Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zsetSgEGvFGbvETB09OCu2H0qf0.cer
File: zsetSgEGvFGbvETB09OCu2H0qf0.cer (raw, json)
Hash identifier: npiiFDwP7KkEus44AqeRnz+VaxqV2Sdo+czQd+FoVw4=
Subject key identifier: CE:C7:AD:4A:01:06:BC:51:9B:BC:44:C1:D3:D3:82:BB:61:F4:A9:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AA7D199A09
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/b0b9b8-d049-4562-b66e-d00ae30fd717/1/zsetSgEGvFGbvETB09OCu2H0qf0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/b0b9b8-d049-4562-b66e-d00ae30fd717/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:56:07 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 49623
IP: 193.169.46.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 732243270153 (0xaa7d199a09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:56:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cec7ad4a0106bc519bbc44c1d3d382bb61f4a9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:21:c8:d9:42:0b:f3:6f:27:61:37:da:cb:b7:
0b:bc:3a:00:eb:4f:66:6f:62:ea:93:45:f3:a3:ee:
30:50:8c:75:89:a0:36:43:3b:cb:b9:da:d6:a7:dc:
ac:0e:7b:d2:d6:d5:6e:68:aa:d4:d2:2a:03:36:86:
2f:4d:5b:b1:de:d0:6b:0f:ed:82:11:bb:f4:f8:e7:
b3:54:de:cc:66:1f:75:05:1e:5e:13:72:7f:0a:85:
f0:0f:63:bb:7e:30:55:5f:fa:bf:3e:1a:9d:b8:0f:
73:40:55:9c:a8:1c:d5:a6:29:b8:d6:cc:3c:af:ad:
bc:75:5f:51:bf:49:28:74:b5:d0:95:fb:63:cc:82:
1e:37:eb:dc:97:7c:88:e7:6a:04:ed:ad:8c:1f:b8:
eb:ea:4d:d0:22:95:59:41:ea:e5:5d:87:b4:64:bb:
ba:4a:5b:99:cd:b5:5b:e1:20:60:eb:0a:d1:23:a9:
44:21:87:23:7b:71:2a:f9:98:82:69:b5:45:ba:3f:
7e:14:68:2f:be:03:2e:78:bb:0d:6d:fa:28:98:d2:
b5:54:04:a6:15:2d:5a:72:48:b1:21:66:95:54:1e:
3a:d5:03:fe:63:63:d7:3e:6e:fb:84:4b:33:20:f3:
18:87:7d:60:ec:ba:8b:01:a7:81:04:a5:ff:e1:03:
0b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C7:AD:4A:01:06:BC:51:9B:BC:44:C1:D3:D3:82:BB:61:F4:A9:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b0b9b8-d049-4562-b66e-d00ae30fd717/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b0b9b8-d049-4562-b66e-d00ae30fd717/1/zsetSgEGvFGbvETB09OCu2H0qf0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.46.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49623
Signature Algorithm: sha256WithRSAEncryption
75:6f:7e:8a:ed:35:58:24:d5:00:6d:9b:85:e1:69:81:5a:0d:
0f:00:19:20:a0:6a:12:07:53:c3:95:ec:30:8d:16:42:22:c4:
a4:f2:60:08:ce:d6:6f:b0:2d:e4:9c:e8:3a:7b:a8:c9:c4:59:
9d:e0:5c:f4:02:1e:b3:c8:b3:27:fc:ed:a1:70:c9:45:c9:86:
e1:1b:7e:37:23:19:60:61:38:bb:ff:2c:19:b9:43:29:62:8c:
72:6d:10:3f:0e:49:79:da:c9:64:42:c4:10:6a:32:78:0e:28:
1d:60:76:5b:42:96:a8:69:8b:5f:61:1a:ca:2f:7b:ea:d5:1f:
1c:c2:e9:bc:46:7a:13:1c:b2:6e:51:4b:65:4a:31:22:b1:d9:
4e:f7:53:fd:47:5d:86:9a:e7:fe:8c:01:99:84:c6:e3:69:50:
d3:0e:72:d3:b7:c5:03:52:0b:5e:53:6e:a6:14:44:d8:9b:97:
9a:b4:f8:41:26:b5:39:aa:e0:ec:45:e6:90:79:0c:3e:ed:99:
3c:90:37:31:9c:a3:a5:0a:90:c9:a3:08:57:4e:f6:f5:f5:54:
d2:27:1d:6f:5a:e3:3a:fe:23:a2:45:f2:f1:04:e5:bb:e2:16:
ca:fb:fa:ee:c0:3e:0e:7c:e6:04:fd:2e:b1:a5:05:81:10:08:
ea:fd:ef:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:48 2024 by rpki-client on console-ams.rpki-client.org