Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t9DjJGW768_RF3FpowLJoZGQ-jQ.cer
File: t9DjJGW768_RF3FpowLJoZGQ-jQ.cer (raw, json)
Hash identifier: sH8+T5DRgP8YAQIS0WlMV2GIqHeYhhVZJ9GOoPQuD/s=
Subject key identifier: B7:D0:E3:24:65:BB:EB:CF:D1:17:71:69:A3:02:C9:A1:91:90:FA:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01831279A883DF640EF971067F66386C008D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/12/B7D0E32465BBEBCFD1177169A302C9A19190FA34.mft
caRepository: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/12
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Tue 06 Sep 2022 11:05:06 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 204725
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:12:79:a8:83:df:64:0e:f9:71:06:7f:66:38:6c:00:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 6 11:05:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7d0e32465bbebcfd1177169a302c9a19190fa34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:86:d1:15:80:7b:bc:1c:c4:e2:45:b0:33:53:
0f:64:f6:71:d9:b9:ff:33:89:a9:5a:de:30:d4:13:
b1:37:a7:5a:83:ee:c5:04:54:9e:9f:a2:51:58:87:
a8:69:f6:6e:3a:d1:16:70:45:ff:da:cc:6a:e6:4b:
89:a9:41:65:59:01:00:f2:87:8b:a3:5e:e3:93:7a:
ca:67:d5:a3:60:97:48:2f:b4:cb:b4:79:b1:b3:34:
b2:67:14:84:1b:33:5e:9a:b6:75:38:14:36:df:53:
d4:a0:d4:79:23:c3:4c:80:48:fe:e2:4d:51:0c:90:
b8:47:ec:ae:2b:65:b7:85:25:df:83:94:b2:7d:a7:
a3:24:c3:e3:74:90:79:53:51:5c:6d:f2:91:76:71:
ad:5a:9f:81:94:45:31:65:43:b8:13:09:f0:a1:46:
ee:e2:5e:16:be:ce:0b:5a:f3:04:c8:e2:4d:e7:5f:
8e:fa:c0:9c:43:41:72:b6:92:2d:27:ab:b9:dc:33:
89:6d:ec:d0:ef:42:25:7b:c9:e0:a7:45:b6:bf:02:
a6:32:23:5b:5a:a7:1f:ad:30:ad:e2:6c:42:13:41:
c2:56:ae:ed:d6:96:12:5d:21:60:02:7a:de:b0:c0:
5a:a4:11:b3:96:ee:96:2c:27:2c:f8:22:47:50:8f:
eb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D0:E3:24:65:BB:EB:CF:D1:17:71:69:A3:02:C9:A1:91:90:FA:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/12
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/12/B7D0E32465BBEBCFD1177169A302C9A19190FA34.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204725
Signature Algorithm: sha256WithRSAEncryption
44:1c:3e:86:cd:1c:80:02:68:db:73:40:0b:1c:27:b2:7e:da:
4a:c1:d8:77:f2:a6:0e:22:50:e3:38:de:0c:04:a2:a0:ff:5d:
f3:95:3e:30:47:c7:a0:47:bb:37:fd:35:68:14:3f:8c:0a:06:
ec:da:42:e1:bb:af:6a:ce:9a:33:bf:02:6e:d7:59:87:70:a4:
67:05:b1:83:c4:00:3d:31:11:fa:b2:27:50:a3:fe:ca:bc:c0:
2d:71:50:e8:67:2f:c8:7c:e5:68:b1:bd:70:be:60:ef:bf:9f:
bd:19:98:14:02:19:cd:be:b9:71:f3:ef:15:d3:99:e6:35:4f:
8a:7e:90:4d:cb:24:28:d6:f3:01:eb:90:c9:10:40:33:2d:21:
4d:3d:f1:60:0f:fd:44:a3:c0:71:4c:b6:cb:fc:bd:47:6e:85:
19:51:90:14:fc:75:c2:2b:1b:36:ef:77:b6:77:97:0b:3f:8f:
ab:1f:0a:3a:44:22:07:c6:71:2f:b3:63:51:97:81:7a:c8:6c:
48:14:82:9d:a8:ed:26:fa:2d:7b:c9:b9:52:7c:41:c4:7f:b9:
f5:ab:2e:22:27:e7:24:84:86:38:d1:18:75:76:20:75:67:c3:
92:d4:b5:31:67:5c:73:28:dd:71:41:64:ef:78:0e:66:96:07:
17:1e:55:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:28 2023 by rpki-client on console.sobornost.net