Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z4jDJ5UiTLMIzm4_xFzgfZUI6Tg.cer
File: z4jDJ5UiTLMIzm4_xFzgfZUI6Tg.cer (raw, json)
Hash identifier: HD7uVZbG+ierVF5yHy8IUXzioPnp6tKqELLPJwgaB9Y=
Subject key identifier: CF:88:C3:27:95:22:4C:B3:08:CE:6E:3F:C4:5C:E0:7D:95:08:E9:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0182A6C6BA0671F7BEA641997F49CC8D7842
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/2/CF88C32795224CB308CE6E3FC45CE07D9508E938.mft
caRepository: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/2
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Tue 16 Aug 2022 13:10:17 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 211244
IP: 2001:678:714::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a6:c6:ba:06:71:f7:be:a6:41:99:7f:49:cc:8d:78:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 16 13:10:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf88c32795224cb308ce6e3fc45ce07d9508e938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e4:8e:37:14:05:a9:83:c4:11:e8:8b:0c:1b:
68:22:50:78:a6:af:3a:69:fa:1a:b4:12:92:b3:4d:
61:31:f2:8c:dd:aa:ba:44:bb:b2:ee:3d:53:77:03:
66:63:ca:08:76:cc:b2:75:6c:48:1e:42:84:b0:a6:
70:50:d9:28:f1:a6:e6:a7:ae:13:6c:2b:c4:19:ea:
2a:86:9d:49:2e:79:ae:06:f5:ef:d1:f6:29:35:86:
2e:3a:84:a0:8b:01:67:8e:1f:f8:f3:fe:4e:46:00:
35:7a:50:c7:32:92:a1:c3:1d:46:81:2f:4c:32:a7:
67:4b:41:8e:92:c4:ba:84:b6:ff:a1:bd:20:a5:24:
58:6b:f6:05:96:b2:98:ca:e8:2f:a7:60:8a:d7:54:
a4:27:78:66:32:ce:4b:af:69:60:3f:c3:a1:fe:b9:
a6:57:37:0e:5e:7f:93:cb:02:82:ff:f7:70:29:02:
42:93:04:ad:ee:44:ad:a1:cb:0e:84:02:54:0c:ba:
85:8e:9f:28:cc:00:5a:8a:dc:de:9e:57:23:f4:cc:
3a:3f:ff:fb:97:87:10:dc:3b:0f:04:2c:83:21:f8:
cc:b2:a1:e7:5e:5d:c1:ac:9c:5d:27:6f:8f:9c:15:
0b:63:04:1a:d8:bb:8f:f2:bc:4b:67:d9:12:7a:e3:
db:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:88:C3:27:95:22:4C:B3:08:CE:6E:3F:C4:5C:E0:7D:95:08:E9:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/2
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/2/CF88C32795224CB308CE6E3FC45CE07D9508E938.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:714::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211244
Signature Algorithm: sha256WithRSAEncryption
55:7e:5d:14:77:8f:ce:7b:64:cb:e6:aa:7e:c3:b4:6e:50:36:
75:30:48:4a:fe:32:75:df:09:16:38:f7:c8:1d:23:3a:0a:73:
cb:ae:4e:5d:b4:27:4e:3d:7a:b1:dd:36:d2:47:23:ce:7a:98:
cd:44:0d:a8:c5:bf:c2:ae:ab:98:f5:f5:87:eb:7c:7b:22:5c:
f7:84:74:51:f9:f1:79:f7:33:a5:a1:30:5e:af:dc:ea:a6:ba:
d3:cc:19:f1:3e:fc:38:2b:97:f0:f7:fe:e3:71:04:6f:5c:b2:
86:56:f9:a3:c7:c2:f0:50:7c:c9:5d:71:70:25:38:ba:09:2d:
f4:fc:c7:b3:0f:25:e8:ff:7a:3e:54:4f:fd:91:e0:b0:43:ac:
c8:bc:79:49:90:55:c7:8f:d8:77:6f:11:82:b7:ec:e1:b8:f3:
df:de:34:41:89:88:57:2d:17:bb:9b:b1:5d:6c:96:2a:82:5e:
3e:83:8a:26:35:e6:48:16:72:cf:08:ff:55:1c:4f:25:e3:29:
9a:18:0b:e6:c3:93:d6:9d:c8:76:f5:ad:af:50:12:12:5c:7f:
b5:2d:3f:ea:fd:5d:62:a3:5a:e1:f5:01:ee:34:69:f3:2a:16:
55:2f:d9:7f:b3:e0:87:a2:e4:ba:79:9f:10:86:ce:c8:f9:89:
68:73:95:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:14 2024 by rpki-client on console-fra.rpki-client.org