Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xCN9vvFqXZRaMsNxzNy00xsna40.cer
File: xCN9vvFqXZRaMsNxzNy00xsna40.cer (raw, json)
Hash identifier: YCK5IldjLh0QDySxMehH5/Bhl9gWESGs8yTiLgta1Gc=
Subject key identifier: C4:23:7D:BE:F1:6A:5D:94:5A:32:C3:71:CC:DC:B4:D3:1B:27:6B:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B09F808FED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/42c1bd-1e8b-4083-8120-2363ddf6c6d2/1/xCN9vvFqXZRaMsNxzNy00xsna40.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/42c1bd-1e8b-4083-8120-2363ddf6c6d2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 26 Apr 2022 09:55:18 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 48624
IP: 176.56.64.0/19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 758590246893 (0xb09f808fed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 26 09:55:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4237dbef16a5d945a32c371ccdcb4d31b276b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:18:d6:e0:ca:41:40:5c:3f:93:38:7a:5f:
2a:b3:a9:ba:d6:43:ad:80:02:e7:96:5c:d5:87:81:
8d:54:0f:38:06:12:68:b1:f2:7a:90:c5:5a:dc:db:
26:37:75:32:88:05:bd:a2:90:ef:2c:f2:a8:88:67:
61:11:4a:8f:34:29:66:d2:8b:36:8f:7c:1f:07:20:
f3:97:19:54:10:cd:5d:3a:34:8f:bd:25:dc:d3:ad:
42:95:14:35:b9:88:88:25:74:2c:90:9b:0f:0f:eb:
b4:de:6e:dd:e5:2a:bf:94:59:01:a4:27:c0:0f:02:
ce:1c:6a:c7:19:31:90:92:1f:08:1e:42:76:74:5d:
45:d1:b7:77:3b:56:42:e9:0c:26:bc:f8:50:3f:47:
37:58:9a:5f:99:72:3b:79:4e:80:78:f9:56:91:4a:
8a:65:75:a0:f2:c1:44:22:bb:0c:47:49:cb:a6:89:
35:e8:4c:c8:79:51:3e:0e:74:a5:a8:97:61:30:b8:
f9:0c:5e:6a:6d:70:61:b6:af:03:d8:22:65:87:8f:
8f:0d:d3:17:1d:2d:83:34:fb:c2:6f:fb:09:51:77:
6c:79:94:60:99:f8:d6:79:55:8f:d6:67:db:50:96:
9d:b0:e7:e1:05:3b:3d:05:6f:9d:49:03:b3:59:5f:
51:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:23:7D:BE:F1:6A:5D:94:5A:32:C3:71:CC:DC:B4:D3:1B:27:6B:8D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/42c1bd-1e8b-4083-8120-2363ddf6c6d2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/42c1bd-1e8b-4083-8120-2363ddf6c6d2/1/xCN9vvFqXZRaMsNxzNy00xsna40.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.64.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48624
Signature Algorithm: sha256WithRSAEncryption
60:92:91:fa:b3:8e:50:0c:06:01:f5:af:f1:e0:81:dc:51:2f:
27:bf:de:65:ff:d9:08:5f:b6:86:1d:0a:b0:92:78:a3:b5:e0:
e2:e7:e3:3a:47:1e:f2:d0:fb:b6:40:cf:79:89:01:be:2e:48:
24:11:9b:bb:7f:bd:15:00:3f:56:63:0c:63:69:c9:fb:91:7e:
23:a5:b3:a1:3f:b8:b3:54:10:db:36:11:ad:dd:9a:dc:77:2f:
9e:7d:35:cc:06:02:fb:f6:92:c1:43:9d:ab:77:3c:3b:28:0a:
9b:1d:06:08:e3:4a:e1:dc:af:c2:57:a8:39:4b:4f:eb:ee:50:
8b:7b:70:38:e8:50:4f:f3:c6:39:ae:ef:5f:55:2d:d1:93:1b:
38:a9:73:01:9e:8e:24:de:79:7c:24:eb:24:d3:14:7e:28:d2:
c7:88:14:cf:a1:1a:0a:4e:3f:b7:c5:5e:6e:9f:9a:a6:76:c2:
86:f5:ab:05:0f:ac:b6:65:ab:7d:fc:e4:e3:35:d3:25:e4:24:
96:6b:8a:72:41:59:a3:9b:74:55:98:42:e0:0c:8e:e0:3d:d9:
aa:a3:71:29:b8:e5:26:bd:ad:2c:bb:fc:58:89:c9:da:e0:fa:
24:f5:1e:6c:77:32:36:a0:f0:63:f1:56:e0:b2:cc:ba:d1:e2:
57:95:a1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:01 2024 by rpki-client on console-ams.rpki-client.org