Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yiBacDIfgZtw-6VOWrVIHaw6A4c.cer
File: yiBacDIfgZtw-6VOWrVIHaw6A4c.cer (raw, json)
Hash identifier: I/wB/zUyiP1+IcM8/0Fnb22MsZyms7jomMv4HSDMfdQ=
Subject key identifier: CA:20:5A:70:32:1F:81:9B:70:FB:A5:4E:5A:B5:48:1D:AC:3A:03:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9F76D66762
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/891c08-43b9-4d27-8a29-ed6ef0378af5/1/yiBacDIfgZtw-6VOWrVIHaw6A4c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/891c08-43b9-4d27-8a29-ed6ef0378af5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 06:02:08 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 212605
IP: 91.204.220.0/22
IP: 185.184.230.0/24
IP: 2a0a:33c0::/29
IP: 2a10:69c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684893562722 (0x9f76d66762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:02:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca205a70321f819b70fba54e5ab5481dac3a0387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2f:54:42:ef:15:f5:d3:6e:6b:98:26:06:20:
f7:c2:3c:19:a6:4a:59:3d:2c:7c:b3:da:ba:62:f9:
53:5b:ce:23:1e:f4:65:26:57:35:26:6c:11:e1:bb:
6b:c2:22:7e:cd:59:ee:c2:dd:6c:2a:a8:eb:5a:96:
4d:61:fc:8d:4e:be:34:d2:15:6d:2f:83:05:27:c1:
50:d5:41:5a:0f:8c:71:8e:2a:7b:ef:01:fd:4a:07:
0d:7d:93:3f:49:ad:c0:b5:52:14:16:49:0b:1b:b8:
30:06:93:e2:1e:c5:fd:84:70:f6:d1:a4:5c:f1:70:
82:b9:92:a0:fa:f0:64:a1:33:8f:b0:0f:78:a3:79:
c2:24:65:12:46:31:19:a2:c0:1d:e1:da:75:58:68:
91:07:0f:35:ed:ef:e0:72:36:7a:01:83:56:3a:2d:
e5:33:79:df:bb:9b:13:f0:16:8e:7b:b4:00:80:53:
0a:62:c4:c1:87:0e:f3:13:a6:c7:19:04:7b:bc:0d:
ce:a0:b3:dc:ce:e3:75:e4:f1:b2:d9:8c:3d:92:c3:
30:9a:2a:37:69:1d:0f:0e:4c:ff:56:61:02:8d:19:
ef:ba:c3:c3:10:4e:a9:ed:26:31:f3:9e:2e:91:da:
3a:93:ed:2b:66:6a:4c:51:25:5b:9a:d9:e8:e8:44:
23:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:20:5A:70:32:1F:81:9B:70:FB:A5:4E:5A:B5:48:1D:AC:3A:03:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/891c08-43b9-4d27-8a29-ed6ef0378af5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/891c08-43b9-4d27-8a29-ed6ef0378af5/1/yiBacDIfgZtw-6VOWrVIHaw6A4c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.220.0/22
185.184.230.0/24
IPv6:
2a0a:33c0::/29
2a10:69c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212605
Signature Algorithm: sha256WithRSAEncryption
56:a0:2a:85:0e:a2:81:f8:de:5d:9b:6a:d0:95:69:fe:f4:c3:
8b:60:3f:61:81:84:ea:06:7a:5c:04:18:b3:0f:a1:3c:37:86:
cb:1e:ba:a3:6b:ad:81:55:28:68:f9:48:79:e1:60:34:55:de:
1a:52:15:bf:ac:2b:c0:50:29:96:2f:ea:9e:cb:cb:c3:53:fe:
97:e3:ed:7a:7c:8a:64:69:2f:d1:b4:0e:5f:3d:28:35:88:81:
f2:59:ab:d8:2e:af:6e:15:ae:7e:eb:61:0f:40:c0:37:06:fe:
9a:04:b7:76:2d:31:0b:23:80:c6:b5:54:4b:95:dc:c5:2b:d8:
7a:f4:6c:6f:d8:3a:92:9f:1b:f8:92:b9:f9:5c:46:cf:d5:58:
15:92:84:48:bb:c3:23:35:85:f8:29:51:8d:20:8a:4f:0d:81:
4d:14:7f:33:b4:2c:9f:9c:43:c5:75:36:df:28:8b:ad:ba:21:
99:d8:64:e7:4b:88:c1:96:a8:60:5b:80:d8:61:6b:72:14:c9:
a1:99:f6:90:b7:fd:98:57:d7:20:0c:7c:d2:4c:a8:d0:25:96:
97:49:b4:36:52:55:cd:61:a5:77:6e:63:48:1c:93:98:7b:bb:
b9:eb:f6:05:99:ad:63:41:c3:b1:66:91:72:7d:f6:c5:51:39:
a2:97:51:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:30 2024 by rpki-client on console-ams.rpki-client.org