Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tEtlIaT5JqOUnfCrLGbyuIp8qxo.cer
File: tEtlIaT5JqOUnfCrLGbyuIp8qxo.cer (raw, json)
Hash identifier: 2i6nO6SuU1cDmYr3cuC40j+zeWE38N+4oek8zJfiBNw=
Subject key identifier: B4:4B:65:21:A4:F9:26:A3:94:9D:F0:AB:2C:66:F2:B8:8A:7C:AB:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A4EBED775C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/06cb38-3d3f-4075-9b8d-4a6f8836eb46/1/tEtlIaT5JqOUnfCrLGbyuIp8qxo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/06cb38-3d3f-4075-9b8d-4a6f8836eb46/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:56:46 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 48345
AS: 198446
IP: 91.223.220.0/24
IP: 91.234.215.0/24
IP: 94.232.112.0/21
IP: 2001:67c:174::/48
IP: 2001:67c:15b8::/48
IP: 2001:67c:28d8::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 708332844892 (0xa4ebed775c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:56:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b44b6521a4f926a3949df0ab2c66f2b88a7cab1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:86:61:43:34:9f:bd:38:e4:f0:48:a4:a9:54:
6d:45:6b:95:49:b0:d0:9f:12:04:7a:b3:ae:f5:97:
66:43:27:54:a9:d8:b8:9c:e8:43:d3:ef:39:c2:7b:
ad:f7:8e:de:5a:ec:70:61:e0:f8:fa:35:12:09:b2:
0c:e6:01:b0:2d:4c:81:7e:4f:ab:3d:2a:b6:41:fe:
dd:ae:34:89:29:2b:da:d5:d3:25:ec:2a:c0:eb:b0:
1d:2e:02:7c:f4:36:92:7b:30:a6:cd:46:8c:66:ed:
43:f6:e6:d4:9f:ba:58:34:8b:ce:9c:f7:56:2f:af:
1d:af:e6:e8:6f:a3:c6:87:9a:56:57:06:e9:f7:8e:
d5:5a:3c:c3:8c:5c:02:08:cc:fa:37:66:94:37:f6:
de:b5:9e:d8:df:dc:28:92:27:91:8b:17:57:35:00:
82:8c:92:ab:66:62:2d:94:76:95:c7:aa:01:2f:e2:
45:02:56:69:73:81:d8:e9:00:cf:1e:75:9c:c4:b3:
42:c9:f1:ad:bb:a5:c9:9a:0e:d2:02:bd:a4:4f:56:
0e:b0:b0:aa:79:ad:f2:07:72:c5:82:d4:15:81:aa:
8a:86:d8:38:a8:5b:ce:60:ce:6e:fa:5f:ba:9d:32:
dc:00:a6:6b:90:f6:1a:f6:fd:d2:c7:35:b5:be:86:
2e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4B:65:21:A4:F9:26:A3:94:9D:F0:AB:2C:66:F2:B8:8A:7C:AB:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/06cb38-3d3f-4075-9b8d-4a6f8836eb46/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/06cb38-3d3f-4075-9b8d-4a6f8836eb46/1/tEtlIaT5JqOUnfCrLGbyuIp8qxo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.220.0/24
91.234.215.0/24
94.232.112.0/21
IPv6:
2001:67c:174::/48
2001:67c:15b8::/48
2001:67c:28d8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48345
198446
Signature Algorithm: sha256WithRSAEncryption
48:9d:41:1a:a6:46:a9:40:7f:48:af:6f:04:76:9c:11:78:47:
70:07:96:c6:c5:7c:c5:e7:e7:0b:a2:6a:e1:8a:a3:99:c0:a3:
79:a2:a8:b5:03:43:d3:d5:9e:e1:c2:fd:8c:06:30:34:96:41:
1f:25:62:69:b3:c1:4c:01:2a:de:cd:37:ed:03:d9:9e:86:f5:
1f:7f:ed:9a:d2:bd:01:de:60:a1:45:8a:0f:c4:3a:66:1a:f3:
a7:fc:6c:50:db:ec:61:7d:02:ab:cf:00:31:9b:20:4a:a7:19:
c8:d8:d7:e7:9a:63:8e:05:f6:38:77:69:f3:c6:4f:91:eb:2c:
fb:07:aa:cb:f8:49:85:31:0f:43:39:ac:90:08:a6:af:33:5c:
f8:d3:6c:96:eb:4a:19:a2:43:26:dd:93:b7:d1:aa:33:0f:87:
be:94:4a:42:d0:1e:3e:58:5e:33:43:9d:89:33:f5:8a:08:8e:
3a:ca:0c:63:f1:34:8d:5b:51:df:f6:de:3a:8f:75:dc:a8:30:
78:54:db:56:d8:58:87:d9:35:ae:1a:68:8f:e4:f9:e7:75:f4:
5f:bf:73:4b:f2:34:59:33:e8:bb:93:d3:68:9b:86:17:94:3f:
62:fd:0b:65:d4:31:da:40:a3:be:d7:9a:c9:90:98:25:0e:c0:
d8:77:d5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:01 2024 by rpki-client on console-ams.rpki-client.org