Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sSyuziPGrfaRcDkpPiW6qpBs5VY.cer
File: sSyuziPGrfaRcDkpPiW6qpBs5VY.cer (raw, json)
Hash identifier: 0u+4u9A/0x4Nw6dPXxQiC6JX/68uonRz+FkAL55Rw9s=
Subject key identifier: B1:2C:AE:CE:23:C6:AD:F6:91:70:39:29:3E:25:BA:AA:90:6C:E5:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9A3464F001
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/sSyuziPGrfaRcDkpPiW6qpBs5VY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:52:53 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 43561
IP: 37.157.136.0/21
IP: 37.157.160.0/19
IP: 46.249.64.0/19
IP: 84.40.64.0/18
IP: 95.87.192.0/18
IP: 185.60.64.0/22
IP: 2a02:1338::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662303993857 (0x9a3464f001)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:52:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b12caece23c6adf6917039293e25baaa906ce556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:7a:fc:08:42:33:31:53:3e:d4:11:d9:b0:
64:5b:36:42:97:c1:ca:c2:ef:46:b5:b7:81:d9:0e:
fe:f6:b6:76:2c:00:2b:21:0d:0b:25:78:7e:c7:a9:
60:8a:b2:d6:09:93:f2:0e:9a:aa:96:b5:4c:92:35:
75:cc:36:90:80:02:dc:83:03:11:0c:07:ae:a0:9e:
ba:69:52:8a:48:73:d8:dc:f5:86:4f:7d:bf:1c:25:
13:bf:71:a6:b3:0d:cb:0f:a7:07:ad:95:4b:45:0a:
11:4b:9c:df:c6:df:3b:0f:65:cd:62:b9:78:1b:a1:
57:df:75:ee:74:74:21:9e:3a:c8:78:9d:b5:aa:36:
13:cc:e1:07:71:23:bd:98:bf:03:cf:7b:df:43:eb:
37:47:53:5f:58:64:8c:62:3e:24:14:ff:a6:73:05:
c0:a8:c9:19:ac:df:7c:94:eb:89:ac:60:81:77:7f:
43:a1:ca:10:a0:61:a4:11:a3:ee:07:a2:1f:1d:5f:
75:f0:f6:cf:94:e6:f2:83:b0:1f:57:5a:ee:0a:fd:
d3:a9:30:fa:5e:bb:90:46:6f:1b:13:a7:b2:83:99:
33:0b:3b:be:6c:28:de:35:29:d4:aa:8d:88:f0:21:
23:28:34:95:81:65:d0:8b:48:0b:bd:87:a0:d0:64:
c3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2C:AE:CE:23:C6:AD:F6:91:70:39:29:3E:25:BA:AA:90:6C:E5:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/sSyuziPGrfaRcDkpPiW6qpBs5VY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.136.0/21
37.157.160.0/19
46.249.64.0/19
84.40.64.0/18
95.87.192.0/18
185.60.64.0/22
IPv6:
2a02:1338::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43561
Signature Algorithm: sha256WithRSAEncryption
43:9a:d9:0b:d2:fc:07:4e:42:2e:3c:da:7b:25:5d:b3:f8:9e:
9d:43:02:ca:17:32:07:8e:50:a9:d2:6e:f3:08:9a:eb:ff:d1:
a0:03:ca:a1:5b:d7:22:70:da:28:8e:cc:ca:c1:f0:ee:69:2a:
61:45:c9:e4:b2:ee:e3:a7:0d:77:64:73:6c:aa:fa:2b:c0:0d:
09:40:03:c4:c3:91:fc:f3:dd:89:8b:70:e7:85:d4:af:c3:d6:
d1:81:2a:e1:d2:76:8b:fe:09:e6:01:80:03:09:fc:b8:a1:8e:
52:ec:69:c6:fa:d7:b2:41:4b:09:c4:81:67:39:9a:05:d5:f9:
5f:6f:53:c6:42:e8:03:82:f8:28:80:22:0e:36:78:e6:a8:9d:
7c:f2:bd:b4:db:0a:f5:18:0f:3f:a8:14:22:36:ef:a4:87:ed:
9c:01:16:0f:23:6c:04:aa:0a:81:55:76:ec:c1:c9:16:3f:d2:
d6:5c:ab:f3:18:45:b3:21:ea:a3:de:e5:35:c0:44:27:9a:17:
fb:64:2a:b0:e9:48:1c:31:dc:04:15:01:80:6d:2d:33:da:38:
f1:1d:a0:04:bd:dd:5c:65:a1:d0:60:4f:c8:24:8d:c8:c1:1e:
9b:93:16:35:dc:63:50:ed:28:23:1e:f0:fb:12:04:6b:36:1d:
c8:09:ce:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:52 2024 by rpki-client on console-ams.rpki-client.org