Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xE21qZO-SqtwtoTjJpqDISt7tfo.cer
File: xE21qZO-SqtwtoTjJpqDISt7tfo.cer (raw, json)
Hash identifier: FBeMiz8IPK0oBs3ZprdUaUAIng+hgHhlLCUwrFy115s=
Subject key identifier: C4:4D:B5:A9:93:BE:4A:AB:70:B6:84:E3:26:9A:83:21:2B:7B:B5:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B19E72D492
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/76f8bf-1fc2-437f-9c8d-497ce85ee1e6/1/xE21qZO-SqtwtoTjJpqDISt7tfo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/76f8bf-1fc2-437f-9c8d-497ce85ee1e6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 12 May 2022 10:53:17 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 205102
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 762867537042 (0xb19e72d492)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 12 10:53:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c44db5a993be4aab70b684e3269a83212b7bb5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:52:c4:e6:44:18:2f:5a:87:66:a0:b9:87:
d7:73:b4:8f:8c:d2:ff:f0:6c:0d:45:82:9f:f6:34:
cb:ca:78:fe:dc:b9:b6:df:a8:d6:b8:c4:e4:c8:82:
be:c6:aa:eb:37:55:b2:e8:e4:d0:82:3b:a5:b4:7c:
8a:1d:a8:f0:ff:6a:eb:2a:0e:23:60:02:7d:5c:aa:
7b:9f:24:41:36:97:56:2d:69:d6:7a:ed:6c:8a:91:
39:64:22:49:9e:ea:85:c9:23:b7:7e:8b:c3:4e:ff:
68:83:ff:82:52:bb:8f:48:0e:e4:2b:1a:ad:e8:08:
e9:13:54:41:d3:95:a4:e7:23:51:d2:1c:7b:9b:49:
35:89:6d:c2:9f:36:b3:af:c0:2e:be:46:57:03:6c:
80:32:dd:34:68:ce:85:4a:c2:0e:ca:7c:d0:76:a0:
c4:25:a6:a1:49:60:2e:e3:d2:13:0a:ed:97:a4:88:
71:be:40:15:0e:ba:67:99:64:11:c6:16:02:f8:b3:
88:db:6c:ce:f3:a9:eb:cd:28:9f:6d:9e:24:6e:4f:
a0:8e:74:46:78:18:e0:bc:3d:54:4b:c3:9e:9d:3f:
3c:a3:a8:d7:5b:8c:e8:76:8d:ae:3c:c7:60:54:e0:
70:d7:ac:8e:9f:24:85:5f:d4:5f:f0:b2:af:7a:76:
e9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4D:B5:A9:93:BE:4A:AB:70:B6:84:E3:26:9A:83:21:2B:7B:B5:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/76f8bf-1fc2-437f-9c8d-497ce85ee1e6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/76f8bf-1fc2-437f-9c8d-497ce85ee1e6/1/xE21qZO-SqtwtoTjJpqDISt7tfo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205102
Signature Algorithm: sha256WithRSAEncryption
68:35:d3:bb:b4:12:98:76:5b:62:8a:7e:f3:02:8a:d4:fb:6f:
6e:5c:d6:02:c0:4b:2d:3b:6e:b5:a9:c4:b7:ea:d9:0c:15:90:
30:c3:df:25:f6:de:a5:54:21:d6:c7:77:49:77:2b:b3:8d:36:
73:ee:70:99:2f:5a:be:2c:0f:90:83:c3:4d:6f:9b:a2:71:fe:
ba:69:5f:b7:d6:7b:3e:35:61:e0:29:e5:d7:5a:8e:f2:fb:50:
92:4c:5d:b8:08:50:71:93:a7:d3:99:f0:1f:b1:5c:e0:e7:89:
d0:7d:92:be:33:8a:1f:77:a2:2e:a5:09:f6:fd:e9:9c:25:93:
2f:26:d0:b2:5a:d5:65:1e:82:e8:78:17:c4:93:27:35:b4:2d:
90:a6:19:2a:bb:dd:18:6a:ed:23:57:c1:a9:4b:a6:51:11:b0:
61:0a:d3:0f:22:de:2f:55:14:d4:1e:e2:23:d3:3a:20:ad:50:
dc:d5:eb:65:5a:1b:85:ec:ee:29:2c:fe:be:7d:a1:e4:35:99:
7d:57:90:fa:21:65:b6:3a:ca:88:5c:a9:d2:e1:56:e3:84:05:
47:01:f8:b6:34:8a:d8:84:0b:d7:ca:9f:fe:a7:68:2a:ed:06:
18:df:5c:61:71:2e:53:32:b8:2a:01:8b:bb:89:e5:60:00:5b:
55:93:05:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:58 2024 by rpki-client on console-fra.rpki-client.org