Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pNP551YNy2KxN5-793sQLCNs2VU.cer
File: pNP551YNy2KxN5-793sQLCNs2VU.cer (raw, json)
Hash identifier: 5rm64p6bWdrCZYJuHhx/soWP3zQ41+cZCmb7CriSK/s=
Subject key identifier: A4:D3:F9:E7:56:0D:CB:62:B1:37:9F:BB:F7:7B:10:2C:23:6C:D9:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A61B219589
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/02d23f-55b4-4067-a9da-4aba45cb04fc/1/pNP551YNy2KxN5-793sQLCNs2VU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/02d23f-55b4-4067-a9da-4aba45cb04fc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:57:49 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 210633
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 713419756937 (0xa61b219589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:57:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4d3f9e7560dcb62b1379fbbf77b102c236cd955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7d:c3:08:b5:93:ca:44:57:b3:c6:67:d2:23:
5c:d3:32:99:3d:d4:fc:48:03:ce:c0:a3:ab:68:b3:
93:bc:c6:4b:64:7b:13:a1:38:9a:63:a8:cb:2f:5b:
7f:8b:31:af:84:d1:bd:30:94:d0:3c:f4:d9:f9:cb:
21:62:f6:89:d0:60:ec:c5:7e:ed:33:b3:68:3c:3b:
b5:41:d6:6a:25:04:18:ad:05:40:6b:1f:62:9e:c7:
6a:29:14:66:b4:b4:20:51:eb:08:87:16:2f:ff:3b:
53:8d:87:17:a8:02:04:0f:05:f8:0c:60:85:42:58:
23:0f:3a:29:eb:fa:d4:7f:45:13:eb:10:fe:e7:c1:
dc:2b:e2:c9:12:a8:77:76:a8:d3:c7:50:e7:d4:fc:
c1:3c:96:fa:21:be:a7:38:63:e1:e7:73:82:18:3b:
0f:82:f2:aa:d5:67:23:66:aa:49:e0:0b:9d:7f:44:
a5:eb:79:c7:df:bd:75:9b:f3:60:79:96:fb:ac:a3:
ea:1d:2f:47:8b:74:92:b7:13:31:3c:5c:59:9a:ae:
66:04:6d:d3:8f:39:11:c3:b7:65:5a:10:7e:e7:06:
ea:ec:51:17:5d:ff:ef:4e:cc:78:49:28:f2:23:50:
90:5e:d2:c6:c1:fb:ad:ba:bf:bb:ed:ff:70:7d:1d:
15:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D3:F9:E7:56:0D:CB:62:B1:37:9F:BB:F7:7B:10:2C:23:6C:D9:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/02d23f-55b4-4067-a9da-4aba45cb04fc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/02d23f-55b4-4067-a9da-4aba45cb04fc/1/pNP551YNy2KxN5-793sQLCNs2VU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210633
Signature Algorithm: sha256WithRSAEncryption
1e:30:2b:b3:d0:af:78:c7:53:46:38:d3:24:5c:09:cb:54:4c:
99:41:6d:dd:13:45:1c:e2:c9:96:b6:9b:de:78:45:42:4f:f2:
db:3f:0f:d1:71:f6:7e:6a:52:da:fa:d3:99:ba:17:98:dd:aa:
96:ec:b2:a4:9e:0f:07:18:17:1a:05:bc:d7:31:90:52:4f:7e:
89:d1:c0:7d:93:bf:4f:82:23:3e:35:12:48:dd:d2:52:e9:99:
b7:82:94:40:07:27:f7:83:37:58:12:30:f7:2c:1e:c5:d6:9c:
fe:3d:88:c0:e1:aa:72:7f:56:46:da:b0:6c:2a:59:5c:e5:5a:
5f:d0:7b:40:d3:fd:13:9c:62:52:2e:c5:5c:80:8f:31:28:a7:
f0:f1:1b:4c:70:c2:f8:93:b1:47:d1:43:b9:69:6c:88:70:6c:
92:a5:3c:58:24:76:68:76:f0:6e:0d:ff:3d:79:90:7a:0c:c1:
d1:48:bb:51:5e:85:c7:36:2c:7d:4c:bc:a6:c1:41:78:64:9d:
50:ce:df:8a:8b:70:47:a1:b4:e1:d9:d7:a4:73:32:4a:d4:46:
0f:68:59:5e:27:05:22:17:3d:3f:4f:35:19:4f:6a:88:4a:7e:
49:a1:bc:02:b0:3d:c5:a4:1e:4d:19:cf:cf:f5:f3:99:62:dd:
fe:90:ae:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:58 2024 by rpki-client on console-ams.rpki-client.org