Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z-KHzomdQADmbC1rSr0FUq9kRDY.cer
File: z-KHzomdQADmbC1rSr0FUq9kRDY.cer (raw, json)
Hash identifier: qx4tXjq+aO/1f6pNrD5YzlgjoARtSgRtuODQz63hKiw=
Subject key identifier: CF:E2:87:CE:89:9D:40:00:E6:6C:2D:6B:4A:BD:05:52:AF:64:44:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A1BFBE1A8D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/6db3d7-1c1f-4475-a8d3-79db9ce8a8a8/1/z-KHzomdQADmbC1rSr0FUq9kRDY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/6db3d7-1c1f-4475-a8d3-79db9ce8a8a8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:59:40 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 61952
IP: 185.46.20.0/22
IP: 2a01:82a0::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694706641549 (0xa1bfbe1a8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:59:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfe287ce899d4000e66c2d6b4abd0552af644436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1e:90:75:f0:32:74:94:d7:57:68:73:94:10:
11:dc:18:60:df:9b:37:75:01:92:8b:28:df:c3:47:
f2:56:19:89:5c:31:da:cd:a0:86:c5:0e:b8:39:58:
5f:39:93:ba:98:2d:b7:ad:2b:09:5a:f7:a9:d8:a3:
26:17:61:e9:9d:77:01:69:e5:46:af:f7:87:a0:11:
73:6c:b3:12:dd:f7:29:9d:2c:3a:00:3b:c5:18:41:
49:b9:bb:9b:da:9b:43:cd:a5:b7:d7:d9:80:f1:c2:
3b:ae:3d:99:7c:c7:0d:50:aa:96:83:1b:c3:38:0a:
84:1b:1e:4e:1e:b2:48:51:7d:b3:8a:12:53:68:a3:
fc:8d:5a:90:79:c3:f4:f1:a8:b9:e8:a5:d3:d9:e8:
19:5d:c6:5f:3b:6d:53:13:ea:b6:c6:77:16:4f:21:
d4:a1:79:03:f6:ef:87:4b:08:a4:54:7a:52:db:b6:
c7:de:37:00:51:db:1b:c0:61:51:0b:f4:14:cc:c0:
8c:85:4c:55:9a:5c:39:c6:a0:8a:06:96:25:42:5f:
69:4d:3d:79:c0:7d:91:a3:1b:b1:09:fe:5d:36:d0:
55:42:a8:32:bf:51:37:c9:ae:cd:71:a9:fc:22:9f:
cb:81:43:80:93:cd:57:e2:0d:f2:aa:52:5e:48:38:
52:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E2:87:CE:89:9D:40:00:E6:6C:2D:6B:4A:BD:05:52:AF:64:44:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6db3d7-1c1f-4475-a8d3-79db9ce8a8a8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6db3d7-1c1f-4475-a8d3-79db9ce8a8a8/1/z-KHzomdQADmbC1rSr0FUq9kRDY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.20.0/22
IPv6:
2a01:82a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61952
Signature Algorithm: sha256WithRSAEncryption
35:64:5d:69:db:96:a1:1a:ec:69:ed:c2:07:e9:f7:ad:51:8a:
6a:c7:1c:c2:4d:a8:20:ea:7a:61:17:d2:f2:d3:e5:02:5a:2c:
c8:49:c1:31:cb:14:a4:47:2e:3d:ef:37:eb:61:80:11:cf:e7:
8d:23:d1:24:8a:c9:d9:73:d5:b2:d0:16:4f:39:3b:98:db:be:
44:4f:7b:cc:eb:d6:49:d1:f9:e0:34:b8:a4:f7:95:09:5d:c3:
51:45:d8:ed:53:81:4c:eb:19:d6:13:77:17:7c:48:cb:36:51:
ea:91:47:fc:3d:05:67:01:a6:d5:50:59:23:af:e5:a8:b8:a9:
26:77:d1:4f:84:ee:b1:64:fb:5d:b2:d0:d7:ec:b6:08:02:96:
c9:23:7f:96:0a:db:85:dd:5b:9a:0e:16:6b:09:69:14:de:b8:
f3:02:fc:dd:98:e8:e4:55:37:dc:6e:51:c0:68:38:c0:60:2e:
64:66:3f:54:fd:92:d0:7b:8b:3b:62:69:3d:db:bc:bc:47:59:
69:69:57:16:29:c2:2d:5e:07:03:e1:72:fd:f5:97:78:37:47:
c2:16:e2:a2:47:79:31:8b:41:f6:5e:f6:a7:8e:7d:87:db:fc:
0f:77:79:ed:7d:8a:f2:c8:d1:43:bc:23:e4:69:39:f4:4e:0c:
81:8e:6b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:13 2024 by rpki-client on console-fra.rpki-client.org