Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GmpR49glpnQA19BSegodF-YFtGQ.cer
File: GmpR49glpnQA19BSegodF-YFtGQ.cer (raw, json)
Hash identifier: sdcSuJDBpsXbASQEG9z/gqhyuK2fKvYvtMLC2w4Mtlo=
Subject key identifier: 1A:6A:51:E3:D8:25:A6:74:00:D7:D0:52:7A:0A:1D:17:E6:05:B4:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 98B67D7146
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/8/1A6A51E3D825A67400D7D0527A0A1D17E605B464.mft
caRepository: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/8
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Sat 01 Jan 2022 00:01:04 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 210563
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655896703302 (0x98b67d7146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:01:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a6a51e3d825a67400d7d0527a0a1d17e605b464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2a:85:3f:f7:89:6c:01:e9:58:d1:ad:5f:35:
fe:1a:10:3e:6f:88:21:e6:01:79:89:d2:e8:6a:75:
e9:2b:d3:27:60:75:5f:1d:99:c1:a3:2f:88:1a:8f:
43:d8:02:f6:b8:52:ce:eb:f0:93:d2:60:5a:7a:97:
09:88:0f:5d:8a:6b:fb:39:ae:6b:fc:0c:7f:be:d0:
e9:ff:d7:e8:64:b2:47:fa:3b:be:e5:df:ca:d0:f3:
3f:c8:93:0b:4e:6e:0f:9c:9f:ff:71:13:02:f1:bb:
72:fb:4d:db:95:77:e9:56:a1:bd:5e:91:63:51:bd:
e7:de:fb:fa:fc:75:fc:67:00:bb:d8:b4:ca:30:04:
60:8c:0d:3e:ff:8a:27:df:74:0a:71:4a:04:6c:2e:
90:01:20:c6:fc:07:5e:71:f9:b2:ee:d5:0d:23:4a:
74:7d:73:69:79:34:5b:45:28:23:c1:91:ab:43:61:
b1:65:fd:be:c0:f9:18:26:c2:2d:b5:8d:73:b0:f6:
fb:de:cd:b1:9c:09:15:ba:a5:b6:ae:9f:16:0a:e7:
b5:8a:e8:02:2a:cf:b0:f2:18:19:9e:00:30:31:1d:
c6:b6:ae:38:5c:ef:47:f2:d6:2f:21:b1:ac:88:89:
c1:c5:8e:4d:40:4e:78:c7:20:62:24:4d:9a:b5:a2:
cc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6A:51:E3:D8:25:A6:74:00:D7:D0:52:7A:0A:1D:17:E6:05:B4:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/8
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/8/1A6A51E3D825A67400D7D0527A0A1D17E605B464.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210563
Signature Algorithm: sha256WithRSAEncryption
19:56:71:25:99:19:d0:f8:c9:69:da:c7:93:d3:ac:8a:94:c7:
97:36:0b:b1:89:9c:67:58:c5:8d:6c:38:2b:00:1b:74:dc:f7:
4e:9f:a5:79:92:ce:00:8f:81:3c:b9:8e:43:91:eb:14:4c:ed:
6d:ee:48:48:37:9f:86:c1:91:d9:6d:82:d2:ca:f1:64:c6:40:
f2:ac:ee:e1:bc:75:b0:a6:79:b7:8f:c0:02:ad:dc:83:30:ac:
18:be:fc:72:bd:8c:25:f7:8d:ed:59:9f:e4:2c:1f:8e:c2:69:
d3:53:52:e0:a8:c8:45:99:f0:22:94:42:1c:d3:26:36:df:62:
78:60:53:ef:cb:62:e8:44:20:a0:d9:2c:70:42:4a:59:d7:02:
fa:7b:8d:de:2e:53:d8:48:bb:25:f4:e6:71:ee:36:39:02:b8:
d8:ae:45:2c:94:9f:31:35:9a:b3:f4:d1:be:3b:24:94:2e:78:
0e:8c:c9:42:42:52:21:26:38:d7:9a:2a:09:8b:02:78:f0:ec:
67:d6:cc:3d:b1:33:2e:6a:e3:c0:00:a0:d7:ac:c3:8b:fb:d6:
49:e9:e2:34:7e:22:87:f0:64:ce:06:3f:e6:57:4a:2d:fb:65:
f3:fd:fd:6c:62:7a:a7:0f:8f:55:52:62:c4:37:aa:1e:e8:b8:
75:09:20:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:22 2023 by rpki-client on console.sobornost.net