Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rcLa3Zc5AHCvcH-mwjItNreOIAg.cer
File: rcLa3Zc5AHCvcH-mwjItNreOIAg.cer (raw, json)
Hash identifier: 6qWHaGPwZ0CK/1XzWLqIohAPYUapjuNT11t7xzo0LHM=
Subject key identifier: AD:C2:DA:DD:97:39:00:70:AF:70:7F:A6:C2:32:2D:36:B7:8E:20:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 99FCCF25AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/a8f1e9-6e36-4306-aec1-1f36c453f31b/1/rcLa3Zc5AHCvcH-mwjItNreOIAg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/a8f1e9-6e36-4306-aec1-1f36c453f31b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:50:54 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 51086
IP: 194.28.240.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661371430317 (0x99fccf25ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:50:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=adc2dadd97390070af707fa6c2322d36b78e2008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2a:62:8d:5b:3c:28:97:40:ca:b7:63:08:c8:
5e:92:64:8c:3c:7b:7a:75:e2:fc:ae:89:40:e3:a7:
91:f7:70:a0:9c:83:f6:64:b8:5f:98:c1:58:f6:43:
25:55:40:6d:9a:3a:1d:a6:9d:5c:aa:6e:e3:97:20:
4b:b9:75:f9:97:69:37:02:20:2b:b4:80:47:de:00:
88:19:1b:45:2e:38:fc:46:65:5d:3d:fe:b5:93:4e:
a3:55:78:d4:15:d0:e6:e8:35:1e:fb:ff:a0:3f:aa:
7b:09:bf:a1:6d:f2:10:e8:96:e9:81:3d:17:85:54:
08:0d:a1:23:d5:d5:28:05:b6:cf:36:ed:a6:d0:b7:
41:47:9e:a5:15:8c:57:68:74:e2:2b:e4:42:6a:90:
c0:c6:b2:f9:98:33:68:42:db:ec:84:b2:d8:b3:a4:
52:7b:a6:c5:39:70:d6:2e:47:f3:45:aa:38:67:34:
52:c2:13:79:6b:13:2f:03:1c:28:3b:d2:4d:d4:86:
5c:6f:d5:4d:18:9e:cd:8c:81:55:ff:57:1e:f0:26:
0c:a9:0e:c3:7a:dc:f8:ac:df:bc:f1:97:14:58:1d:
9c:2a:d2:8c:82:25:ac:d0:78:82:67:8b:86:0f:23:
1a:36:be:1d:bb:58:31:61:53:11:00:2e:2e:7b:26:
2d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C2:DA:DD:97:39:00:70:AF:70:7F:A6:C2:32:2D:36:B7:8E:20:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a8f1e9-6e36-4306-aec1-1f36c453f31b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a8f1e9-6e36-4306-aec1-1f36c453f31b/1/rcLa3Zc5AHCvcH-mwjItNreOIAg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.240.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51086
Signature Algorithm: sha256WithRSAEncryption
65:35:a1:ee:3e:ac:f6:47:83:1b:3e:0a:ab:52:11:4f:42:88:
43:18:cd:f7:68:d3:aa:0b:86:3c:8b:9b:d6:3a:d2:d2:ba:5c:
c4:a3:e6:f8:7d:29:9f:cd:ce:a8:ef:e3:22:11:6d:be:a5:6f:
88:96:68:76:81:87:3d:b4:f8:c9:03:3b:b4:85:6d:56:8a:5b:
6e:bd:f5:7c:db:1a:7d:e5:c6:ba:88:e0:7e:25:70:ea:93:3e:
fe:15:a8:4c:24:f5:ee:a7:bf:a8:22:31:12:c8:bd:5e:8b:44:
85:27:42:ef:c5:8e:70:f3:9f:0e:0c:c1:96:e0:95:c7:bd:8b:
9a:b5:71:b0:c1:40:7b:92:27:54:95:e2:66:1e:f7:e0:92:19:
95:67:bc:d7:0b:15:e4:a2:26:48:ab:d4:a5:71:cd:5a:8f:5d:
a5:44:f0:6b:ca:e7:28:9d:fe:60:15:fb:13:dd:e6:c7:34:96:
44:0f:a1:9d:26:f6:cd:b3:5b:4d:2a:89:c7:e4:dc:26:e2:1c:
6d:9c:8e:87:94:e5:12:14:a0:1e:cc:38:53:de:7b:e5:37:68:
75:1a:ea:46:45:07:a6:18:a9:1a:34:1f:ce:bb:41:2b:b9:70:
61:d1:62:50:d0:e6:c4:7d:84:fe:c6:e0:39:0c:35:04:08:a2:
92:59:64:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:05 2024 by rpki-client on console-fra.rpki-client.org