:94:6b:5f:b3:af:d6:42:16:50:a8:38:51:07:
a8:83:bc:3a:dc:d4:d4:24:51:ae:4e:c8:01:e7:2b:
81:76:0f:11:26:91:8c:ef:2a:18:ae:ca:0d:11:18:
7f:29:5e:92:e1:d0:60:86:d4:28:28:fe:b4:d3:e0:
26:d0:ac:e3:f3:d4:07:db:77:cb:64:1c:c9:78:01:
32:9d:a1:bb:cb:04:77:57:d1:2f:67:26:41:e4:19:
22:55:86:85:2f:13:8b:29:45:11:17:81:93:3a:20:
f9:58:6c:c5:2e:9d:13:17:c6:85:d6:ae:8b:59:99:
fc:8a:c3:e3:6d:10:ce:59:a6:f8:81:f2:0f:7f:32:
99:6a:69:23:92:b6:9e:af:29:e0:0d:c5:57:ac:66:
e6:5f:4d:8a:c8:d6:fe:35:b8:cc:15:be:7e:0d:89:
3e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E4:B9:29:C0:26:52:09:90:50:E2:05:22:0D:0C:66:FB:3F:13:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/614767-ff05-4194-8f56-446a9d4f5970/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/614767-ff05-4194-8f56-446a9d4f5970/1/mOS5KcAmUgmQUOIFIg0MZvs_E1Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210864
Signature Algorithm: sha256WithRSAEncryption
5d:cf:c3:de:93:df:ce:6c:db:2a:5c:6d:31:11:5d:5e:a0:24:
97:7e:cf:e0:27:8d:a0:2c:31:ef:c1:a9:6f:7a:18:5f:e2:f3:
73:8f:f4:4a:3b:72:76:df:6c:bf:7c:a2:7f:a9:65:9c:c0:fe:
01:dc:1a:47:56:99:d8:f2:3b:57:82:00:d9:2f:ab:be:6e:8a:
68:2b:d8:12:6f:6c:84:83:ba:62:76:fb:4d:b1:25:48:e2:2f:
5e:c4:8a:f4:a2:11:f0:57:81:de:3d:b6:b6:7a:88:72:c0:da:
a1:aa:a8:a7:0b:d0:02:48:2d:5c:aa:64:ad:9b:75:26:b9:65:
06:1f:83:70:7f:ee:19:ab:87:6c:76:6c:8c:38:0a:13:3c:f4:
43:22:bc:08:40:cf:33:12:29:21:de:08:8e:03:df:19:0b:8e:
83:83:dc:3c:86:bb:9a:c9:27:74:06:01:9a:ef:2d:15:7d:01:
ad:24:5e:9f:ea:de:ae:c3:66:b3:1a:4b:ae:d9:dc:ef:14:6f:
a2:92:55:cb:75:9d:8d:24:71:cc:98:5f:e3:a6:0b:68:c7:8a:
90:3f:03:96:5d:81:63:72:df:74:db:ff:8d:88:e6:35:c7:d8:
fb:0b:22:60:2c:85:8e:f2:70:ad:2b:b4:27:9b:de:37:9c:e8:
24:92:24:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:17 2024 by rpki-client on console-ams.rpki-client.org