Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nzisRbsq9Db_dA8NAeGnpxdXtn4.cer
File: nzisRbsq9Db_dA8NAeGnpxdXtn4.cer (raw, json)
Hash identifier: GSsUiAdbcNfGxfSaaskbuSGtuR1sCp8FEEcjJHHdRT0=
Subject key identifier: 9F:38:AC:45:BB:2A:F4:36:FF:74:0F:0D:01:E1:A7:A7:17:57:B6:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B20AAE9AB3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/bb9ff1-b773-4cc5-ac14-db10b3d02a7e/1/nzisRbsq9Db_dA8NAeGnpxdXtn4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/bb9ff1-b773-4cc5-ac14-db10b3d02a7e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 20 May 2022 13:11:59 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 34354
IP: 85.158.72.0/21
IP: 89.221.112.0/20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 764683393715 (0xb20aae9ab3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 13:11:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f38ac45bb2af436ff740f0d01e1a7a71757b67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d0:a7:7b:dd:a8:39:29:d2:4f:44:4c:63:25:
e9:3e:52:88:a8:2a:80:4e:f8:ac:c3:ba:5e:37:3d:
4e:e8:70:dc:c8:1d:80:42:15:4c:7a:ae:2b:b0:e3:
5e:3b:e0:63:2d:e0:dc:5f:a3:b2:31:34:8b:98:f7:
23:87:06:0f:29:87:78:b1:5d:43:fa:d6:70:ae:e2:
31:39:19:43:1e:33:ec:c3:ee:8f:c3:f9:27:b9:ac:
93:fd:25:3f:13:86:22:8c:db:40:5c:a9:dc:32:11:
b8:48:51:f9:53:90:4d:14:26:cf:0b:60:bc:d2:f3:
9e:65:9e:b7:e5:29:b6:70:f2:bf:97:51:4b:58:08:
ca:ad:5e:fc:e3:82:93:5d:16:81:8f:98:5f:95:f6:
27:4b:fc:35:2b:8e:e2:f1:39:b0:78:54:cc:a1:44:
aa:70:76:fd:30:b4:fa:cc:6b:44:98:f5:d5:14:1c:
c5:30:76:00:4c:10:73:a1:69:4e:b5:58:07:df:99:
17:04:25:7c:d3:c4:ca:d2:cc:4e:81:22:4b:bc:56:
60:2d:a3:af:4b:2b:6a:ae:6f:a6:e0:d2:f8:d5:5b:
6a:5c:22:79:9c:b3:b8:f6:43:a2:96:26:10:bc:9d:
32:4f:cb:33:a3:b2:b4:95:e3:7e:de:c1:a1:d3:bd:
b8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:38:AC:45:BB:2A:F4:36:FF:74:0F:0D:01:E1:A7:A7:17:57:B6:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bb9ff1-b773-4cc5-ac14-db10b3d02a7e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bb9ff1-b773-4cc5-ac14-db10b3d02a7e/1/nzisRbsq9Db_dA8NAeGnpxdXtn4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.72.0/21
89.221.112.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34354
Signature Algorithm: sha256WithRSAEncryption
a5:37:e4:b4:0f:f0:13:4b:9b:94:4b:2b:ce:c7:fe:a4:33:d0:
8f:91:f5:8c:36:7f:87:60:0f:59:f2:c6:c2:4a:99:66:c6:67:
a0:b6:39:b3:65:39:e6:e1:a7:68:4e:ba:92:01:ee:20:9c:75:
9e:b1:98:e5:aa:90:9f:14:18:ce:3a:10:17:62:b6:1b:25:9d:
b0:0d:88:7f:3e:37:72:38:21:9f:85:b6:46:bd:08:2d:af:31:
65:96:3f:79:1e:c4:e7:1f:45:f7:d2:1d:df:b7:2c:3d:5f:c9:
c1:f4:e5:cd:1e:47:b1:c6:5f:99:9b:03:74:9c:af:57:d1:83:
85:9d:92:d9:94:81:92:45:23:f5:cc:26:f6:18:0c:d7:76:d7:
d7:87:e1:de:22:ed:fa:e9:9c:6d:53:b9:d8:39:de:df:ef:be:
20:94:b6:94:10:8a:48:e9:e4:b8:23:fa:e7:80:4a:e8:b3:95:
c9:f9:82:93:05:ea:37:ab:c4:d6:89:7b:5c:5f:8b:3b:1f:03:
0c:7f:e3:3f:ef:d4:a1:4d:c4:be:17:39:93:a9:b9:36:95:67:
2e:fb:c9:2b:43:52:0b:99:93:fc:cc:df:9f:c6:68:47:1f:71:
78:d3:d3:3c:66:88:e0:94:05:33:73:99:cb:1b:05:4a:c1:8c:
9f:18:18:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:31 2024 by rpki-client on console-fra.rpki-client.org