Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/shryEV-zlt6C2X9tQxvbHUikzo8.cer
File: shryEV-zlt6C2X9tQxvbHUikzo8.cer (raw, json)
Hash identifier: 9j1jhd92w3dpZ+qHoBig5mu7SeayPtOWt69ypQ1gkAs=
Subject key identifier: B2:1A:F2:11:5F:B3:96:DE:82:D9:7F:6D:43:1B:DB:1D:48:A4:CE:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AA4A913AB7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/a92626-8c93-437f-934c-28ea1ac7968a/1/shryEV-zlt6C2X9tQxvbHUikzo8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/a92626-8c93-437f-934c-28ea1ac7968a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:06:55 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 213291
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 731395472055 (0xaa4a913ab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:06:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b21af2115fb396de82d97f6d431bdb1d48a4ce8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4d:3f:cf:c8:1c:88:1a:57:b1:27:90:62:9a:
bf:17:f8:eb:5d:31:70:92:f5:fa:24:e2:2a:e1:9a:
ac:df:cc:84:44:19:b8:eb:bc:2f:54:c3:af:4a:36:
dd:a6:6e:b6:96:7e:9d:7a:69:f3:46:1d:c3:12:ce:
c7:9c:e8:7f:b6:2c:8b:0b:a2:79:35:10:9e:1b:b5:
42:83:16:b7:9f:82:df:9b:ce:0a:1c:7e:a2:0c:20:
35:29:77:ae:77:2e:d1:b3:18:a5:4e:fd:b9:da:67:
48:f8:df:4a:06:ef:6a:29:29:c0:70:fa:bf:4d:9f:
45:9e:8d:e8:e5:8d:1e:4c:43:07:4e:ed:ba:ab:87:
92:bf:a1:9c:9c:e3:5f:b7:66:97:79:f3:62:f9:80:
0c:51:9f:07:81:2d:82:95:73:e9:5a:d3:7a:3b:22:
e4:aa:79:20:da:aa:d9:08:33:0c:9c:d9:88:75:34:
77:ce:c8:20:de:3b:0a:ba:32:e1:8d:c5:1d:d4:e3:
3f:c0:1b:24:8e:97:b7:62:de:92:83:88:9f:f7:2d:
cd:24:c6:28:8c:de:87:d5:70:84:85:db:74:e9:c3:
81:ac:9d:fb:2c:d6:58:84:9f:cf:1c:a4:4e:bd:83:
2d:cf:5b:21:24:f0:ce:c7:15:db:6b:06:49:92:71:
e9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1A:F2:11:5F:B3:96:DE:82:D9:7F:6D:43:1B:DB:1D:48:A4:CE:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a92626-8c93-437f-934c-28ea1ac7968a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a92626-8c93-437f-934c-28ea1ac7968a/1/shryEV-zlt6C2X9tQxvbHUikzo8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213291
Signature Algorithm: sha256WithRSAEncryption
23:8e:5e:dc:5c:6b:9e:0b:a2:61:78:59:2e:18:85:1d:9b:50:
8d:ce:36:fa:35:4e:42:32:e7:d4:21:0e:0e:5c:9a:13:67:16:
93:66:3a:8d:8e:e5:d8:95:db:6f:71:67:a6:24:a0:8c:40:88:
5e:8e:d9:02:9c:5e:db:9b:a9:ce:61:bd:0b:93:3b:47:cc:85:
78:bc:73:00:86:cc:ea:04:e8:99:06:8d:3b:9d:4d:96:5b:40:
aa:64:d6:5a:65:98:15:27:b6:73:0c:a5:a3:41:5f:13:59:5d:
5f:ce:56:f7:6a:97:10:a2:b9:a5:a4:e0:24:c5:7d:6a:cf:d9:
7b:fa:52:af:a7:72:cd:05:c3:fc:81:f0:36:3d:30:e4:e0:95:
7a:9c:26:6b:3a:53:82:0a:75:42:8e:0f:e4:70:9b:bd:b5:0f:
3d:ab:db:b2:ce:b0:b1:2f:fd:15:64:a9:ac:50:a4:fb:f2:3f:
f3:9b:53:e7:3e:78:43:67:75:96:04:20:e2:a7:d0:b9:9f:48:
26:71:99:f7:5e:e8:3e:2d:73:8e:ef:20:69:83:10:24:57:06:
ff:71:de:af:98:e3:52:7d:e3:20:00:d1:1d:27:6a:82:eb:b6:
9f:90:8c:b9:e4:75:5c:a7:fe:7a:6c:b6:de:d5:07:9c:b4:c2:
e3:9b:60:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:55 2024 by rpki-client on console-ams.rpki-client.org