Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z-tQpZ_meJsNKJRXrJSrDOSVEJQ.cer
File: z-tQpZ_meJsNKJRXrJSrDOSVEJQ.cer (raw, json)
Hash identifier: XzNprgwSTQNBqJbilv2yI4u+aZqE9NVvjVfUzF2hWBM=
Subject key identifier: CF:EB:50:A5:9F:E6:78:9B:0D:28:94:57:AC:94:AB:0C:E4:95:10:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9B5D31367C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/d57557-7df0-4ec9-9629-7ff40da0fe00/1/z-tQpZ_meJsNKJRXrJSrDOSVEJQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/d57557-7df0-4ec9-9629-7ff40da0fe00/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:53:00 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 35430
AS: 49917
IP: 185.1.32.0/24
IP: 185.82.72.0/22
IP: 2001:7f8:8f::/48
IP: 2a05:8c80::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667283437180 (0x9b5d31367c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:53:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfeb50a59fe6789b0d289457ac94ab0ce4951094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b3:ad:f3:24:00:27:c0:89:44:4c:95:50:b7:
b8:d7:78:88:0e:26:89:c3:36:27:a0:5b:4c:03:5a:
ce:17:93:d0:b5:16:31:06:65:04:90:46:c3:7e:93:
f7:41:9d:8d:5b:7a:65:0b:54:b3:8d:79:86:b4:12:
73:72:5a:48:05:8f:ff:9d:f5:84:de:a9:8d:8d:b8:
42:fe:57:c4:d4:91:f0:1d:98:ae:32:87:4a:e4:2f:
6f:35:6f:f9:d1:dc:f6:0d:49:b1:08:d7:76:b5:e4:
2c:82:32:49:6f:e8:b4:fb:48:f6:41:45:0d:e9:23:
fa:1f:11:39:46:ab:6f:5e:28:71:a4:bf:a8:69:7d:
df:1b:43:c9:96:79:0d:d8:8b:20:62:75:a0:a1:6f:
f5:7e:fa:28:21:ab:23:f0:e8:d7:99:88:75:2b:32:
60:55:fb:19:f8:0b:6f:eb:f6:58:80:45:47:16:87:
67:a6:94:ad:69:6d:e4:5c:0a:dc:91:56:2e:ce:05:
f5:55:20:13:08:8e:67:ce:ea:fe:ab:5c:7c:5a:8c:
8a:9c:42:77:b2:f0:3c:0a:31:42:93:3c:5e:b0:fa:
dd:6f:3f:04:96:01:4f:a6:66:1b:d8:94:d3:3f:b8:
a0:e2:75:66:02:7d:39:0e:25:b7:4f:29:4b:df:93:
55:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EB:50:A5:9F:E6:78:9B:0D:28:94:57:AC:94:AB:0C:E4:95:10:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d57557-7df0-4ec9-9629-7ff40da0fe00/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d57557-7df0-4ec9-9629-7ff40da0fe00/1/z-tQpZ_meJsNKJRXrJSrDOSVEJQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.32.0/24
185.82.72.0/22
IPv6:
2001:7f8:8f::/48
2a05:8c80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35430
49917
Signature Algorithm: sha256WithRSAEncryption
2f:5b:ca:a7:47:c7:92:0e:20:69:a1:69:de:5b:0a:06:a5:d5:
12:54:dc:33:fa:ef:9d:7a:b1:65:9f:89:69:2f:6c:bc:69:1a:
92:51:29:d3:1f:cb:06:2a:51:aa:fe:c2:da:49:36:73:3e:8a:
34:9e:9e:2e:33:74:e7:86:61:c8:be:2f:ba:29:a4:2c:3f:22:
93:a0:7e:09:7b:31:35:3a:2c:78:7a:27:db:06:65:8f:9c:5d:
e4:7a:f9:db:c2:b8:75:3f:8d:65:eb:ed:f4:3f:48:f1:9c:82:
a2:ce:80:d3:2b:47:6b:e4:2b:18:f3:37:ce:af:04:f3:48:38:
a5:b3:da:87:58:7d:33:be:f4:f6:81:da:cf:2f:7a:03:b9:1e:
12:8e:07:30:15:f5:85:e2:17:b1:05:15:60:7a:9f:2e:5a:9f:
2d:61:82:9e:fd:2e:b8:00:aa:5c:e8:fa:f0:62:5c:b0:6c:d8:
37:92:9b:e4:59:74:89:dc:1d:49:86:82:be:09:71:ca:8c:71:
6c:05:01:f3:b1:63:4a:59:25:f9:d5:1c:b3:cb:ad:c2:35:e1:
44:02:fc:c3:e9:70:ff:42:61:15:b0:ce:f7:52:de:e8:04:a3:
e6:61:5b:27:cd:19:cd:16:8c:96:05:ed:ca:98:a3:79:5b:be:
f0:c9:75:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:34 2024 by rpki-client on console-ams.rpki-client.org