Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u_rxdDzgIqeIqIXOSvCpg42J5TY.cer
File: u_rxdDzgIqeIqIXOSvCpg42J5TY.cer (raw, json)
Hash identifier: ZOyM4SIcztB3OoqbxfA5gIeBaIG4j3Z8F7SL4KSgUB4=
Subject key identifier: BB:FA:F1:74:3C:E0:22:A7:88:A8:85:CE:4A:F0:A9:83:8D:89:E5:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A3E7CDC90A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/9ce818-ee21-4a2b-bcab-5a6ac8caaacc/1/u_rxdDzgIqeIqIXOSvCpg42J5TY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/9ce818-ee21-4a2b-bcab-5a6ac8caaacc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:58:35 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 196741
IP: 91.247.221.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 703968692490 (0xa3e7cdc90a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:58:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbfaf1743ce022a788a885ce4af0a9838d89e536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ca:a9:cf:43:b5:cd:10:41:9f:dc:41:f9:a6:
e9:4c:fa:55:98:d7:18:a8:06:ab:72:a0:2c:1c:2b:
21:22:b8:9b:52:87:5c:99:22:fd:3b:9d:88:9e:a0:
f8:28:dd:46:6f:5a:c7:0d:0b:77:c4:9a:d2:7a:98:
7a:42:40:62:80:15:21:bb:ef:57:8d:6b:bd:d8:a1:
38:7a:3f:ce:76:96:36:af:ea:4f:09:10:5f:70:8d:
7b:f0:6d:da:50:d7:1c:3f:49:c5:7a:1f:d2:2d:0d:
a4:84:f5:62:08:7e:2b:1f:e1:5a:9e:56:50:73:a0:
1d:0e:50:f2:b9:ff:81:3b:9d:f1:d5:a6:dc:0a:1f:
cc:3a:cb:3f:02:0e:48:ea:d1:05:29:3f:a4:c3:fd:
e0:17:ef:68:47:e1:1d:ab:6a:ec:92:f1:92:63:b0:
90:f7:3c:34:2b:85:50:ff:55:e2:ed:95:25:d9:a5:
89:77:7c:b0:fd:23:2a:42:5d:2c:3b:f6:3d:4c:11:
d2:d3:60:b5:36:fc:89:19:00:9f:90:ba:74:b5:44:
9b:79:71:81:bf:c5:a1:e3:07:cc:7c:f6:7e:dc:8e:
24:62:95:39:d9:f4:61:d5:ab:70:5c:39:99:9e:78:
51:d9:4f:10:a2:1f:fb:4f:01:5c:e1:3c:e0:2a:0f:
ea:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FA:F1:74:3C:E0:22:A7:88:A8:85:CE:4A:F0:A9:83:8D:89:E5:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9ce818-ee21-4a2b-bcab-5a6ac8caaacc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9ce818-ee21-4a2b-bcab-5a6ac8caaacc/1/u_rxdDzgIqeIqIXOSvCpg42J5TY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.221.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196741
Signature Algorithm: sha256WithRSAEncryption
a1:05:14:a8:a2:f5:a9:33:82:bb:6e:14:61:1b:30:72:f8:cf:
93:0a:83:83:34:32:5a:c1:0b:42:94:ac:de:dc:c5:a4:24:c9:
27:46:12:1f:6b:93:02:44:75:4a:83:7b:c8:6c:22:5d:92:66:
6d:ca:77:a2:af:fe:76:e6:20:16:24:c3:81:c3:3f:60:d5:d9:
61:90:7d:ec:d6:6c:ad:c0:ad:96:3b:fe:d2:4e:ef:49:b4:4f:
9c:cd:06:79:70:4b:26:a0:07:8b:e3:84:b1:59:9e:a5:36:1d:
13:52:cd:86:13:0a:dd:93:f6:60:f5:d8:18:39:3a:72:95:9c:
45:12:8d:d9:12:07:b3:b5:75:7d:d2:06:5e:51:95:92:b8:ab:
a0:00:6c:2d:ef:a5:fe:d8:9e:7d:8c:61:19:11:ff:dc:35:ec:
ef:f9:16:b2:aa:98:98:82:fd:5b:46:17:f8:65:32:90:76:b3:
f0:b5:da:62:1a:08:c4:e5:a5:61:b0:a3:85:e3:48:b3:bf:a0:
7f:3e:fd:21:60:c6:46:34:41:0f:d9:14:34:0d:ad:9f:79:1c:
9a:34:20:ba:74:5a:a7:3a:d1:d7:39:7e:a6:78:34:53:0f:b9:
c8:94:fa:07:89:74:e9:a0:53:24:bb:c8:ad:18:24:b6:ba:e1:
a0:b5:56:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:32 2024 by rpki-client on console-fra.rpki-client.org