Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xaABqG0UrXF7-SRxlpDZF8Wn-VI.cer
File: xaABqG0UrXF7-SRxlpDZF8Wn-VI.cer (raw, json)
Hash identifier: E4zuynpSwxfNc++cNRVhPFL4aZyQcnzDEv7soalc1Bk=
Subject key identifier: C5:A0:01:A8:6D:14:AD:71:7B:F9:24:71:96:90:D9:17:C5:A7:F9:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 98E3C4BB67
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/4f21cc-c08b-405f-8e58-d52d3a3a1e8d/1/xaABqG0UrXF7-SRxlpDZF8Wn-VI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/4f21cc-c08b-405f-8e58-d52d3a3a1e8d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:51:38 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 199738
IP: 176.32.50.0/24
IP: 176.32.54.0/24
IP: 185.48.84.0/22
IP: 2a04:b380::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656656350055 (0x98e3c4bb67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:51:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5a001a86d14ad717bf924719690d917c5a7f952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:dd:53:2e:a7:d3:e3:00:ae:1c:da:2e:db:
6c:1e:79:06:c1:07:6a:8f:ba:e3:7b:26:38:1b:e7:
5d:0c:81:8a:2e:36:df:f0:1c:27:c2:e3:f2:d0:92:
20:f1:06:59:c6:89:13:44:22:26:a4:64:18:5f:0a:
56:e7:43:31:88:e4:98:38:70:24:2e:03:d9:56:62:
23:f2:2d:c5:3f:b4:87:2a:70:bb:7c:4e:57:07:82:
49:49:0e:ee:8d:02:51:e0:c8:76:7f:49:11:e6:0b:
e9:07:c0:ec:5c:54:ba:c1:ed:2e:83:f1:c9:e1:2d:
7d:2c:e8:80:0a:3f:3b:85:46:c0:61:ce:72:36:7d:
47:d1:e6:6c:82:bc:99:be:53:9d:b6:a7:5f:8f:00:
39:a1:88:16:6b:7a:42:e7:f2:11:32:ca:ad:6d:39:
77:9e:91:9b:a1:72:c2:aa:32:c9:19:a3:e3:7a:83:
f5:87:a0:5a:1a:d2:1b:2c:1c:3d:1e:bf:2b:d7:0d:
c3:55:15:a4:44:31:00:d1:5d:f5:58:b5:b9:39:1f:
d6:7d:6a:94:eb:9d:ad:13:7d:63:16:a3:be:fc:05:
91:0d:5a:f1:ab:92:33:67:c3:77:84:42:f2:93:84:
91:d6:43:bf:ee:5b:d3:75:98:49:ec:fe:0c:20:8d:
d9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A0:01:A8:6D:14:AD:71:7B:F9:24:71:96:90:D9:17:C5:A7:F9:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4f21cc-c08b-405f-8e58-d52d3a3a1e8d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4f21cc-c08b-405f-8e58-d52d3a3a1e8d/1/xaABqG0UrXF7-SRxlpDZF8Wn-VI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.50.0/24
176.32.54.0/24
185.48.84.0/22
IPv6:
2a04:b380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199738
Signature Algorithm: sha256WithRSAEncryption
3d:48:c0:bb:f4:6e:61:23:74:c6:3f:32:ae:c4:41:8a:70:98:
d0:2f:f2:85:c9:ad:12:f3:57:f8:38:a2:60:9c:cd:0c:a2:15:
1a:02:af:de:05:ab:2b:c3:a7:3a:b9:cf:94:8a:c4:b3:cc:18:
6c:ab:87:b0:8a:db:d1:c4:b0:32:4c:06:cc:e7:ce:6c:af:65:
4f:50:9d:a7:fc:83:15:73:86:fd:0b:96:c1:b4:ea:cc:8d:1a:
75:49:43:a4:42:31:47:c2:01:16:66:a6:2b:2e:0c:b6:72:18:
b4:49:f1:40:bc:98:e0:57:3a:d7:61:4c:3c:72:88:23:3f:a5:
ca:1d:9c:21:95:0a:52:ac:ee:8e:49:6d:23:51:24:a9:2e:7c:
72:d6:bc:23:c6:10:01:d7:c0:d3:1e:40:e2:9f:87:42:59:b6:
91:4c:f6:47:51:f0:a5:ae:52:cb:63:40:f8:a4:11:0f:9a:35:
cf:ba:0e:65:17:32:4c:29:24:28:10:6b:65:51:3e:86:f6:d1:
1c:00:66:b6:7b:f5:30:da:f1:8d:a3:c5:1a:0e:26:d2:55:fc:
16:b7:21:69:ae:eb:26:59:8d:6b:e5:ea:39:b7:b3:be:e7:b3:
9d:2f:c3:dc:3c:46:c7:65:9e:24:60:61:e6:c4:fd:30:91:a9:
48:72:91:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:01 2024 by rpki-client on console-fra.rpki-client.org