Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ph23jH8hKFhm2rSkWlRNzlWfQ9o.cer
File: ph23jH8hKFhm2rSkWlRNzlWfQ9o.cer (raw, json)
Hash identifier: zp6xpsNJxldsx/X+0Sy3bUcHuVpqIoDZxN9hUo02m+8=
Subject key identifier: A6:1D:B7:8C:7F:21:28:58:66:DA:B4:A4:5A:54:4D:CE:55:9F:43:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A8BE179637
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/55057b-a27a-4876-a6c5-c150dffff7d6/1/ph23jH8hKFhm2rSkWlRNzlWfQ9o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/55057b-a27a-4876-a6c5-c150dffff7d6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:03:56 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 210225
IP: 193.32.236.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 724743722551 (0xa8be179637)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:03:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a61db78c7f21285866dab4a45a544dce559f43da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:41:f4:fb:f3:9f:84:ef:de:6b:58:00:ad:
29:10:0b:05:3a:8a:d3:4f:e9:5f:91:ab:b0:8c:80:
b0:96:5f:d8:b1:b5:c2:a3:1c:68:c9:b8:79:fa:15:
3e:83:aa:57:6f:27:7e:03:0e:98:11:3c:c4:9d:e0:
ec:7c:bf:ef:4b:6f:2a:b4:3a:3f:89:df:3c:8d:c1:
69:9d:5e:85:f0:6e:2e:fb:ef:65:e6:fb:1c:51:32:
92:ec:78:59:59:b1:24:79:4e:c3:44:c9:cb:8a:b2:
c6:4e:fd:26:cd:94:a4:65:62:4b:fc:7f:d2:a7:17:
2f:1e:04:35:e3:cf:59:fc:99:70:f9:8e:66:18:9e:
b1:4d:bc:82:2a:60:d7:f3:82:32:a1:8c:7b:73:88:
3f:b7:ff:64:16:76:7e:21:63:a1:1a:be:26:f3:cb:
d3:8f:14:79:65:7b:18:8e:1e:dc:53:a6:48:f8:d1:
0e:a9:f5:ab:49:f1:d9:9d:03:44:70:12:a1:f9:1a:
2e:e0:b5:6a:76:b9:b9:ba:d7:70:7d:15:1d:59:a2:
e2:2b:06:67:47:a0:23:4a:79:4e:a6:5b:3e:e2:91:
78:80:cd:04:58:e5:85:f8:a7:31:88:42:28:4e:c5:
dc:8f:41:67:ad:45:0e:e5:6e:11:4a:e3:53:04:f3:
89:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1D:B7:8C:7F:21:28:58:66:DA:B4:A4:5A:54:4D:CE:55:9F:43:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/55057b-a27a-4876-a6c5-c150dffff7d6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/55057b-a27a-4876-a6c5-c150dffff7d6/1/ph23jH8hKFhm2rSkWlRNzlWfQ9o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.236.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210225
Signature Algorithm: sha256WithRSAEncryption
3e:0b:19:46:12:d7:de:06:6c:5f:65:d3:52:cc:eb:51:c1:81:
20:18:33:94:d3:8b:85:ae:66:6b:27:82:53:d2:9f:7a:03:df:
51:da:69:7f:25:93:05:f4:82:56:4c:0a:11:94:35:a5:ac:d1:
63:a1:84:d8:0e:83:77:0f:20:af:4d:da:b8:15:21:83:61:d3:
7e:c1:32:eb:bf:89:1b:c7:1d:2a:e3:e2:e1:51:f9:fe:87:df:
3a:d9:d7:e3:f0:c7:51:5a:5c:dd:93:e0:c7:cd:cd:32:d7:bf:
8c:7e:90:6c:9b:57:ea:ad:86:7e:de:bb:45:5a:44:bf:c6:3b:
49:c7:51:35:cd:15:d6:9b:d2:ba:dd:26:10:db:84:3f:be:18:
cf:7e:1f:62:8f:3b:66:6e:83:5f:59:52:eb:33:1a:cf:ca:be:
8b:1e:ea:bc:77:34:58:e8:d1:c3:f4:dd:99:73:c9:bf:fc:93:
de:39:d5:93:05:dd:3b:a5:59:60:78:34:ec:df:7f:23:a6:72:
1c:c7:1b:83:42:e4:b1:db:24:d3:06:c7:1b:05:e6:ab:49:e1:
b7:8b:63:73:79:95:06:eb:26:74:83:e3:f6:4d:fe:be:6e:e6:
c6:77:d1:0c:1f:d7:18:87:25:2d:b1:c4:4b:d2:2e:a6:d9:03:
12:e5:76:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:48 2024 by rpki-client on console-fra.rpki-client.org