Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kbvFHkVBz7tQT_XvKjlt9qVLXm0.cer
File: kbvFHkVBz7tQT_XvKjlt9qVLXm0.cer (raw, json)
Hash identifier: yMFOLep+2InpjiO+t+enQhwiexiegafGMti60SkFbHI=
Subject key identifier: 91:BB:C5:1E:45:41:CF:BB:50:4F:F5:EF:2A:39:6D:F6:A5:4B:5E:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 99CB9FA63D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/kbvFHkVBz7tQT_XvKjlt9qVLXm0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:01:30 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 50129
IP: 31.44.144.0/20
IP: 31.222.96.0/19
IP: 178.239.240.0/20
IP: 185.30.196.0/22
IP: 185.215.0.0/22
IP: 2a03:e680::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660546233917 (0x99cb9fa63d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:01:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91bbc51e4541cfbb504ff5ef2a396df6a54b5e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:d8:4f:05:c3:06:73:9b:cb:d4:46:b8:df:
dc:d9:39:8e:11:45:66:c8:69:ee:45:fc:11:64:4c:
88:74:02:57:02:6e:b5:f2:43:ec:13:01:8f:9e:f3:
4a:25:8c:1e:cd:af:71:7d:0a:f3:64:6c:61:6b:c8:
31:b1:3d:dc:ff:75:eb:43:79:21:9f:47:fa:6d:bf:
8f:42:fe:ef:58:4d:c8:ac:89:82:7e:1a:ec:06:ad:
20:a9:7d:14:08:26:2e:c6:d6:47:fa:11:fa:0e:a1:
80:57:be:33:50:d4:10:3b:c9:1a:44:08:ad:57:b4:
30:80:9d:e3:12:ae:30:88:cd:f3:74:ce:c3:d8:bf:
e3:e8:79:de:cd:a4:7c:c4:8d:8b:f6:24:32:76:fa:
73:00:2e:96:6c:45:7d:75:26:96:83:9a:43:e8:1b:
ed:a7:13:83:10:b4:75:e7:1d:52:a7:ad:65:89:42:
32:48:1e:71:be:67:40:e2:1a:ce:56:15:87:e3:c2:
8a:a6:5b:a3:ab:2c:12:3f:00:bf:69:26:0b:f9:9c:
50:a3:e6:ef:1a:7c:e9:fb:e0:45:65:b6:c0:31:6c:
78:93:00:69:f9:b0:50:83:b7:b9:de:c7:24:12:d0:
67:12:3f:7f:a7:9c:35:06:46:cf:22:e8:ae:9e:2d:
c1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BB:C5:1E:45:41:CF:BB:50:4F:F5:EF:2A:39:6D:F6:A5:4B:5E:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/kbvFHkVBz7tQT_XvKjlt9qVLXm0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.144.0/20
31.222.96.0/19
178.239.240.0/20
185.30.196.0/22
185.215.0.0/22
IPv6:
2a03:e680::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50129
Signature Algorithm: sha256WithRSAEncryption
39:b1:49:58:6b:ae:88:7e:b9:2c:cb:76:56:9a:c0:8a:b1:b4:
ef:2a:e5:cb:33:32:fb:ba:fa:3e:3a:06:8d:1d:c6:5f:13:51:
e1:c4:78:ac:65:d0:ae:26:3e:ed:bc:07:f6:b4:94:09:27:86:
ce:a7:42:5c:ea:f9:58:56:e6:4b:c3:4b:6a:93:f1:10:aa:8a:
68:3d:58:a0:32:b9:fb:82:5e:24:76:a2:60:da:3c:fd:8f:cd:
58:74:6d:99:64:e3:7f:9a:a5:23:f0:4b:65:ba:34:f5:99:42:
36:cd:26:0c:77:91:7e:cf:dd:00:1d:2b:62:a4:82:73:9f:1c:
1a:ed:c6:25:64:66:61:fc:6c:bb:62:d4:a7:59:b3:e0:b4:a8:
35:67:9f:cf:5d:f1:84:ce:8c:49:a6:10:78:46:93:ca:c0:83:
e1:67:e7:5e:7c:a7:b4:3c:4e:d5:0f:a0:9e:94:2a:cd:98:f5:
73:cd:a8:31:54:aa:f8:d6:40:55:46:e8:e8:93:30:84:cb:ee:
14:48:d9:68:b9:9d:f1:f5:43:96:3a:aa:09:76:41:b1:be:8f:
9f:fb:f8:06:71:73:7a:f1:66:44:5d:b4:f5:86:74:58:28:81:
69:bd:55:87:96:c2:81:16:a0:51:cd:30:e3:5d:07:54:1a:86:
46:f7:b4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:55 2023 by rpki-client on console.sobornost.net