Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ob5y2V-TdKlBZbirb35JnyvRejg.cer
File: ob5y2V-TdKlBZbirb35JnyvRejg.cer (raw, json)
Hash identifier: jxKy21cy5bAA/oqj4UgCsjkDbWXbhsK7u0kuRh0WFT4=
Subject key identifier: A1:BE:72:D9:5F:93:74:A9:41:65:B8:AB:6F:7E:49:9F:2B:D1:7A:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 993170B36A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/4b9a83-cea4-4399-859d-7d9a5bf6e1b1/1/ob5y2V-TdKlBZbirb35JnyvRejg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/4b9a83-cea4-4399-859d-7d9a5bf6e1b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:54:25 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 12903
IP: 91.188.192.0/22
IP: 193.218.113.0/24
IP: 194.29.208.0/21
IP: 217.68.208.0/20
IP: 2a02:268::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657959465834 (0x993170b36a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:54:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1be72d95f9374a94165b8ab6f7e499f2bd17a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:df:ab:1b:29:2a:5e:36:60:eb:e2:87:42:
9c:5a:7e:10:39:67:14:d6:4f:f7:63:83:d5:59:3f:
4e:92:5d:9c:5c:b6:43:e9:fc:28:73:2c:57:9e:31:
de:55:f3:3a:d5:04:19:98:44:cc:f0:05:53:df:0f:
ef:fe:b8:8e:fb:16:a2:bd:35:10:65:fb:26:88:a4:
9e:09:d6:9e:ef:76:70:b3:74:fd:d5:c8:e0:9e:d6:
e9:15:c9:00:dc:79:cd:ff:3b:ee:d5:68:09:19:6c:
39:e8:89:b3:ac:68:6a:86:40:c9:29:82:6f:4e:3c:
1d:03:97:7f:91:dd:bc:b0:a7:69:4f:12:27:81:c1:
e8:d4:66:5d:16:d4:fa:32:4c:a2:bc:9d:55:6d:8b:
5d:29:a3:0d:ec:66:39:58:fb:fe:16:ef:1a:fd:25:
a5:d1:d0:a4:82:88:7d:43:81:31:7f:ff:0a:36:90:
1a:6d:73:b8:29:9b:5b:b7:52:3c:3c:d7:cf:29:f2:
f2:f4:8b:7d:8f:d0:48:88:53:61:1b:3e:70:62:1a:
26:70:cc:65:bb:21:ab:2d:f7:01:30:87:97:5c:84:
31:58:cd:94:bb:19:64:95:54:09:ae:fd:22:b2:cc:
4f:8b:e3:45:b3:05:ea:c3:f6:c3:4c:08:a0:0a:11:
e2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BE:72:D9:5F:93:74:A9:41:65:B8:AB:6F:7E:49:9F:2B:D1:7A:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4b9a83-cea4-4399-859d-7d9a5bf6e1b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4b9a83-cea4-4399-859d-7d9a5bf6e1b1/1/ob5y2V-TdKlBZbirb35JnyvRejg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.192.0/22
193.218.113.0/24
194.29.208.0/21
217.68.208.0/20
IPv6:
2a02:268::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12903
Signature Algorithm: sha256WithRSAEncryption
6c:7e:f3:6c:b7:d5:e2:19:b3:b1:0a:1a:92:2c:c4:9e:ff:a6:
93:74:e3:27:84:d2:c0:2a:e4:d1:24:03:7b:6b:89:16:38:0d:
51:59:9b:e0:e3:80:20:94:b8:e8:3a:05:a4:dc:16:4e:d0:9d:
26:6a:f4:89:81:dc:a0:d0:02:f5:a5:a9:70:88:94:c2:c8:e2:
f9:77:9a:73:22:7f:cb:cc:43:5c:d8:6e:a0:3b:9b:78:ef:46:
f1:bd:e3:23:74:77:ca:3d:6a:1b:22:81:f7:cf:64:e9:d3:67:
3e:2c:95:36:d6:8c:24:5f:57:92:9f:4b:99:e6:54:ac:26:ef:
07:69:58:39:bd:93:b2:4b:4a:fc:c1:9f:36:38:5c:e9:9a:c3:
7d:53:bb:76:6f:72:7e:37:b3:53:b3:2c:f8:7d:fb:93:1c:44:
82:00:1b:05:a1:b2:a5:26:02:26:ff:2c:2e:fc:3d:68:cc:d4:
8a:31:ed:46:87:38:c1:61:73:48:59:3b:63:a3:6a:ec:98:21:
3c:ba:24:a8:ac:54:f0:7c:aa:ca:81:9d:78:ec:e9:27:f6:c0:
da:a2:fd:19:97:14:98:13:50:55:09:db:ec:43:78:22:e6:73:
2e:a1:40:a7:ce:ab:66:9c:b8:d9:99:cb:74:f4:77:21:dc:1e:
e0:fa:96:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:48 2024 by rpki-client on console-ams.rpki-client.org