Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ofVGkGqaWEA4a2Tek7Gxz4f34Sg.cer
File: ofVGkGqaWEA4a2Tek7Gxz4f34Sg.cer (raw, json)
Hash identifier: 5DiBE1l4a7p0sCx1IJqomlNrOMKVsPtNg1V+j82t6ss=
Subject key identifier: A1:F5:46:90:6A:9A:58:40:38:6B:64:DE:93:B1:B1:CF:87:F7:E1:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 997D655F15
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/cbafac-9873-4490-9a69-4a6c5cbd2050/1/ofVGkGqaWEA4a2Tek7Gxz4f34Sg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/cbafac-9873-4490-9a69-4a6c5cbd2050/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:57:29 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 57031
IP: 89.22.0.0/21
IP: 2001:67c:7c0::/46
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 659233791765 (0x997d655f15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:57:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1f546906a9a5840386b64de93b1b1cf87f7e128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4c:9f:56:0c:d7:ca:84:08:d8:1e:85:a5:95:
38:6e:19:8f:1e:28:43:96:d5:90:a1:83:a0:b8:3b:
87:52:ee:f2:91:24:ca:6d:81:44:38:f5:bd:cc:3e:
90:8b:5e:fe:31:ad:89:75:44:5f:c1:0c:ff:0d:5c:
5b:23:5c:8c:80:1a:63:46:06:d9:34:51:6d:48:4f:
a2:c4:00:2f:75:2e:a0:ad:6a:cb:af:e0:b7:ab:49:
b8:38:fb:2a:f0:50:bd:85:73:f3:d2:e6:60:ec:db:
00:ed:d0:52:33:09:1c:54:4b:a5:9c:cc:a6:b2:29:
e1:38:2c:95:00:fb:23:04:83:84:e1:3a:54:f5:41:
2d:96:be:f8:e7:eb:97:90:fc:32:d9:f3:a1:ed:f5:
c1:09:1f:92:19:e3:c6:d8:c1:6b:c1:0e:0e:67:bc:
16:b4:0b:1d:69:da:e0:26:4c:ef:9b:70:0a:ed:1e:
85:a2:0a:f1:ab:24:b9:91:a7:1e:74:b1:ee:13:ee:
81:25:d2:bf:9d:12:0b:a0:38:cf:17:5f:42:d6:27:
75:db:a7:b8:5f:15:a5:d7:37:37:e2:07:0a:4a:40:
05:b2:f0:1c:7e:7f:67:17:83:ee:96:13:37:e9:01:
bd:aa:44:11:78:d3:10:af:83:d7:e0:68:e4:f5:43:
61:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F5:46:90:6A:9A:58:40:38:6B:64:DE:93:B1:B1:CF:87:F7:E1:28
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cbafac-9873-4490-9a69-4a6c5cbd2050/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cbafac-9873-4490-9a69-4a6c5cbd2050/1/ofVGkGqaWEA4a2Tek7Gxz4f34Sg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.22.0.0/21
IPv6:
2001:67c:7c0::/46
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57031
Signature Algorithm: sha256WithRSAEncryption
2d:42:a3:5e:b4:b9:86:6d:3e:a2:c0:5a:d6:fd:93:af:dc:80:
8d:32:6e:ef:4a:b7:06:eb:76:59:0f:40:f5:da:ed:c1:49:bf:
0f:2a:c3:64:1b:eb:74:48:66:f6:41:68:a5:92:08:24:2c:36:
3f:4b:10:55:c0:87:72:75:b5:f3:9e:73:d2:da:00:f9:7a:83:
23:4e:e1:59:1c:ba:78:84:2d:6a:d4:ff:82:e8:52:39:ff:7e:
72:1a:46:6b:6c:50:2d:5b:26:58:88:20:2e:9e:94:de:1a:1d:
fb:7c:80:a5:e9:e8:95:a3:82:91:95:50:47:26:3b:e6:e8:ad:
00:4f:55:99:c0:ae:69:df:31:d4:2e:0b:97:25:57:46:45:fe:
3e:6b:b5:e9:c3:64:8e:11:59:0f:f4:b1:00:80:4a:95:d6:f9:
07:d7:bb:dd:96:9a:28:6a:c3:30:53:b7:6a:8e:48:38:25:8a:
9e:bf:91:3f:2e:35:4e:a2:fe:7e:ee:98:7c:08:b4:53:8b:11:
98:2a:91:8a:4a:af:0d:6c:a0:98:88:c1:bd:b3:40:a0:0f:cb:
72:ef:34:b8:2c:9f:14:7c:e1:cb:cd:fb:75:dd:4d:99:44:48:
fa:0b:67:69:c8:f2:be:53:0b:bc:26:c9:6a:e4:b5:ae:66:ad:
41:42:06:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:50 2024 by rpki-client on console-ams.rpki-client.org