Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rahWm0xp2t4r7soPiV37XGggVIY.cer
File: rahWm0xp2t4r7soPiV37XGggVIY.cer (raw, json)
Hash identifier: /Oqi9UC2jOjw7MyiIvzuTCblMRiNjC/T9vE1+GG7pXA=
Subject key identifier: AD:A8:56:9B:4C:69:DA:DE:2B:EE:CA:0F:89:5D:FB:5C:68:20:54:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A0A9E5A9EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/41bbb3-677b-4707-8e14-1d24d7e110b7/1/rahWm0xp2t4r7soPiV37XGggVIY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/41bbb3-677b-4707-8e14-1d24d7e110b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 06:59:53 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 49375
IP: 45.85.60.0/22
IP: 178.17.240.0/20
IP: 188.94.40.0/21
IP: 2a02:1648::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 690045168111 (0xa0a9e5a9ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:59:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ada8569b4c69dade2beeca0f895dfb5c68205486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:70:de:9d:58:43:9e:e1:32:8d:93:9a:ed:a6:
62:a0:cb:2e:ec:5c:f0:06:05:2d:07:63:90:bd:5c:
b7:d8:48:7a:8d:55:a3:26:c2:ee:72:de:4d:db:0b:
e3:76:9e:1f:34:36:62:3b:df:db:4a:a6:70:49:41:
a5:9d:dc:4e:53:01:44:2f:d9:7e:42:7a:98:bc:25:
af:2b:fc:2e:4a:99:45:c4:fc:ec:c9:f5:ab:0d:ed:
e5:65:69:49:5f:8f:4c:3d:d3:ce:80:4a:b4:37:33:
9c:7d:32:5f:9d:20:19:80:81:7b:6f:5b:72:dd:af:
17:83:c8:18:16:96:4d:19:1a:57:c6:28:65:f5:22:
cf:e2:7d:57:5c:2c:3a:8d:66:52:84:a2:88:e3:27:
00:34:41:a1:33:78:3c:93:0a:87:63:a7:c6:9a:21:
ae:f0:2d:b7:e9:d5:f8:27:55:1a:99:1b:e9:02:7b:
7e:be:21:c9:29:c6:af:f1:69:a2:86:6f:d8:3a:d0:
c6:95:f5:02:6b:7c:b8:e7:14:97:60:a5:ff:0b:ab:
2c:0b:56:87:4a:18:da:3e:7e:02:1e:e4:7c:6e:c2:
f8:28:b5:09:39:b6:1b:2e:ef:c3:a8:f0:d6:24:60:
ff:a3:e8:c7:3a:91:19:d6:24:15:d9:24:8e:cb:29:
bb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A8:56:9B:4C:69:DA:DE:2B:EE:CA:0F:89:5D:FB:5C:68:20:54:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/41bbb3-677b-4707-8e14-1d24d7e110b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/41bbb3-677b-4707-8e14-1d24d7e110b7/1/rahWm0xp2t4r7soPiV37XGggVIY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.60.0/22
178.17.240.0/20
188.94.40.0/21
IPv6:
2a02:1648::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49375
Signature Algorithm: sha256WithRSAEncryption
5b:0b:76:72:43:2a:3d:88:23:1b:58:04:25:ac:53:c0:64:61:
84:a0:68:a7:0d:6e:b4:f1:f0:fd:23:cf:e4:ac:3f:b9:99:f6:
20:4d:c6:3b:5f:ec:85:c5:97:8a:08:25:ac:84:a4:14:20:29:
2b:89:4b:da:38:93:4f:cf:b6:5f:91:81:49:40:3f:f8:c3:06:
d5:b4:90:4f:67:95:05:36:55:64:4c:23:ad:a0:c3:08:57:06:
da:65:ce:2f:48:44:05:e9:c1:b5:b8:a5:99:3d:a6:62:76:49:
7f:48:32:59:f2:64:eb:3f:85:7e:c7:ea:88:21:2d:96:45:f4:
22:71:22:d1:6f:d6:16:0b:31:c6:59:59:46:e6:a8:37:d3:84:
ff:f2:e7:05:fe:42:3c:7c:9f:6b:89:47:10:43:d1:e2:7e:d7:
a9:36:f4:5c:d6:f8:31:a6:cb:a7:9f:20:1e:fa:90:f9:64:f6:
1f:0a:ca:30:d4:f6:89:44:17:c8:17:37:f5:28:0a:3b:e1:79:
67:d0:fe:a3:55:9a:f2:27:1a:35:4a:82:b0:fa:7c:a9:9d:c9:
47:aa:cd:1a:51:4b:e7:02:60:03:3d:96:80:24:cb:d2:eb:68:
e7:e6:6f:dd:de:aa:a6:a9:ee:d7:f6:bd:81:18:2d:c4:30:f1:
fc:33:ad:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:04 2024 by rpki-client on console-fra.rpki-client.org