Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ryXc0VADhTlV_CMct0v7weyVHwc.cer
File: ryXc0VADhTlV_CMct0v7weyVHwc.cer (raw, json)
Hash identifier: Nej+vH9O8yH3eq0YEmdb0ohyq6ftEpVEFX+pwbcs0jU=
Subject key identifier: AF:25:DC:D1:50:03:85:39:55:FC:23:1C:B7:4B:FB:C1:EC:95:1F:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A6910FB909
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5702a-5f3e-45f7-a85f-fb093296e70f/1/ryXc0VADhTlV_CMct0v7weyVHwc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5702a-5f3e-45f7-a85f-fb093296e70f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:03:53 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 58212
IP: 176.96.136.0/22
IP: 193.41.226.0/24
IP: 193.41.237.0/24
IP: 193.42.11.0 -- 193.42.12.255
IP: 2a0d:5940::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 715398297865 (0xa6910fb909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:03:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af25dcd15003853955fc231cb74bfbc1ec951f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b4:7f:49:7d:8e:fc:02:fb:5b:ef:d6:e5:f8:
fa:17:9f:59:e1:e4:48:28:02:5f:7f:db:69:53:1e:
2d:d4:c6:9b:a9:53:c0:8c:f1:2f:cc:4e:74:ae:53:
10:08:76:50:94:74:ed:4c:89:fc:84:a3:ab:88:0a:
5f:9f:57:02:da:a6:aa:41:5a:48:3b:6a:96:a7:b1:
a8:ce:be:80:fe:01:b0:c4:fc:e6:56:3a:0d:93:bc:
10:7c:76:61:f8:d1:c7:05:53:4c:93:59:eb:63:80:
e9:9e:8f:bc:c2:0c:45:2a:4f:d2:a3:13:9d:a6:4d:
5d:62:bd:fa:83:b6:aa:ce:78:3e:e4:76:36:69:dc:
16:1a:07:c5:c3:0d:03:16:3a:54:7f:3a:2d:eb:21:
bb:d9:3c:ff:21:ca:7d:fe:23:d6:78:56:c7:23:a0:
2f:6a:79:74:b8:0a:d1:6c:13:b1:6b:73:0a:f8:04:
86:fb:0f:5b:2a:f7:38:f8:5e:42:0e:9f:e8:18:7f:
5a:31:c1:ce:ee:e5:d5:ee:22:a9:50:ec:6d:7d:c7:
9b:1b:41:38:9a:42:91:4f:e6:ec:e7:e1:49:db:96:
a7:ec:ce:9e:b6:b0:17:18:7b:25:3b:b1:4b:8b:5d:
4f:14:25:58:c1:94:22:f6:9c:89:48:ec:a9:28:ed:
ea:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:25:DC:D1:50:03:85:39:55:FC:23:1C:B7:4B:FB:C1:EC:95:1F:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5702a-5f3e-45f7-a85f-fb093296e70f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5702a-5f3e-45f7-a85f-fb093296e70f/1/ryXc0VADhTlV_CMct0v7weyVHwc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.96.136.0/22
193.41.226.0/24
193.41.237.0/24
193.42.11.0-193.42.12.255
IPv6:
2a0d:5940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58212
Signature Algorithm: sha256WithRSAEncryption
1f:a4:65:02:c5:7e:a6:5b:a6:e3:c5:cd:ab:5c:18:ca:ee:c6:
b5:e2:9f:05:7f:fa:94:b3:01:2a:f0:76:5b:6b:11:70:92:49:
27:c6:cb:54:d1:44:74:fa:46:0e:83:09:e0:61:36:08:70:89:
a8:70:84:f4:37:95:a2:3f:8f:a8:69:29:c7:3f:b7:64:49:0e:
6d:2b:69:2a:88:c4:26:6f:af:1f:4b:7c:85:f1:0f:9a:28:d9:
18:05:2e:cc:40:ac:de:f5:ee:e9:60:18:9c:9c:8a:eb:30:2e:
27:34:ca:70:77:21:1e:5a:ff:76:c6:da:d8:9e:85:2f:f4:f2:
3b:96:89:79:2b:67:69:6d:27:af:3e:4e:48:ff:a1:7b:4e:4a:
57:2d:fd:f8:79:35:5c:fb:2f:35:8a:97:76:15:f0:7c:13:e6:
19:ae:6a:ca:11:46:be:e1:da:a8:0c:ac:92:60:70:b0:f6:b4:
9a:69:70:5b:b3:76:4e:c5:14:bd:40:6b:f4:e3:7a:dc:1c:10:
03:21:92:e7:59:54:23:6f:eb:d3:0c:13:2d:53:33:bb:23:26:
bc:d3:83:0a:0d:ed:84:40:2e:b7:49:87:84:c3:56:b5:de:ba:
a8:7d:c1:c2:4a:8c:8b:7e:b0:45:08:e8:b1:7d:ae:3a:a8:e0:
f4:c8:25:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:09 2024 by rpki-client on console-fra.rpki-client.org