Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ofVxTGntUwXfJ048zJFYPpwUEU8.cer
File: ofVxTGntUwXfJ048zJFYPpwUEU8.cer (raw, json)
Hash identifier: f8g4hVwRRWtALqTK2dCadLpEgEkXrjGbDNO4mHz5C6Y=
Subject key identifier: A1:F5:71:4C:69:ED:53:05:DF:27:4E:3C:CC:91:58:3E:9C:14:11:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A8A89BB3A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/19f5b7-df7f-4c3b-b05a-8288035342d9/1/ofVxTGntUwXfJ048zJFYPpwUEU8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/19f5b7-df7f-4c3b-b05a-8288035342d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:02:20 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 212582
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 724383282087 (0xa8a89bb3a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:02:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1f5714c69ed5305df274e3ccc91583e9c14114f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cc:95:1c:99:c0:19:60:3c:24:09:d7:57:25:
78:78:64:43:d9:97:bc:f6:1d:aa:1b:b7:e1:e2:fd:
59:84:da:06:5d:4e:eb:46:27:12:05:bb:3c:3d:54:
a4:6b:56:76:2c:dd:51:14:69:f9:bb:58:b8:74:a0:
9a:17:bc:ed:e0:0d:77:43:fb:8c:c2:4a:f2:15:a5:
68:78:5e:9b:d3:ee:c4:89:69:86:57:48:bd:0d:64:
db:82:3d:25:e3:cb:be:38:39:92:85:15:56:69:a7:
d6:05:08:e0:62:91:e2:52:fe:7e:60:ca:d7:e1:a2:
6e:6a:7b:11:73:a4:56:3a:b7:44:23:d5:cd:aa:2a:
52:76:7e:df:60:fb:0c:00:7f:06:32:88:ff:d4:a0:
63:15:fc:71:a1:3a:a6:55:7d:85:5c:fb:d8:a9:d7:
4d:92:51:a3:2d:6c:6c:7d:3f:b2:ce:58:32:0d:bb:
42:45:b1:11:39:a8:dd:be:d0:6f:2e:a6:3d:bb:b6:
33:5f:11:69:1c:d7:68:5b:a7:30:c9:9e:bd:f8:f2:
9e:bb:e2:34:94:c0:83:5a:ea:be:b6:a9:cc:77:68:
94:80:7f:a3:41:4d:51:2e:eb:3c:6c:02:05:bb:ff:
10:4f:2d:8a:e5:6d:5c:21:79:b4:7d:29:d1:c4:40:
65:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F5:71:4C:69:ED:53:05:DF:27:4E:3C:CC:91:58:3E:9C:14:11:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/19f5b7-df7f-4c3b-b05a-8288035342d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/19f5b7-df7f-4c3b-b05a-8288035342d9/1/ofVxTGntUwXfJ048zJFYPpwUEU8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212582
Signature Algorithm: sha256WithRSAEncryption
20:2a:bd:0d:85:ef:3c:a9:2a:99:e0:39:0f:c6:95:3a:5d:02:
2b:61:21:f5:13:0c:f2:df:a1:3f:40:a7:43:68:26:ff:61:df:
bc:95:55:51:b0:ee:79:25:81:30:ec:a1:10:cd:61:e3:3b:6e:
b7:d1:b6:58:2c:65:c6:8c:37:d5:65:ee:bc:4e:55:b2:b0:c0:
87:6c:64:27:24:cd:b5:e5:be:6b:ba:5e:da:08:61:16:0b:fb:
77:54:32:75:be:94:6e:86:40:73:f4:17:6a:54:57:b0:60:40:
d3:ea:c4:d6:08:26:6e:33:d3:98:3d:a3:38:fd:60:d2:9a:68:
9d:ce:fa:2d:8e:0c:42:a2:ad:95:5c:39:19:e3:2e:31:c1:ed:
55:95:63:96:2a:99:cd:45:73:c6:31:7d:0f:84:38:e2:d5:de:
48:00:37:67:4c:23:7e:58:42:bb:50:2f:f0:f4:ea:c4:3f:f5:
39:4b:93:b7:64:0c:91:a8:10:95:19:71:b3:e1:56:51:67:ed:
1f:6c:da:19:e6:7f:45:18:bf:d7:eb:97:60:b4:60:42:ff:4e:
f3:a7:7f:12:69:7a:87:2a:ea:03:88:d9:88:db:b5:f5:3a:bf:
b3:32:d2:1f:c7:12:a4:f8:40:27:3a:a3:5f:56:c4:5b:0e:92:
e5:bf:50:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:39 2024 by rpki-client on console-fra.rpki-client.org