Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mr5h-_WLyPKB9We5yBSicOtTBlU.cer
File: mr5h-_WLyPKB9We5yBSicOtTBlU.cer (raw, json)
Hash identifier: ydzkxwJPChUi3K1R6TjGt30RvHfuc6aRSnMPsfmJK9I=
Subject key identifier: 9A:BE:61:FB:F5:8B:C8:F2:81:F5:67:B9:C8:14:A2:70:EB:53:06:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AA6AB61286
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/efff4e-ac13-4c6e-8228-06723bf60646/1/mr5h-_WLyPKB9We5yBSicOtTBlU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/efff4e-ac13-4c6e-8228-06723bf60646/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:55:31 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 60409
IP: 81.25.96.0/20
IP: 2001:b40::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 731934757510 (0xaa6ab61286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:55:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9abe61fbf58bc8f281f567b9c814a270eb530655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:bb:9b:d1:1e:64:9f:d5:91:a6:56:f4:64:
2e:7d:45:e6:03:34:f1:75:e6:c5:49:78:9e:7b:5f:
07:98:8d:b3:4e:e4:f1:63:37:40:86:f0:af:ba:3f:
3a:7b:e0:bf:c7:0d:17:c5:88:1c:df:18:ec:47:59:
c8:1b:5e:56:a3:7d:d1:19:9c:8c:bd:f6:04:32:32:
03:84:96:a5:f1:f5:e6:2d:28:2f:29:ec:2d:e7:c4:
c8:45:4d:e7:53:d8:ff:9a:e1:4a:21:db:1f:aa:71:
8f:97:4c:1d:df:a3:52:df:ca:98:88:d7:90:0e:66:
26:8d:5c:23:df:fb:46:e0:05:5b:59:09:8a:24:35:
63:c1:de:57:8e:ec:31:6f:e5:d2:2d:5b:65:43:29:
05:7a:61:d4:96:d8:a3:7b:5d:31:71:37:24:11:69:
a8:3b:c3:a2:93:82:fc:2a:05:fd:c9:29:7f:5e:ed:
03:cc:f9:d5:5e:63:f2:7e:1a:a2:b9:eb:05:c0:19:
20:d1:4e:ce:d1:3f:d2:be:86:1a:e4:fb:a5:5c:78:
be:19:66:cb:6c:a8:8e:1e:cc:b4:c5:ba:b5:d3:f1:
d3:7c:2d:3c:3b:d0:b3:a7:cc:8b:24:e2:89:c7:be:
05:5a:18:53:48:fc:9a:0b:31:20:49:b3:7f:f1:02:
41:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BE:61:FB:F5:8B:C8:F2:81:F5:67:B9:C8:14:A2:70:EB:53:06:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efff4e-ac13-4c6e-8228-06723bf60646/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efff4e-ac13-4c6e-8228-06723bf60646/1/mr5h-_WLyPKB9We5yBSicOtTBlU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.25.96.0/20
IPv6:
2001:b40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60409
Signature Algorithm: sha256WithRSAEncryption
42:01:32:53:98:e4:69:0e:9d:2d:0a:82:4a:27:00:7a:1b:f9:
07:0d:73:4b:62:43:84:cb:4f:76:dd:e5:0a:71:89:ed:ba:65:
5e:2f:1d:4b:15:0b:2b:35:d6:e6:f3:6b:78:5b:b3:ae:4b:e1:
ab:53:5a:bc:43:96:ff:cc:3e:b9:fb:d1:c5:27:ba:17:2c:77:
f6:cc:6a:b3:09:09:42:48:80:2e:e3:3b:1a:9b:9c:86:66:20:
57:6b:c2:a0:9c:17:6f:fc:61:86:d1:aa:08:d0:e7:7d:2f:d6:
a0:23:b3:b5:04:80:d2:2f:e5:61:6a:b8:48:f2:88:26:3c:48:
04:09:4f:8b:c8:21:9a:d3:a1:12:91:40:51:0c:09:b2:2e:9b:
0d:3f:ce:22:db:8c:cf:50:3d:4c:ec:73:53:a7:7e:a0:ac:bc:
9c:e6:f2:fd:50:78:e3:06:23:a9:01:ba:79:a5:d2:28:29:41:
13:cb:ea:9f:46:84:72:f0:c4:e1:74:f4:8a:81:6f:ce:a5:f3:
5b:d9:1a:15:1f:f0:b1:36:34:9e:71:0f:07:61:1d:31:41:b4:
af:5c:63:88:2d:68:8a:2d:2a:bc:12:0a:b3:61:3c:f3:30:08:
13:e7:c7:e5:5f:1e:f7:d7:31:7f:8c:6d:60:6a:09:c7:b2:ae:
b6:84:ce:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:21 2024 by rpki-client on console-fra.rpki-client.org