Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M5IYYMxCRSMzqnmpcigNiElLcKg.cer
File: M5IYYMxCRSMzqnmpcigNiElLcKg.cer (raw, json)
Hash identifier: advMjaxPXnApGSZKEVPfu+dxt1M7mPkx4iR9Hm9TdAc=
Subject key identifier: 33:92:18:60:CC:42:45:23:33:AA:79:A9:72:28:0D:88:49:4B:70:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A91ECCC872
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/5b675b-fdd8-496e-aa1e-ba3692e95838/1/M5IYYMxCRSMzqnmpcigNiElLcKg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/5b675b-fdd8-496e-aa1e-ba3692e95838/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:08:05 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 209390
IP: 185.108.64.0/22
IP: 2a06:6280::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 726366210162 (0xa91eccc872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:08:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33921860cc42452333aa79a972280d88494b70a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fb:3b:63:40:74:b3:aa:7e:a2:f8:a0:b7:4b:
2d:6a:3b:c2:dd:db:aa:61:e4:9f:04:36:7b:7f:26:
50:3a:ce:9e:f5:a5:ab:43:ad:1d:1a:2c:36:62:e8:
a7:0c:2f:ed:e6:70:fd:60:05:e0:ab:75:5b:d3:3f:
b7:36:ef:27:91:e6:b3:48:f5:67:f5:78:a0:5f:37:
e7:54:86:dd:68:57:2b:f0:09:12:69:66:d1:29:9a:
1a:3a:25:95:10:53:bd:07:8b:30:89:dd:83:7b:5e:
c4:84:03:24:3c:d3:35:d4:a1:9e:06:68:84:fe:b6:
6b:d1:29:5f:01:c9:09:d3:6e:42:07:12:63:89:43:
08:55:37:79:1a:d4:e7:26:40:ac:70:fc:6a:8d:ba:
94:38:9c:db:66:05:e3:54:42:1b:00:1f:24:44:ab:
bd:05:88:69:09:08:c1:6b:29:21:8a:4a:5e:c2:7d:
00:e4:b0:2d:de:14:49:63:1f:3d:e2:18:06:4e:be:
14:d7:7d:e8:31:ab:96:63:27:55:e3:db:46:33:80:
f8:c4:99:d0:a9:1d:91:ea:f2:d8:24:14:9f:ce:84:
00:aa:f9:14:bd:b5:19:2f:1e:a2:ee:c4:1f:2b:31:
7d:33:0b:b8:6d:bf:ea:51:d4:ff:18:f8:04:1b:a8:
ef:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:92:18:60:CC:42:45:23:33:AA:79:A9:72:28:0D:88:49:4B:70:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/5b675b-fdd8-496e-aa1e-ba3692e95838/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/5b675b-fdd8-496e-aa1e-ba3692e95838/1/M5IYYMxCRSMzqnmpcigNiElLcKg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.64.0/22
IPv6:
2a06:6280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209390
Signature Algorithm: sha256WithRSAEncryption
5d:c6:bb:d8:ee:6d:a5:7a:95:e5:c9:86:9c:a6:a6:99:66:00:
6a:a9:a2:44:fe:a4:60:47:fb:9b:e5:1a:54:79:20:4b:48:53:
54:21:e1:7b:d0:39:4c:c9:c7:b4:01:db:cb:b6:88:56:4b:30:
5b:7f:fb:8f:06:89:3f:9f:00:fa:90:ae:fe:65:2f:73:c6:5e:
46:fb:4f:55:83:03:4b:88:f4:83:98:fb:19:c5:0e:58:38:0b:
31:3f:5c:1c:e9:f3:65:03:88:3f:bf:07:50:d7:18:6b:69:06:
aa:20:18:10:4e:80:0a:4f:39:bb:71:73:53:9f:b1:a5:2f:fb:
71:ba:2e:cf:9d:dc:02:26:95:7a:05:f2:76:ae:71:8e:54:05:
b7:62:a5:99:3c:6d:74:10:89:0f:f4:70:c2:ca:26:45:4c:35:
90:d4:27:76:09:30:5b:b2:67:df:04:39:9f:39:1f:fb:d4:d5:
94:f9:d1:22:ea:9f:55:e8:6b:30:82:f8:c6:2e:45:61:d0:c1:
50:b6:ed:9e:0f:10:be:79:98:af:8c:68:c3:c7:90:d5:a5:d3:
bd:ce:2a:63:18:d9:d6:64:ac:df:0c:64:ef:41:a4:41:27:46:
20:59:52:37:74:7c:e7:fa:28:e7:3c:d4:49:eb:15:9f:1c:5e:
f9:d5:43:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:56 2023 by rpki-client on console.sobornost.net