Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w_8SD9kcrmpFHDbNBzDQT_AX2ek.cer
File: w_8SD9kcrmpFHDbNBzDQT_AX2ek.cer (raw, json)
Hash identifier: Bmje244TxRzcdmAqpqYhInguT15A1UplCkJ4qDjhkOM=
Subject key identifier: C3:FF:12:0F:D9:1C:AE:6A:45:1C:36:CD:07:30:D0:4F:F0:17:D9:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A2BBCAC7E2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/f983d7-e516-4de9-a590-20f032bcc6af/1/w_8SD9kcrmpFHDbNBzDQT_AX2ek.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/f983d7-e516-4de9-a590-20f032bcc6af/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:58:10 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 39166
IP: 195.182.12.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 698935330786 (0xa2bbcac7e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:58:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3ff120fd91cae6a451c36cd0730d04ff017d9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ad:4e:09:74:d0:7e:f8:cc:49:27:3a:1c:59:
01:ad:38:e7:58:79:9f:22:3d:06:88:85:f0:7a:f0:
a8:2d:f5:3d:8b:3c:56:84:3a:50:df:de:0c:cb:5e:
4a:64:27:5f:9c:3d:3e:e1:76:7b:70:c7:33:18:2d:
97:33:16:16:0e:f1:76:09:c5:32:8a:eb:58:fa:46:
dd:d3:4d:88:3c:ad:77:77:d3:ee:06:7b:3e:9f:89:
58:c1:34:f1:ab:1e:fc:14:fd:a4:14:33:0f:b3:9d:
c2:42:87:5e:cc:3f:9d:5c:85:bb:70:f2:a5:e8:60:
3b:c0:00:a5:2c:ac:79:47:bc:ba:5c:d4:db:67:8f:
c6:99:57:2f:29:9e:e6:ac:15:ba:f3:e6:b6:cb:3d:
be:47:f6:dd:e9:92:72:4e:95:fa:e5:cd:f4:e1:73:
bf:7e:a2:b4:d9:ec:22:70:1a:7c:df:47:5b:5e:a8:
b5:06:6c:22:cc:ff:a3:cb:45:3c:f4:68:e4:18:36:
8f:9b:30:59:0d:dd:c1:53:40:ed:ab:e0:c9:b8:1d:
97:ca:a2:ff:d7:7c:31:ea:61:ca:a5:53:14:75:da:
e7:b5:bf:58:0d:0a:0e:8b:54:ee:84:c0:a9:4d:ee:
0a:f1:98:e5:a7:aa:17:f0:19:b3:48:a1:b0:c1:9e:
99:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FF:12:0F:D9:1C:AE:6A:45:1C:36:CD:07:30:D0:4F:F0:17:D9:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f983d7-e516-4de9-a590-20f032bcc6af/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f983d7-e516-4de9-a590-20f032bcc6af/1/w_8SD9kcrmpFHDbNBzDQT_AX2ek.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.12.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39166
Signature Algorithm: sha256WithRSAEncryption
92:d5:8a:a1:ed:64:bb:81:ba:48:de:18:8d:bd:ca:ab:48:35:
e5:4e:81:26:77:8f:cf:2d:b1:00:bc:df:f1:fc:ba:08:f5:2b:
1c:9b:0a:d1:a9:74:22:ca:ba:ab:f2:47:3b:4e:89:03:84:52:
37:9c:3f:fc:7b:07:5a:8b:a6:bb:57:0b:74:05:18:32:e0:d0:
31:8a:c1:e2:9c:25:7e:80:f5:a3:93:91:39:2d:c2:2f:7d:42:
a6:26:92:31:cd:17:ba:1f:e1:33:60:b8:bb:4b:98:14:1e:df:
ad:b6:20:db:53:39:51:19:f4:de:de:ca:f5:f6:62:79:b7:f5:
a6:c3:f4:60:36:1b:8f:b1:4e:35:d1:d4:27:84:ef:c5:70:a9:
da:52:5b:01:06:b2:cf:0b:29:14:8b:83:cd:ea:9d:09:c6:2a:
14:64:ba:9b:7f:3c:af:f5:1d:2f:f8:df:2e:dd:93:b5:5b:3f:
f5:fb:b7:3d:08:fa:90:17:2d:1a:99:0b:1f:59:fe:05:0e:3d:
99:61:41:65:0c:4e:a8:ef:3f:86:d2:cf:73:a2:33:d7:c3:de:
24:9d:b7:eb:04:33:22:bd:a7:cf:b2:4b:81:25:ac:63:18:0e:
de:00:d6:aa:a7:24:e3:84:aa:2b:b1:78:9a:b3:89:7d:7f:c7:
69:07:42:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:52 2024 by rpki-client on console-fra.rpki-client.org