Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IvreyFkTnxM8inrYH-Vd5VaBrvY.cer
File: IvreyFkTnxM8inrYH-Vd5VaBrvY.cer (raw, json)
Hash identifier: ZENxY5k2KrCtF5kRM7sM5SJpSvLkBuwH8L4EdZWH5L4=
Subject key identifier: 22:FA:DE:C8:59:13:9F:13:3C:8A:7A:D8:1F:E5:5D:E5:56:81:AE:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0184AA002BF2BA800FFF1224691DE5A44672
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/e26656-6f37-4431-920c-510701041c88/1/IvreyFkTnxM8inrYH-Vd5VaBrvY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/e26656-6f37-4431-920c-510701041c88/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 24 Nov 2022 14:17:28 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 197050
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:aa:00:2b:f2:ba:80:0f:ff:12:24:69:1d:e5:a4:46:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 24 14:17:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22fadec859139f133c8a7ad81fe55de55681aef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:25:24:af:57:91:3a:d5:e4:a8:f5:85:5f:
d7:72:65:27:7b:cd:47:2f:cd:d1:54:d0:68:b9:ba:
7d:59:a2:65:54:0a:e8:0b:dc:a7:3d:84:ce:e7:65:
ed:e4:0a:f7:32:44:08:33:14:a6:be:b4:a7:a9:ed:
1b:8f:a3:43:5c:9a:87:36:e8:61:77:16:da:3b:11:
65:da:1f:b9:dc:c9:6e:fc:a5:c7:ab:1d:bc:10:83:
db:8a:9e:a6:dd:62:07:a0:6e:4e:b7:5a:62:31:95:
8b:08:24:30:88:6e:13:d2:45:86:bd:c3:0a:b4:f3:
41:48:bc:10:92:47:0b:72:f8:86:18:3b:f5:15:2a:
aa:ee:98:40:7b:bb:70:8f:5f:42:92:53:42:bf:86:
55:ef:03:70:e5:ef:f4:92:53:8b:98:6d:40:73:82:
1d:8e:96:eb:13:4e:8b:50:a7:7e:5d:eb:53:4e:09:
7c:19:e8:68:60:dc:67:6d:94:78:83:9f:1a:40:10:
93:71:e6:42:84:ac:45:fe:71:ee:d8:85:fe:a1:14:
33:cd:a9:8e:67:06:7e:e9:47:88:26:a0:9b:f7:57:
7e:88:1a:a7:33:73:6e:ba:f4:18:c7:c5:7f:db:a0:
ed:b2:24:83:60:1d:75:11:db:e3:56:99:0d:90:a5:
64:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FA:DE:C8:59:13:9F:13:3C:8A:7A:D8:1F:E5:5D:E5:56:81:AE:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e26656-6f37-4431-920c-510701041c88/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e26656-6f37-4431-920c-510701041c88/1/IvreyFkTnxM8inrYH-Vd5VaBrvY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197050
Signature Algorithm: sha256WithRSAEncryption
7e:e1:cc:b4:0e:a7:6e:fc:89:5c:e2:e5:fb:68:4a:44:c5:2b:
84:29:b8:ae:e5:fb:63:22:ef:7c:fc:ed:0f:0a:69:13:03:b4:
ab:f5:41:b1:4b:8c:89:f5:2b:36:e3:5e:3e:d2:b4:6b:c6:61:
c1:ac:96:bb:5c:45:da:7e:ff:61:65:cb:46:dc:78:14:48:2f:
70:15:5d:90:d4:2d:e1:4e:62:22:0a:a7:e2:3b:b5:e4:e8:4b:
09:4c:ef:20:57:b1:d0:bd:31:fe:3b:cf:e0:40:99:ff:ed:fe:
c5:2b:d4:a5:ea:e4:2a:83:a2:e0:c4:f3:77:2a:69:18:c8:e1:
30:9d:05:59:fb:6a:4c:7f:47:d7:69:76:e8:9c:04:42:a2:62:
a9:0a:d5:82:bf:9e:1a:80:c9:55:4b:cc:8e:30:e1:f4:3a:fb:
4a:f5:f3:f4:7c:7a:d9:7a:fe:ae:7c:78:c0:06:e8:07:52:d6:
ee:05:4b:bb:75:5f:5a:65:44:02:65:a5:fb:32:f8:29:eb:97:
48:9e:bf:e4:30:22:e1:5e:21:87:82:27:ce:8c:4d:8c:b0:ea:
eb:8d:26:5c:76:38:d6:95:70:de:c5:56:b2:3d:ab:2f:4a:1d:
69:b3:56:41:04:45:58:85:73:90:19:c9:31:8f:9f:ff:cf:7d:
52:70:c0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net