Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/usGH540e8NmNPYNHX00nXhRVY2w.cer
File: usGH540e8NmNPYNHX00nXhRVY2w.cer (raw, json)
Hash identifier: FN9HaNsrDXqUq5U2RBSvdEKpCSYVPVj6VsDk5Ro1W0Q=
Subject key identifier: BA:C1:87:E7:8D:1E:F0:D9:8D:3D:83:47:5F:4D:27:5E:14:55:63:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A2F3932326
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/100411-46a8-44da-af92-953976d78c3c/1/usGH540e8NmNPYNHX00nXhRVY2w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/100411-46a8-44da-af92-953976d78c3c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:00:57 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 47293
IP: 93.190.208.0/21
IP: 2a02:488::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699871208230 (0xa2f3932326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:00:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bac187e78d1ef0d98d3d83475f4d275e1455636c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:2f:63:f2:c6:53:c5:d2:38:17:39:c0:e8:
d2:18:78:76:93:b9:5d:b5:58:50:e0:75:73:3a:c0:
f1:6c:31:05:54:b3:96:3d:05:74:c3:8a:2a:6f:b1:
04:d0:c9:a7:11:60:b9:9d:53:72:ba:e5:25:85:ee:
88:52:99:72:ff:ab:c2:9a:d4:ec:fe:9b:33:d5:0b:
fc:82:21:9a:6d:c7:ff:0f:8d:3e:c0:6c:73:36:5c:
63:6c:b2:c7:b1:3b:4d:46:58:06:1e:cb:a2:55:98:
f8:6f:57:07:7d:bf:a7:ae:43:c8:29:3f:7f:77:e4:
2f:62:b9:a0:07:21:86:ca:1a:57:a4:39:b7:4b:74:
90:32:a2:4c:70:d7:00:70:05:5e:ca:b8:13:e8:30:
c7:85:a6:18:a1:de:62:a8:cf:12:83:fa:32:e9:9f:
e6:67:ed:2c:ff:9e:28:25:a1:51:d7:67:31:28:48:
f1:2c:a7:e9:40:4e:35:0c:d4:66:44:b2:45:9b:09:
d4:89:74:54:35:2f:f9:22:9c:c2:e5:7e:45:ca:b4:
c1:c7:8b:c1:59:62:b6:4b:63:92:8f:fb:92:71:64:
82:ee:65:37:35:f7:d4:59:b5:88:5c:4d:21:c3:3a:
4b:da:b7:2a:39:ce:90:41:1d:50:ec:2c:a6:90:5d:
2a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C1:87:E7:8D:1E:F0:D9:8D:3D:83:47:5F:4D:27:5E:14:55:63:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/100411-46a8-44da-af92-953976d78c3c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/100411-46a8-44da-af92-953976d78c3c/1/usGH540e8NmNPYNHX00nXhRVY2w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.208.0/21
IPv6:
2a02:488::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47293
Signature Algorithm: sha256WithRSAEncryption
af:8f:20:3c:c1:ae:3c:8e:8d:57:5c:d9:dd:8d:78:55:be:24:
40:0d:d9:c7:78:41:ab:d9:26:4a:cc:a3:6d:8b:1a:6d:20:42:
e8:22:a1:21:71:43:94:44:c2:fd:63:7b:6b:02:cc:51:cb:ae:
01:b6:64:e8:cb:41:b9:df:a7:f9:3d:af:57:71:ff:4c:05:d4:
06:b1:70:88:64:7b:01:31:2c:ca:57:85:99:fe:bd:a3:30:46:
2e:a2:22:41:73:9d:bf:00:57:2f:7a:c9:60:b4:b2:5b:fa:ad:
db:04:73:e0:df:12:48:1c:66:e6:3d:c4:3a:09:59:55:ec:6f:
64:77:c2:c8:42:85:f6:72:24:b1:62:80:fa:48:35:a2:af:c2:
b0:eb:6b:be:f2:e1:27:5c:16:2b:8f:c0:3f:bf:6b:08:b9:8b:
ea:b5:e7:80:71:01:6f:cb:46:1f:3e:71:84:fa:14:bf:2a:8f:
30:14:61:2a:6c:3d:03:8e:4d:df:c9:14:41:11:7b:40:58:67:
1c:3b:29:ac:f4:f8:12:6d:a0:9b:93:9a:5a:89:36:83:00:e0:
00:6e:13:6b:9c:4f:61:f1:0d:48:61:6c:cb:cf:40:ef:62:16:
50:f5:a7:da:2f:f4:c5:08:70:96:d2:de:5c:c6:2e:2d:13:97:
51:91:e7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:22 2024 by rpki-client on console-ams.rpki-client.org