Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XgnAoHQRyUcw4NLy2girl5Y621s.cer
File: XgnAoHQRyUcw4NLy2girl5Y621s.cer (raw, json)
Hash identifier: 1bLOVrbfG2MnoguJKWsH6eHVD/XsRKeXB85T49yVsBg=
Subject key identifier: 5E:09:C0:A0:74:11:C9:47:30:E0:D2:F2:DA:08:AB:97:96:3A:DB:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9D9EB983DC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/XgnAoHQRyUcw4NLy2girl5Y621s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 04:52:31 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 8935
AS: 8954
IP: 185.116.12.0/22
IP: 193.105.183.0/24
IP: 212.19.192.0/19
IP: 212.26.192.0/19
IP: 217.8.96.0/20
IP: 2001:67c:21b4::/48
IP: 2001:6e0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676972823516 (0x9d9eb983dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:52:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e09c0a07411c94730e0d2f2da08ab97963adb5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:f6:42:ce:c4:9f:70:7f:0f:58:13:08:33:
9b:ae:9a:38:fc:46:e9:3d:e4:d3:ba:ad:2c:a6:40:
f2:df:d8:14:f5:ad:81:4a:1c:bf:7b:44:6e:73:33:
36:9e:a7:1c:ef:fa:7e:ff:6a:67:52:67:ad:31:1f:
e5:20:5e:bc:c2:d1:d8:d2:1e:c6:d4:02:d4:82:d1:
e7:13:bf:7c:16:f3:31:46:fe:bc:1d:bf:30:fe:2d:
34:28:13:d4:70:95:34:36:77:50:08:f9:aa:32:33:
31:5a:7a:a2:23:72:08:02:4d:03:55:e2:ca:07:89:
76:7f:2f:c8:88:58:a1:1e:11:43:8a:cd:5d:1c:03:
dd:0f:48:c9:29:66:d3:89:da:62:c8:97:0f:74:da:
03:ca:2f:6d:37:79:80:cd:2d:d8:45:06:5a:7f:59:
d1:96:e4:30:50:51:8b:e4:b5:4c:79:fb:e1:75:f3:
a8:39:38:cd:29:52:41:e5:5d:ae:36:51:55:16:86:
4a:ac:78:e0:32:06:7e:02:7e:e0:b8:cd:86:fd:b6:
f8:d8:7b:82:07:49:77:e8:80:dc:33:f3:91:34:d2:
72:45:7c:26:fb:02:f8:f5:c5:69:13:b3:3c:5a:a1:
52:93:62:4f:19:f5:25:90:7b:f6:4c:a9:59:31:64:
0f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:09:C0:A0:74:11:C9:47:30:E0:D2:F2:DA:08:AB:97:96:3A:DB:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/XgnAoHQRyUcw4NLy2girl5Y621s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.12.0/22
193.105.183.0/24
212.19.192.0/19
212.26.192.0/19
217.8.96.0/20
IPv6:
2001:67c:21b4::/48
2001:6e0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8935
8954
Signature Algorithm: sha256WithRSAEncryption
49:b3:06:08:02:c3:a5:c8:60:ac:ec:f2:0d:d1:9a:29:f6:b3:
cc:55:1a:d2:39:9e:91:c1:72:cd:ae:92:87:3c:63:90:05:c9:
de:e5:a7:1c:e5:ee:cd:59:10:58:8d:c3:bd:b4:a7:3a:15:1d:
29:ec:b7:b8:31:e8:5c:0f:71:6d:4b:5d:9c:c4:dd:a6:99:34:
88:ae:74:78:c4:44:f2:de:21:b0:11:73:0d:cc:7f:c5:04:56:
2e:a7:83:15:df:ed:c3:46:76:64:a0:24:ae:98:2c:85:20:6f:
45:53:f8:69:78:17:e3:f5:3c:19:4f:79:54:8c:29:8c:17:fb:
b4:09:67:60:95:17:35:a7:a6:4c:13:f3:5e:61:45:d6:0c:35:
0d:39:09:73:b8:1b:15:89:6c:4d:b2:c8:cb:26:b7:b3:de:68:
67:2a:28:65:5a:34:c9:56:50:70:bc:da:60:1f:58:ce:7b:8a:
0a:d2:75:77:a5:58:85:d6:8f:22:19:44:b0:55:92:4c:04:c7:
20:49:43:f8:2e:f4:00:82:c1:9f:c8:bd:64:50:91:5c:32:8e:
32:4d:2f:87:f2:79:ff:52:00:99:bf:90:f8:b5:14:c2:a4:30:
bb:6f:01:a6:0d:d4:c6:d7:d2:c2:df:9b:92:88:b9:8b:b4:07:
cb:50:4e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:44:12 2023 by rpki-client on console.sobornost.net