Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xt0MaFjqmDAlGvhzt2gG1S9PSa0.cer
File: xt0MaFjqmDAlGvhzt2gG1S9PSa0.cer (raw, json)
Hash identifier: I4DnEIKKuND0FyxoO+0gX/6CvN4ArFzcLzk/YlblTcY=
Subject key identifier: C6:DD:0C:68:58:EA:98:30:25:1A:F8:73:B7:68:06:D5:2F:4F:49:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9C0F8C73AF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa716c-6fc0-4469-9cc0-4c777112d874/1/xt0MaFjqmDAlGvhzt2gG1S9PSa0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa716c-6fc0-4469-9cc0-4c777112d874/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:59:14 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 213267
IP: 195.137.177.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670275761071 (0x9c0f8c73af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:59:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6dd0c6858ea9830251af873b76806d52f4f49ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5c:c9:4f:66:9e:6f:8b:66:32:7d:e9:8e:db:
ef:ed:0a:0e:0c:e5:61:98:45:46:b5:7f:b7:ec:1f:
27:c8:67:bb:40:2a:2f:ab:b7:26:df:b7:d4:8f:83:
0b:72:7d:43:5e:15:84:1a:27:63:60:69:f9:22:d0:
69:34:4c:cf:b1:df:fc:be:c6:24:64:4b:9f:d5:51:
7b:32:9a:38:a1:17:9f:46:78:21:c0:a3:3c:c8:d1:
32:e7:b5:55:ee:11:fa:a2:f9:d1:71:42:4a:27:af:
99:68:f0:e4:2b:49:61:3a:4c:0b:07:f4:e7:c8:b5:
39:cd:fd:7d:8e:da:ba:30:f0:08:48:00:90:d7:57:
6f:82:87:df:7a:65:b5:65:fc:0d:b2:25:c6:16:9c:
0c:e6:2e:41:52:5a:22:4c:e1:43:20:74:35:71:3c:
e2:e7:6d:be:88:29:96:e2:4a:48:2c:9e:1f:79:2a:
cc:84:ea:05:17:7c:94:13:ed:e0:ca:b9:41:f5:73:
7c:50:5d:4b:61:17:e5:9d:06:4a:4e:6b:ea:de:37:
ba:c2:e3:72:90:e6:82:bb:19:95:3f:75:0f:75:fa:
f2:56:cf:cf:b9:30:07:c6:95:aa:fc:86:05:2e:32:
05:34:b0:be:39:d2:69:d0:0d:9c:f1:51:11:07:7d:
41:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DD:0C:68:58:EA:98:30:25:1A:F8:73:B7:68:06:D5:2F:4F:49:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa716c-6fc0-4469-9cc0-4c777112d874/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa716c-6fc0-4469-9cc0-4c777112d874/1/xt0MaFjqmDAlGvhzt2gG1S9PSa0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.137.177.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213267
Signature Algorithm: sha256WithRSAEncryption
42:6b:eb:ca:63:82:ec:e9:a2:9d:4c:89:5d:cf:68:4c:85:97:
a0:ec:ea:56:4c:07:f3:b4:ee:f9:0c:8d:86:df:67:19:a0:22:
72:64:4c:d2:41:03:bc:73:a7:bf:57:37:5e:ec:65:15:6f:d2:
95:9a:84:d3:93:23:14:70:34:27:b6:7f:c7:31:fd:4a:fc:23:
bc:a8:bc:01:01:f0:47:e8:d4:98:f4:ba:1c:dc:cf:ec:2d:6e:
c9:5a:35:b4:ef:2e:e4:81:61:10:7d:3d:82:9c:b8:15:86:a5:
fe:8a:e8:aa:6e:ea:c5:ef:3c:07:ff:16:c3:b9:11:fc:0c:8f:
63:17:2c:91:86:10:db:38:7b:60:3e:48:69:b2:ee:b7:f8:b3:
ce:1c:8c:07:4c:85:42:29:ba:49:f1:14:18:92:03:7d:98:4a:
76:3a:14:0a:33:16:9a:a8:6e:7f:e9:f2:37:51:25:02:ad:53:
92:4d:87:be:55:f1:7d:55:c5:5b:d9:42:84:ff:19:17:a8:06:
94:70:6d:0e:51:7c:a2:49:88:f8:9a:16:89:15:f1:64:90:71:
b7:ff:d9:f0:08:d8:5b:6e:e6:51:e9:84:39:b9:c8:3d:4e:5c:
bf:95:7d:dc:a0:1a:a4:16:1e:3a:53:bf:0f:1d:c1:5c:9a:46:
22:57:44:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:04 2024 by rpki-client on console-fra.rpki-client.org