Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zJKyNnIv4Q5MV-I77BXUNrYqKGI.cer
File: zJKyNnIv4Q5MV-I77BXUNrYqKGI.cer (raw, json)
Hash identifier: 1tquJrAYUWaI34VolJroLR7hoQHHIOWHNeDkAVYJ5oM=
Subject key identifier: CC:92:B2:36:72:2F:E1:0E:4C:57:E2:3B:EC:15:D4:36:B6:2A:28:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A185194C5F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/217ac9-3b6c-448b-b9cc-7384d8124670/1/zJKyNnIv4Q5MV-I77BXUNrYqKGI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/217ac9-3b6c-448b-b9cc-7384d8124670/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:57:26 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 42315
IP: 185.53.248.0/22
IP: 194.0.194.0/24
IP: 2a04:ccc0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 693722762335 (0xa185194c5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:57:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc92b236722fe10e4c57e23bec15d436b62a2862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cb:b8:83:2c:b9:7b:62:45:89:53:59:f5:af:
8b:03:4a:79:68:7e:18:2e:6a:fe:af:d4:ed:c2:79:
3c:67:7a:49:2b:57:14:6d:9c:48:b1:90:00:42:ce:
83:4e:ec:d1:03:c2:61:48:9f:24:f3:65:8e:9c:ec:
5b:74:8d:2d:72:df:7e:c6:bb:5c:fb:99:65:0d:5f:
8c:83:05:4f:36:c4:6a:aa:15:00:e9:92:e0:2a:06:
2c:2e:07:09:c3:bc:1d:83:7b:50:61:98:90:90:ef:
2b:88:55:42:f6:c6:1f:f7:d5:b3:71:c6:4c:e4:2e:
38:d6:a3:49:99:e3:04:92:74:74:7a:7d:10:3d:84:
a3:dc:42:86:f5:b1:e0:ac:4c:02:d0:e7:f0:0c:5a:
f1:b5:50:30:9d:5a:91:cc:ac:cb:04:44:8f:a7:0d:
18:e8:4b:ee:e3:9f:e1:99:9c:6c:d2:20:c2:1f:bb:
2d:1a:32:92:df:7c:47:3e:b8:ff:ca:78:2b:8b:9d:
0d:1c:d6:04:79:5e:fb:4c:52:e8:21:e8:f2:34:48:
cf:17:d7:0b:c3:77:aa:52:b7:34:49:f6:a7:d2:af:
84:41:64:cd:71:d9:4e:02:0a:cf:da:11:79:3f:2b:
15:7a:08:6f:df:e1:cb:a3:9a:bd:72:38:31:7f:e3:
01:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:92:B2:36:72:2F:E1:0E:4C:57:E2:3B:EC:15:D4:36:B6:2A:28:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/217ac9-3b6c-448b-b9cc-7384d8124670/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/217ac9-3b6c-448b-b9cc-7384d8124670/1/zJKyNnIv4Q5MV-I77BXUNrYqKGI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.248.0/22
194.0.194.0/24
IPv6:
2a04:ccc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42315
Signature Algorithm: sha256WithRSAEncryption
5f:b5:c0:bb:fd:4e:b2:d3:7e:7c:8d:7a:54:07:f4:ac:14:a0:
f9:26:cd:a1:1d:d7:42:ea:ff:db:0e:04:97:94:bd:56:f1:e7:
d3:a9:17:ba:0c:80:45:03:f7:23:4f:7e:da:95:5b:5b:af:80:
2c:b7:36:c8:07:f8:d6:86:95:c7:35:a8:eb:b7:a9:d2:ce:e2:
03:a5:07:73:a7:c9:20:dd:e4:a0:04:10:44:f7:5a:c3:ea:a7:
26:ba:1d:3e:b0:7b:17:3f:22:d7:d0:4c:14:c7:09:3e:c7:6c:
08:18:8c:75:36:36:34:68:1d:d4:a7:68:e3:13:a9:f1:a6:7c:
62:e5:6a:17:0d:4d:94:26:22:57:b9:ad:4e:55:d5:1f:6b:6a:
3b:88:1b:b9:90:ba:99:b3:97:d7:f6:56:09:eb:7e:42:a1:77:
2a:39:5f:d1:98:ab:bb:35:87:1d:a8:9b:c3:5c:7d:a5:61:d4:
5c:84:a7:64:92:ef:96:df:43:13:ed:5d:a0:6d:19:f5:f9:a4:
ee:f0:e7:67:c3:e0:12:98:1b:ba:7c:51:72:49:43:67:59:a4:
47:6a:8e:85:6f:ee:fa:b6:a2:49:a3:3c:51:d1:56:d1:7c:c6:
1a:e5:92:bf:63:f8:f4:8f:ae:61:99:78:20:56:09:31:9b:c0:
fa:e8:93:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:39 2024 by rpki-client on console-ams.rpki-client.org