Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vlXs33TGs34OAhpcMcexs4iAj2k.cer
File: vlXs33TGs34OAhpcMcexs4iAj2k.cer (raw, json)
Hash identifier: BG12gCZY40DRr/dtcLQ8Gzo47l6qAoOnc+WXUuJcAzs=
Subject key identifier: BE:55:EC:DF:74:C6:B3:7E:0E:02:1A:5C:31:C7:B1:B3:88:80:8F:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 98F3901E04
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/fbdf01-caa7-472b-95aa-e2398709248e/1/vlXs33TGs34OAhpcMcexs4iAj2k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/fbdf01-caa7-472b-95aa-e2398709248e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:52:09 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 205673
IP: 185.210.84.0/22
IP: 185.235.132.0/22
IP: 2a0b:53c0::/32
IP: 2a0d:5d00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656921337348 (0x98f3901e04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:52:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be55ecdf74c6b37e0e021a5c31c7b1b388808f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e2:27:a4:ee:d2:ca:1e:1e:34:f4:33:c1:27:
a6:9c:1f:ec:12:53:d0:b8:99:bb:a0:b0:1a:37:fd:
a1:96:4c:41:9f:34:18:65:ea:34:df:53:53:95:7b:
5b:d8:76:28:99:40:87:a6:0b:df:6f:d1:8e:01:6b:
a8:89:8f:4a:36:d6:44:89:c0:6e:27:69:f0:52:27:
de:19:dd:b3:9b:a3:01:a2:08:83:e9:02:d5:c8:8d:
d4:ea:bc:70:a3:43:67:b3:41:c2:f6:63:78:18:d1:
40:0e:1f:4f:13:4d:6a:48:f8:99:cd:5a:dc:7e:5b:
b9:d6:fd:31:1e:09:cf:4e:c7:37:f2:0b:6e:71:29:
b2:f7:93:b7:98:3e:f9:13:65:99:8d:6d:f0:b8:f3:
35:be:8d:0b:13:e3:54:c2:d6:6c:34:b4:9c:43:fe:
8c:3f:83:a9:d2:bd:db:38:fd:4c:6b:f9:3c:53:c9:
e2:f9:d8:ad:fe:67:ee:4b:09:a4:78:4c:36:d6:e9:
a6:f1:46:95:11:a3:26:3d:05:8f:77:23:33:e8:e5:
d6:32:fd:29:fc:2b:6b:26:9f:7e:ae:a5:5a:f7:1e:
8e:da:77:2e:2e:a8:8d:02:b9:e4:7a:83:4a:38:ab:
6d:24:70:6d:e9:84:79:71:1d:1e:4b:9a:bd:1b:9d:
72:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:55:EC:DF:74:C6:B3:7E:0E:02:1A:5C:31:C7:B1:B3:88:80:8F:69
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fbdf01-caa7-472b-95aa-e2398709248e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fbdf01-caa7-472b-95aa-e2398709248e/1/vlXs33TGs34OAhpcMcexs4iAj2k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.84.0/22
185.235.132.0/22
IPv6:
2a0b:53c0::/32
2a0d:5d00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205673
Signature Algorithm: sha256WithRSAEncryption
ae:8e:6e:9e:57:98:67:b2:7f:69:73:24:40:69:db:41:a2:8b:
e6:6c:71:93:a1:7a:23:1e:9c:8d:ae:4e:06:4b:bd:d5:b6:c8:
e5:26:7c:97:b5:ee:fa:3f:a0:37:f4:21:0c:58:23:ff:51:de:
0c:82:8c:4e:c4:b5:07:0c:4d:25:a3:c1:cb:d2:ba:c8:67:be:
74:2b:eb:d4:cd:be:61:5e:9b:af:72:ea:ad:4a:28:17:34:b5:
fe:70:df:63:18:37:c9:bd:a4:fc:62:5a:9e:96:b6:bb:f6:52:
fa:f3:88:af:2f:88:04:82:ff:ac:e3:61:82:7c:1b:17:b3:40:
7b:8f:4b:64:d9:9c:91:22:b0:83:30:2e:d9:21:ef:8b:23:a0:
17:5e:56:b5:ba:03:fb:b8:61:9c:3a:85:ca:ae:b2:54:93:51:
2b:1b:25:19:83:f0:1a:c8:23:24:27:17:27:33:59:ef:de:4d:
54:2d:3b:4b:59:fe:16:2e:cd:f4:26:d2:df:a1:db:26:9d:22:
4f:db:1f:ab:cc:fd:92:20:ad:9e:bf:05:c5:b2:91:85:7e:20:
e9:87:90:43:b0:81:75:df:a9:c9:5f:d3:68:b6:f1:3e:e5:ca:
c7:ce:2b:20:81:77:45:a1:1d:dd:b7:5f:fa:6d:a1:6d:d6:5d:
59:13:d5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:45 2024 by rpki-client on console-fra.rpki-client.org