Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xZGZjA2Ur7NbvaJRu-Rgsss5Iqo.cer
File: xZGZjA2Ur7NbvaJRu-Rgsss5Iqo.cer (raw, json)
Hash identifier: OuKQL+jhqyKuHVpKs3GNjW5m3ayDVs8xcNlze2HF+t0=
Subject key identifier: C5:91:99:8C:0D:94:AF:B3:5B:BD:A2:51:BB:E4:60:B2:CB:39:22:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AAD164D539
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/ba9e41-8835-4dde-a5d0-0f2c9d4c253f/1/xZGZjA2Ur7NbvaJRu-Rgsss5Iqo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/ba9e41-8835-4dde-a5d0-0f2c9d4c253f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:59:52 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 58110
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 733657486649 (0xaad164d539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:59:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c591998c0d94afb35bbda251bbe460b2cb3922aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2b:d9:f8:5c:f2:dd:3c:3f:90:da:52:4f:0c:
a7:a8:de:54:c6:65:d7:6a:eb:2b:6c:3c:a1:99:1c:
34:8a:20:20:f8:fd:b8:f2:99:e3:b2:88:24:91:c4:
1e:8c:b6:0b:3e:89:ca:6b:78:a8:49:b7:b8:a9:a8:
e9:d8:51:85:55:12:d0:29:77:6d:b5:12:fa:94:4e:
e8:b4:ea:5d:dc:23:0a:f3:f9:cf:d8:7c:af:7a:2a:
4e:da:35:df:66:b5:86:41:96:26:62:a7:82:16:f1:
4a:1a:e0:72:37:3c:02:05:29:30:8b:26:17:58:f1:
21:f3:cb:cd:0d:06:1e:14:e9:c3:d3:aa:e0:0a:56:
d7:f6:87:9a:ea:c2:8f:6b:92:ec:26:00:74:fd:c2:
26:eb:95:4a:14:be:cf:ca:18:9b:3b:d2:e4:cd:fd:
5c:2e:39:f2:dc:fb:56:9c:99:d5:62:08:a9:48:bd:
3b:f0:5f:39:12:81:1d:7f:7e:93:24:2a:ec:46:a0:
f0:ea:f7:55:53:ba:1a:2c:83:c0:0d:32:79:76:12:
d5:e6:19:65:e6:39:a7:8a:44:9d:ab:6b:95:b1:ce:
c1:0d:13:4d:65:0d:de:7a:2d:e6:ac:4a:23:73:3b:
5f:f6:43:b0:4f:01:6d:bf:f6:bc:c1:46:96:59:34:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:91:99:8C:0D:94:AF:B3:5B:BD:A2:51:BB:E4:60:B2:CB:39:22:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ba9e41-8835-4dde-a5d0-0f2c9d4c253f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ba9e41-8835-4dde-a5d0-0f2c9d4c253f/1/xZGZjA2Ur7NbvaJRu-Rgsss5Iqo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58110
Signature Algorithm: sha256WithRSAEncryption
1b:f8:17:c9:1f:9c:70:b3:0e:fa:54:1e:bf:6c:be:15:f3:01:
94:cf:ff:bf:01:78:cf:2e:a4:6f:3d:38:34:96:c2:f1:9e:af:
9a:7e:7b:49:43:7e:88:f5:f0:c9:37:3c:f9:c1:4b:52:35:dd:
19:bc:7d:c3:76:ab:42:99:50:02:61:d7:b2:d9:6a:97:55:1f:
97:bd:78:ac:cf:37:c9:5c:ec:a0:43:8d:c9:0e:ed:e7:ab:dd:
15:68:b4:ba:af:0c:71:1d:28:46:9a:12:a3:ac:37:ad:de:e7:
11:f0:78:b0:e8:eb:cb:ce:f4:1d:e0:10:00:89:7b:0e:a0:45:
64:c6:e4:50:4c:76:f6:d9:57:f4:b7:ee:e0:55:42:43:48:8b:
1e:ef:70:df:46:98:e0:f0:75:e0:23:a0:67:e5:27:11:c9:be:
cc:9e:c6:2e:38:d2:d2:53:a4:2c:66:2f:a3:69:fe:d9:2b:06:
cf:a3:f6:8d:c1:01:d5:c9:44:be:cd:af:5c:1e:b8:a4:1f:e7:
02:3d:20:0a:59:f8:d0:8d:39:9c:a9:8c:89:f8:56:33:eb:f5:
9b:ae:51:c9:9b:c5:80:19:77:f8:d3:0a:ce:28:78:93:c9:d1:
00:0d:ae:84:1c:be:29:d2:9c:98:8a:d7:ea:51:ff:a2:1a:ff:
66:42:20:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:01 2024 by rpki-client on console-fra.rpki-client.org