Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v79iP0w-o9G5abQFlFF37rqvns0.cer
File: v79iP0w-o9G5abQFlFF37rqvns0.cer (raw, json)
Hash identifier: VMVC1rBQi/ntLH6eRJUOFFWY+NQXmPbdjZeIz7zI37A=
Subject key identifier: BF:BF:62:3F:4C:3E:A3:D1:B9:69:B4:05:94:51:77:EE:BA:AF:9E:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856E65BD67E9CDFD9CE846C8C1906D49F4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/ea6f71-49bc-43fa-a288-179ce9408242/1/v79iP0w-o9G5abQFlFF37rqvns0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/ea6f71-49bc-43fa-a288-179ce9408242/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 17:33:59 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 49111
IP: 84.246.109.0/24
IP: 2a11:3680::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:65:bd:67:e9:cd:fd:9c:e8:46:c8:c1:90:6d:49:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:33:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfbf623f4c3ea3d1b969b405945177eebaaf9ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:98:e1:bf:7f:92:c3:9e:c2:09:04:08:76:
af:19:b0:f8:0f:47:00:2e:c6:c6:41:14:5e:0a:4d:
57:dd:e0:9f:c8:3d:f4:43:ea:bb:db:c0:ff:a6:ab:
64:6f:ce:4e:17:55:db:72:dd:96:ad:6f:be:5a:96:
8e:a3:6a:81:f0:20:10:5c:ce:c1:bd:78:1f:96:ab:
ed:2c:ee:41:14:0d:dc:16:93:a7:3d:5f:5c:7e:ce:
3a:14:69:d2:3f:88:7d:87:b9:33:5e:36:92:d5:4d:
9a:9b:8c:6c:01:9b:3d:49:db:39:eb:5e:29:09:6f:
aa:bc:2c:b1:96:15:89:82:21:3b:40:43:60:51:2e:
f1:9a:6d:34:58:2b:16:9d:0a:53:ba:45:fc:d5:be:
b3:19:cc:16:23:91:51:6a:9d:67:48:e7:f8:f3:1d:
06:2c:89:93:2a:98:e8:9e:ac:32:f1:ad:ca:a2:d9:
49:9b:12:ad:c4:3b:71:22:5e:20:5a:df:5c:3a:12:
ed:5a:ac:2a:eb:e1:52:99:f7:24:e5:de:4b:31:a7:
4b:88:9b:ea:86:9a:41:0c:2c:09:c5:bd:51:97:1c:
48:31:ba:b2:34:16:12:a2:b2:1e:d6:b4:3f:3c:81:
25:6b:f1:b7:d3:93:55:a4:a4:59:db:d6:5f:dd:53:
31:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BF:62:3F:4C:3E:A3:D1:B9:69:B4:05:94:51:77:EE:BA:AF:9E:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ea6f71-49bc-43fa-a288-179ce9408242/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ea6f71-49bc-43fa-a288-179ce9408242/1/v79iP0w-o9G5abQFlFF37rqvns0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.109.0/24
IPv6:
2a11:3680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49111
Signature Algorithm: sha256WithRSAEncryption
8a:4c:0e:65:4c:7b:d0:98:53:0a:55:2e:40:1b:56:ad:61:9b:
17:54:4a:26:5d:a5:d5:6d:1e:a8:56:bc:f4:22:a1:6a:8f:df:
23:4b:ca:39:0c:38:14:19:61:60:6c:c1:31:99:4a:f3:b8:3f:
ff:99:e8:d9:e5:8b:a1:9c:bd:af:cc:9b:67:e7:14:d9:ce:98:
3a:4a:56:eb:f4:a1:c7:40:98:c5:c9:9b:9b:84:66:b8:91:ac:
d6:48:ea:24:c6:bb:07:f0:08:9a:12:85:54:04:b4:9c:bd:e0:
9b:19:4e:df:c5:c5:3d:0f:70:1d:ca:4f:c8:13:d1:48:4d:dc:
15:b5:3f:ff:3e:a2:96:ad:df:9d:dc:c9:df:16:ad:92:17:62:
c6:31:ea:2c:5d:ab:21:c9:96:cd:e3:61:91:e1:78:3c:28:5b:
c8:23:12:7f:28:f6:1b:9a:72:ec:79:72:09:30:d7:05:62:88:
07:87:16:37:40:c1:a7:61:10:01:34:e6:66:38:07:41:88:40:
b9:bb:25:60:9a:31:a2:c0:3c:a4:57:2c:80:20:8a:ca:3f:e6:
37:e4:1d:d6:d8:13:2e:c2:7a:4c:ad:d7:7f:dd:fe:8d:fb:87:
5b:5e:e1:e6:6f:44:78:15:0f:89:14:4d:eb:44:66:71:0a:5f:
24:f6:54:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:24 2025 by rpki-client