
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Mu516kmdolzdtxfNi46m8DDpQ8g.cer
File: Mu516kmdolzdtxfNi46m8DDpQ8g.cer (raw, json)
Hash identifier: D5Ptfe2SBlX5qmggU1OondP7ODXsQDYzqq15bkP3OXg=
Subject key identifier: 32:EE:75:EA:49:9D:A2:5C:DD:B7:17:CD:8B:8E:A6:F0:30:E9:43:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A988D32FAE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/e1548a-01fb-44d9-a4c3-010eaa33318c/1/Mu516kmdolzdtxfNi46m8DDpQ8g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/e1548a-01fb-44d9-a4c3-010eaa33318c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:58:20 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 200363
IP: 91.197.232.0/22
IP: 185.209.164.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 728145014702 (0xa988d32fae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:58:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32ee75ea499da25cddb717cd8b8ea6f030e943c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:80:fe:5a:61:50:b9:13:c3:66:04:5f:bf:40:
86:f7:6e:05:07:25:ae:7b:5e:39:59:fd:6e:d9:0f:
18:d3:36:14:74:42:a8:72:50:3b:57:6c:70:08:6b:
73:05:5c:60:95:bf:03:f1:e3:f8:40:57:f4:5c:93:
80:ba:5d:79:d4:7d:ac:6a:0b:9c:e4:c7:73:26:4b:
9c:90:bd:72:cc:18:48:6d:24:f3:ff:6d:7a:8e:d3:
56:92:13:25:da:77:85:ab:2a:91:d2:4b:39:86:3b:
6f:b0:63:60:a5:ee:aa:a1:67:9b:eb:5a:b5:ee:9f:
72:b4:44:83:c8:6c:e2:83:28:ff:e3:ad:10:86:51:
7c:e8:1a:48:02:a0:20:8a:bc:8a:b9:39:58:44:91:
b6:21:57:e4:f1:06:50:e7:3a:e2:6a:79:e9:11:65:
1b:57:f7:e0:81:d0:ea:82:d9:2b:2d:df:ff:8f:10:
44:db:18:c9:7a:c1:f3:1c:39:de:46:3a:75:a3:a0:
11:f7:dc:37:66:c3:b9:c3:f6:07:2b:ca:ef:dd:c0:
22:ca:6c:78:0d:e5:38:80:4a:87:20:68:39:2b:d9:
cc:f9:bf:36:b1:53:47:51:a6:eb:89:10:4b:a1:ec:
18:7e:01:b8:76:b4:00:d8:bd:4c:5b:c8:7e:57:e2:
cf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EE:75:EA:49:9D:A2:5C:DD:B7:17:CD:8B:8E:A6:F0:30:E9:43:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e1548a-01fb-44d9-a4c3-010eaa33318c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e1548a-01fb-44d9-a4c3-010eaa33318c/1/Mu516kmdolzdtxfNi46m8DDpQ8g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.232.0/22
185.209.164.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200363
Signature Algorithm: sha256WithRSAEncryption
4d:05:d1:83:97:68:bb:bd:26:79:9b:c5:09:89:2b:35:c8:ed:
17:9f:c0:3c:0f:ba:41:af:08:ea:e4:21:31:42:c2:90:57:78:
a6:34:b2:5c:30:5d:cf:16:c5:02:3d:29:b0:a4:be:79:ae:54:
dd:64:df:d7:a1:b9:39:6e:06:ce:47:31:8d:db:19:fa:52:c5:
cd:2e:94:89:73:b1:bc:73:b5:cd:78:f3:c8:1a:1f:3a:46:df:
7b:87:26:f1:c2:89:ec:76:38:94:3c:57:92:a8:1d:8d:07:75:
db:45:7d:e4:43:b8:36:7e:8a:3f:c6:1a:a6:57:f3:92:45:4d:
d4:84:68:17:0e:c7:c4:a2:7f:56:5c:a2:d2:9a:15:c6:8e:c1:
5e:a3:93:00:ff:80:16:21:ad:93:55:06:ec:5c:ad:5d:b9:6e:
7f:bc:03:3f:bf:4f:e4:e5:0c:a6:de:79:88:fd:8c:b0:f8:fb:
ef:96:5a:b0:e0:27:85:00:7a:60:11:17:7e:62:dd:68:17:f8:
88:78:ab:a6:99:ee:3d:52:49:e9:91:86:5a:26:0e:94:e3:7a:
54:d7:af:eb:2c:7c:1f:bb:ab:4d:53:8f:4c:c7:0d:59:df:cb:
76:22:43:79:d1:30:55:25:74:47:bd:2a:c6:7f:7c:f2:34:ef:
65:65:77:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:01 2023 by rpki-client on console.sobornost.net