Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sZ3mba7YLgFQgFrDDN65UteJwKU.cer
File: sZ3mba7YLgFQgFrDDN65UteJwKU.cer (raw, json)
Hash identifier: Qhwt5Hzt5M1JKbSXNUCgTnzCbeHQ3PpMeJEnuYxlHUw=
Subject key identifier: B1:9D:E6:6D:AE:D8:2E:01:50:80:5A:C3:0C:DE:B9:52:D7:89:C0:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A8C942CD6D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/0c839d-6179-4b5f-b2a6-49736b88345a/1/sZ3mba7YLgFQgFrDDN65UteJwKU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/0c839d-6179-4b5f-b2a6-49736b88345a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:04:15 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 56469
IP: 185.131.204.0/22
IP: 2a06:de00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 724931104109 (0xa8c942cd6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:04:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b19de66daed82e0150805ac30cdeb952d789c0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6f:b2:2d:0d:b0:17:b6:61:70:5e:81:15:9e:
46:92:64:6e:1b:8e:2d:b0:0f:f6:1d:58:82:63:ec:
fa:b9:55:6e:cc:2e:51:80:68:61:c1:bd:8c:00:c9:
1b:cb:d5:3c:8f:15:58:ef:33:17:91:24:9b:05:ea:
e1:eb:66:56:08:13:28:de:f6:c2:19:f4:c0:3d:62:
2e:0e:88:fc:52:be:1e:e4:be:b9:d4:53:02:b3:64:
d2:ca:75:6c:57:19:29:44:b3:80:9f:4d:5c:7c:d3:
ad:79:eb:ae:cd:ea:35:e2:d5:e3:4a:02:1b:f8:1e:
f9:f1:cf:98:d0:85:33:4d:db:27:86:89:91:3f:7a:
95:8b:04:0c:6e:9e:b8:f7:6b:00:ab:c9:a0:03:c2:
2c:22:45:76:26:89:74:7c:95:d2:62:ae:e0:d9:64:
9a:d9:ed:df:bb:3b:b3:af:7a:20:03:99:d2:d9:90:
9d:e5:6f:48:8c:27:ff:d1:8d:a1:81:57:f8:e2:bb:
e5:a5:ed:9d:71:d5:fd:44:7d:67:3f:c7:c2:77:cc:
01:09:be:5e:78:c3:38:67:23:01:e2:73:e2:36:ef:
19:d1:6f:7b:38:28:cf:92:b4:72:61:de:78:17:ae:
f7:c1:43:6f:20:06:ba:ad:e6:ef:25:7c:ea:88:4d:
96:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9D:E6:6D:AE:D8:2E:01:50:80:5A:C3:0C:DE:B9:52:D7:89:C0:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0c839d-6179-4b5f-b2a6-49736b88345a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0c839d-6179-4b5f-b2a6-49736b88345a/1/sZ3mba7YLgFQgFrDDN65UteJwKU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.204.0/22
IPv6:
2a06:de00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56469
Signature Algorithm: sha256WithRSAEncryption
0a:75:44:1c:b5:c6:43:e9:1f:01:65:e3:6a:c0:6b:71:a6:cd:
fb:f7:65:5a:a8:55:a0:f3:65:79:cb:c2:c1:00:94:9e:22:c4:
40:f7:1e:49:c1:60:8c:31:eb:6a:b2:5c:d6:a3:fc:49:eb:98:
62:74:fe:cc:ed:2c:4d:de:e6:dd:a3:dd:4e:3f:24:54:a9:94:
b6:ed:0d:2e:bd:e4:64:e8:32:6a:57:2a:92:5c:69:bb:c2:9f:
3f:52:ca:cc:22:90:b9:a4:4e:fe:47:b0:6f:41:b5:59:78:d1:
1c:fd:e6:db:73:b0:61:2b:31:e5:0d:c4:0c:3b:32:bf:18:ba:
02:3c:50:03:27:db:d1:57:bf:d5:d9:ce:b7:89:fe:c3:1e:10:
cd:0d:61:05:43:d8:d0:d5:8b:ed:21:8e:2d:bd:ce:a4:44:d4:
48:f9:69:92:d3:da:91:dd:53:56:3d:79:fc:32:0a:52:42:56:
97:09:39:76:2e:0e:e1:d2:d8:39:f4:09:00:36:62:27:dd:56:
ce:64:5f:5f:eb:03:3c:31:f8:6f:9d:b5:ea:99:d3:2f:54:45:
e4:39:93:da:15:27:9a:08:b3:ff:78:a5:ef:d4:71:43:59:9e:
d3:00:73:35:68:02:7f:b4:48:5c:14:26:8b:93:f2:47:45:e6:
cc:50:6b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:14 2024 by rpki-client on console-fra.rpki-client.org