Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s6SLG0ypEO4LpVMIX-Br_t9cKAE.cer
File: s6SLG0ypEO4LpVMIX-Br_t9cKAE.cer (raw, json)
Hash identifier: OmluKYqFPIp7RPcA81Ss8mXTu2oKamc/RGMoQAlGbXk=
Subject key identifier: B3:A4:8B:1B:4C:A9:10:EE:0B:A5:53:08:5F:E0:6B:FE:DF:5C:28:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: ACFA2E7FC2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/a75983-347b-4f86-bf5e-68e0bcfd7629/1/s6SLG0ypEO4LpVMIX-Br_t9cKAE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/a75983-347b-4f86-bf5e-68e0bcfd7629/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 04 Feb 2022 19:08:35 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 212799
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 742931726274 (0xacfa2e7fc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 4 19:08:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3a48b1b4ca910ee0ba553085fe06bfedf5c2801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:68:c1:ed:53:73:46:0d:8e:0d:cd:1b:80:
4f:10:c9:19:6f:4b:72:ca:3b:d0:f9:dc:ca:0a:ac:
7a:7b:e6:1f:d5:dd:ec:79:78:04:31:a9:cd:48:4f:
09:95:54:8a:d2:65:83:06:63:36:27:48:c4:9c:e7:
74:db:7e:03:d7:c1:c0:9b:c3:3d:b4:e6:73:67:78:
1e:a5:e3:76:10:d9:6d:4d:9d:64:ad:73:03:3f:09:
00:19:07:e6:2f:e8:fa:29:bb:f7:6d:b5:8a:00:5b:
f9:70:09:45:9d:db:dd:2c:8f:c3:07:35:f3:dc:a4:
c9:bb:4e:6b:c6:e5:dd:1d:02:5c:d5:bd:9a:40:4d:
bf:49:ff:78:49:60:7b:e1:2a:7d:24:f6:bb:c9:6e:
90:99:e2:ca:ab:73:82:1c:ae:a3:fe:c0:7f:86:93:
20:e5:5b:8e:6a:44:0e:fd:10:fe:b0:53:cb:af:57:
7e:f1:2c:50:f6:7e:36:48:5a:82:b3:2d:e8:93:f1:
2c:8d:96:fc:ef:ac:82:7d:67:da:18:41:3b:c1:40:
11:29:f3:88:3f:59:62:14:74:9e:90:da:f2:4d:31:
03:91:97:0a:b0:62:23:70:c8:2b:71:56:52:05:28:
48:65:7c:f3:2d:24:ce:68:11:2e:e5:99:42:83:97:
11:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A4:8B:1B:4C:A9:10:EE:0B:A5:53:08:5F:E0:6B:FE:DF:5C:28:01
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a75983-347b-4f86-bf5e-68e0bcfd7629/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a75983-347b-4f86-bf5e-68e0bcfd7629/1/s6SLG0ypEO4LpVMIX-Br_t9cKAE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212799
Signature Algorithm: sha256WithRSAEncryption
43:cd:09:ad:e6:75:45:82:af:18:1e:1b:1b:49:e5:66:d8:27:
02:0b:dc:e5:2d:5c:42:3d:2a:53:14:fa:63:96:fd:33:65:e8:
8f:28:01:30:c5:9f:ac:e6:90:ed:84:7e:5f:ac:34:74:f3:b8:
97:20:ad:16:ba:b4:f4:8c:81:fc:df:0e:00:59:fb:2a:67:ce:
f9:ab:f4:22:82:17:fe:0e:90:b6:42:00:4f:c7:e3:d3:24:57:
06:24:59:ad:2d:24:fa:e8:32:ee:3e:3e:86:af:41:0b:0d:b0:
8a:d7:cc:07:3e:ab:f7:80:aa:26:77:82:5a:33:14:3e:ae:f1:
e3:69:fa:87:87:14:87:57:b9:97:ea:3e:33:9c:c4:58:59:29:
70:0a:49:2d:54:68:7a:0c:15:ae:51:4f:f6:f0:ec:60:dc:70:
86:16:01:52:a2:f5:17:d6:c5:41:f8:24:ee:11:56:19:09:75:
47:93:1c:07:24:60:e3:db:37:7c:c7:5d:92:b2:a3:4f:c9:d2:
2c:51:75:9b:f3:d1:ca:51:ea:45:4b:ff:d5:2e:9c:1c:e1:c8:
2d:e1:72:05:01:86:ab:81:45:6f:6f:36:fd:76:6b:a4:1f:ae:
50:73:07:bd:ab:b1:5c:62:69:49:e2:d2:27:2e:de:a9:0a:9e:
98:5d:09:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:46 2024 by rpki-client on console-ams.rpki-client.org