Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n9GpoiCF5-fkYTwZX7ZAmvMB3oE.cer
File: n9GpoiCF5-fkYTwZX7ZAmvMB3oE.cer (raw, json)
Hash identifier: OKCL/76uzKA/f+iiyO4ouTBr4auc73rAY71bHvsQtto=
Subject key identifier: 9F:D1:A9:A2:20:85:E7:E7:E4:61:3C:19:5F:B6:40:9A:F3:01:DE:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A1117B5027
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/d1f188-3a84-4f55-9aad-22af495544c9/1/n9GpoiCF5-fkYTwZX7ZAmvMB3oE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/d1f188-3a84-4f55-9aad-22af495544c9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:52:28 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 208715
IP: 194.61.128.0/22
IP: 2a0d:8ac0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691783028775 (0xa1117b5027)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:52:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fd1a9a22085e7e7e4613c195fb6409af301de81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:50:31:f7:59:cd:50:2a:1d:66:49:94:d6:10:
b3:05:27:e3:0b:cf:e7:4e:d2:aa:db:9c:e7:e1:40:
64:71:5e:bc:b9:78:8c:da:1c:10:38:be:1a:c2:0e:
64:c7:9c:9a:94:12:a5:c2:fe:70:23:de:96:8f:02:
91:55:0a:07:ca:75:12:b7:df:be:27:8a:ea:31:d9:
d0:6c:79:dc:9f:30:90:5a:59:35:aa:ab:e7:71:9e:
db:bb:dc:ab:d2:a9:7e:47:70:4f:be:36:57:e8:0c:
cc:5c:88:00:d0:4f:76:11:82:70:17:54:00:0c:7d:
3a:40:c5:cf:e8:18:66:2e:cb:58:d3:6d:6b:b3:7f:
1d:1c:be:40:80:05:86:25:e3:c5:94:11:22:b3:83:
74:f8:ae:eb:d6:92:19:7b:c3:3d:bf:19:af:18:f9:
f5:28:91:d6:46:7d:30:93:82:80:bb:24:b9:89:f8:
9c:0a:00:33:21:6c:c7:ff:20:1f:1a:20:24:4c:c2:
cc:6b:84:e0:90:0a:6b:24:e0:e5:f4:02:ae:b4:4f:
65:50:63:34:32:01:a7:e6:a7:76:ca:0a:65:e9:82:
04:74:f8:b4:0e:8d:b1:88:93:5d:43:77:53:d4:09:
43:56:19:bf:93:1b:f7:bd:e2:ad:71:e4:de:b2:31:
02:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D1:A9:A2:20:85:E7:E7:E4:61:3C:19:5F:B6:40:9A:F3:01:DE:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d1f188-3a84-4f55-9aad-22af495544c9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d1f188-3a84-4f55-9aad-22af495544c9/1/n9GpoiCF5-fkYTwZX7ZAmvMB3oE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.128.0/22
IPv6:
2a0d:8ac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208715
Signature Algorithm: sha256WithRSAEncryption
1a:1f:e1:7f:45:a0:78:32:fd:4e:73:cd:c1:a0:cb:df:b4:7e:
e9:1d:7b:69:24:46:96:16:ac:6c:3e:43:b6:ba:cc:e8:03:7e:
13:37:69:a1:bc:03:7a:35:74:b5:62:37:b4:1a:20:5d:42:38:
b7:15:5e:d3:99:f3:79:ec:cd:b2:d0:90:8b:59:bc:36:fc:12:
10:e2:21:f9:5c:d7:b6:3a:1c:3b:83:56:50:c4:4e:73:2d:9f:
20:2c:38:8e:ab:90:36:81:a1:46:bf:e9:85:c9:b6:31:a7:27:
d8:d6:e3:1d:0d:3e:76:39:9d:52:b6:b8:70:4c:d9:3d:83:f8:
ad:f6:15:ef:68:56:98:89:03:aa:fc:80:71:c7:b3:33:11:5c:
31:e1:18:34:67:c4:b1:e3:e9:47:b2:d3:b5:cf:72:ea:ac:40:
52:7e:51:75:89:b1:fa:94:c2:a4:46:20:20:c9:fa:2c:f7:01:
d6:15:f4:ea:e6:b3:ba:e4:99:62:1c:93:56:69:32:1b:0e:a5:
1e:14:b9:a1:9b:a8:86:84:47:92:94:a2:cf:98:89:cf:ae:34:
16:86:0d:fc:92:bd:3e:b3:c3:50:30:22:29:af:8d:b2:3f:92:
5b:8d:3e:2c:20:c2:66:46:96:a7:6e:7d:ae:9e:c7:c6:8f:1f:
07:e0:e4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:29 2024 by rpki-client on console-ams.rpki-client.org