Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rANNVPQj9s0Tpo-m2P1lNN7q4KM.cer
File: rANNVPQj9s0Tpo-m2P1lNN7q4KM.cer (raw, json)
Hash identifier: wGqjDe3Gwrnzh7Lhzii5BGQ1B/Bw/eJlGuRrvsCIosc=
Subject key identifier: AC:03:4D:54:F4:23:F6:CD:13:A6:8F:A6:D8:FD:65:34:DE:EA:E0:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AF919E9415
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-rsync.e15f.net/repo/MISAKA-RPKI/11/AC034D54F423F6CD13A68FA6D8FD6534DEEAE0A3.mft
caRepository: rsync://rpki-rsync.e15f.net/repo/MISAKA-RPKI/11
Notify URL: https://rpki.e15f.net/rrdp/notification.xml
Certificate not before: Mon 04 Apr 2022 13:30:10 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 57225
IP: 146.19.3.0/24
IP: 2a12:1700::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 754062365717 (0xaf919e9415)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 4 13:30:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac034d54f423f6cd13a68fa6d8fd6534deeae0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:80:29:3a:f1:99:61:3e:3e:40:3d:ea:ad:6e:
aa:bf:33:ff:42:88:4b:85:d6:d8:ac:4a:5e:3d:ac:
ec:e0:aa:6e:42:e0:1c:e5:a2:e2:e7:0a:42:a4:8f:
23:08:5b:eb:1f:5e:fb:7b:5c:c0:33:d0:b2:0e:86:
a2:e3:b3:32:4a:21:28:31:cc:f1:f3:cb:e0:a6:24:
d0:b3:41:b2:e4:d1:8d:2a:6e:43:7b:03:61:2b:76:
ad:78:44:0e:2c:7f:ec:19:4b:70:3e:40:2c:fb:d5:
0b:a4:82:04:37:96:b0:c2:c5:1c:1d:db:c9:91:25:
a0:c8:53:98:10:e3:0e:64:e9:9b:b6:c4:be:c5:74:
67:86:ee:77:d2:a5:20:69:61:b3:19:c5:3f:28:64:
0b:5d:8b:e3:3c:6d:d6:c3:bf:f7:42:9a:36:f1:0d:
3a:f7:88:6b:46:6c:e5:2c:6b:7a:a7:ad:0b:9d:2d:
e0:c1:12:3c:86:0d:38:d0:51:fd:04:e1:84:12:71:
eb:2b:50:1b:02:30:d6:82:52:8c:23:57:f2:b8:b1:
4c:e4:f7:6a:b3:ba:d3:6c:68:f0:15:cb:2e:3d:e2:
4d:d7:04:7e:91:aa:5d:61:8a:b1:8e:cc:e0:fe:82:
4d:07:bf:2f:ab:8a:60:cc:e0:63:eb:ec:7c:db:71:
ae:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:03:4D:54:F4:23:F6:CD:13:A6:8F:A6:D8:FD:65:34:DE:EA:E0:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.e15f.net/repo/MISAKA-RPKI/11
RPKI Manifest - URI:rsync://rpki-rsync.e15f.net/repo/MISAKA-RPKI/11/AC034D54F423F6CD13A68FA6D8FD6534DEEAE0A3.mft
RPKI Notify - URI:https://rpki.e15f.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.3.0/24
IPv6:
2a12:1700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57225
Signature Algorithm: sha256WithRSAEncryption
22:2c:52:67:f9:01:6f:a5:75:83:f1:c8:12:aa:d9:40:56:a2:
0f:35:7b:4d:72:0b:39:27:f3:8c:2a:7e:4d:45:24:91:56:17:
f2:56:56:79:5c:82:d9:ea:3c:41:e1:42:a7:f0:b0:ab:51:ab:
4f:48:ae:cf:0f:c7:72:4a:dd:81:68:e1:9b:5d:ff:cc:26:db:
91:09:ad:a7:55:56:8f:5d:ce:80:59:63:df:64:34:65:91:e9:
e8:6b:77:f9:0c:4c:5f:d7:e5:19:3f:89:ce:ac:b0:ed:74:e0:
a0:31:8a:7c:8c:34:39:4f:9f:e9:d6:1f:f0:f6:ca:b0:b9:1a:
43:34:e1:7c:74:1a:20:12:e4:ad:67:1c:8c:9f:a3:31:d1:59:
75:0f:ef:15:b3:e9:02:86:ec:66:e8:b3:8b:a5:77:0f:19:bf:
1f:dc:a2:66:e8:41:e6:6d:89:d3:ac:8d:bb:cd:80:8a:82:e8:
f1:47:c8:ec:ff:3e:fa:8c:32:57:49:cf:76:a2:d7:6b:59:f3:
b9:68:f2:b1:4f:7e:a5:8f:74:d7:e0:46:ae:48:ce:6c:18:2c:
0b:79:0a:c0:97:c6:6b:07:b9:d5:0d:d6:f4:cf:e0:96:6f:e3:
8b:65:e7:f9:30:f7:05:79:26:4f:e9:94:9e:ea:9a:89:ff:36:
98:36:f6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:01 2024 by rpki-client on console-fra.rpki-client.org