Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-wi_t_NvCR3idEpyRh5NgB7n7bQ.cer
File: 1-wi_t_NvCR3idEpyRh5NgB7n7bQ.cer (raw, json)
Hash identifier: u4Sw6jlJS0toB1FxKW4n6j2BAOpxyLYFO84jVhmBiCg=
Subject key identifier: FB:08:BF:B7:F3:6F:09:1D:E2:74:4A:72:46:1E:4D:80:1E:E7:ED:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0183AD2C65C80C77AEE8C978E78E6C912838
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/9baf4f-a79c-4a92-b7c7-06a4795f52e5/1/1-wi_t_NvCR3idEpyRh5NgB7n7bQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/9baf4f-a79c-4a92-b7c7-06a4795f52e5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 06 Oct 2022 12:01:51 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.239.190.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ad:2c:65:c8:0c:77:ae:e8:c9:78:e7:8e:6c:91:28:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 6 12:01:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb08bfb7f36f091de2744a72461e4d801ee7edb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:da:50:03:9c:11:05:0a:09:4d:4f:bb:fd:
91:ec:f2:b8:00:af:00:10:f9:22:be:2a:91:dc:d8:
9c:e2:c1:76:1c:5a:07:77:0b:21:57:b9:a7:39:89:
2d:8e:28:b8:ba:7c:71:71:9b:f3:12:49:df:62:0f:
be:9b:7d:32:cd:0f:4c:bb:bf:5d:05:79:d5:11:f3:
8e:b9:52:de:35:cb:c3:27:6a:8c:5c:4c:a7:e0:0d:
f8:91:fa:c0:79:d4:ff:d7:01:07:5c:6c:7f:09:63:
87:32:96:4e:fb:11:ac:d9:b6:12:0c:e4:4f:a4:55:
b7:ec:f4:d4:8f:95:f0:f9:12:63:8f:9c:f1:f1:b7:
0c:ef:b4:79:db:80:25:1f:7b:c7:9a:df:cd:ce:70:
44:a5:4d:8a:1a:d7:fb:03:f0:c1:a9:fe:c0:a8:fa:
46:02:86:5f:f8:55:9d:1b:72:6e:f2:0f:2c:27:45:
09:7d:c3:fe:35:83:67:10:3b:20:95:79:bd:c5:49:
52:d4:c2:00:be:9b:67:55:57:b8:a1:77:a1:40:30:
74:9a:13:84:59:b3:98:e5:85:30:88:89:b8:0c:dc:
4e:5e:93:7e:90:fe:35:15:a1:11:b2:42:14:e8:30:
8e:35:0d:6e:10:fe:4d:ba:87:e8:27:2d:f1:49:51:
9d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:08:BF:B7:F3:6F:09:1D:E2:74:4A:72:46:1E:4D:80:1E:E7:ED:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9baf4f-a79c-4a92-b7c7-06a4795f52e5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9baf4f-a79c-4a92-b7c7-06a4795f52e5/1/1-wi_t_NvCR3idEpyRh5NgB7n7bQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.190.0/23
Signature Algorithm: sha256WithRSAEncryption
92:93:54:e0:23:7e:af:c6:7f:ea:22:c5:c3:08:b4:0f:76:0d:
17:39:e5:1c:81:fc:ea:80:9f:8a:02:fc:7e:b7:ce:cf:9f:10:
3d:f5:a1:49:95:be:27:6a:04:0d:1b:68:0b:ce:f8:59:5a:69:
f4:7b:bb:1f:24:69:fc:78:b5:8d:8b:2b:5f:ad:c6:a4:ec:b3:
8d:db:42:9e:ef:d1:16:82:88:a5:65:f3:78:1f:7a:9c:3c:39:
8c:c2:be:b5:86:92:e2:a8:38:8c:d8:e5:a6:21:68:f7:0b:2c:
e1:6c:af:4b:8e:92:5c:b0:91:22:0e:6a:a2:a1:38:ab:84:13:
3b:cc:d9:31:d4:44:9e:3e:a4:1a:73:da:34:31:db:93:43:e8:
91:27:c6:ce:dd:d9:b7:01:ff:f4:c1:2c:90:5f:b8:aa:cc:f6:
b3:b1:33:f8:80:6c:e4:3f:57:c1:46:40:ed:08:73:c0:6c:54:
c9:2d:84:60:f4:3a:e7:64:a7:02:f0:fa:60:6f:09:e2:34:54:
0c:b7:be:18:72:58:6e:86:ac:6c:ab:32:fe:6d:d6:38:3e:5e:
98:20:7f:30:7b:9d:cc:71:9c:cf:2d:ce:b2:1e:42:6b:5a:30:
f5:14:a7:41:d6:38:f8:a0:d2:1b:ce:83:c2:cd:92:86:61:13:
b2:98:f5:51
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAYOtLGXIDHeu6Ml4545skSg4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjIxMDA2MTIwMTUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjA4YmZiN2YzNmYwOTFkZTI3NDRhNzI0NjFlNGQ4MDFlZTdlZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqovaUAOcEQUKCU1Pu/2R7PK4AK8A
EPkiviqR3Nic4sF2HFoHdwshV7mnOYktjii4unxxcZvzEknfYg++m30yzQ9Mu79d
BXnVEfOOuVLeNcvDJ2qMXEyn4A34kfrAedT/1wEHXGx/CWOHMpZO+xGs2bYSDORP
pFW37PTUj5Xw+RJjj5zx8bcM77R524AlH3vHmt/NznBEpU2KGtf7A/DBqf7AqPpG
AoZf+FWdG3Ju8g8sJ0UJfcP+NYNnEDsglXm9xUlS1MIAvptnVVe4oXehQDB0mhOE
WbOY5YUwiIm4DNxOXpN+kP41FaERskIU6DCONQ1uEP5NuofoJy3xSVGd3QIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFPsIv7fzbwkd4nRKckYeTYAe5+20MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkLzliYWY0
Zi1hNzljLTRhOTItYjdjNy0wNmE0Nzk1ZjUyZTUvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvOWJhZjRm
LWE3OWMtNGE5Mi1iN2M3LTA2YTQ3OTVmNTJlNS8xLzEtd2lfdF9OdkNSM2lkRXB5
Umg1TmdCN243YlEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAcHvvjANBgkqhkiG9w0BAQsFAAOCAQEAkpNU
4CN+r8Z/6iLFwwi0D3YNFznlHIH86oCfigL8frfOz58QPfWhSZW+J2oEDRtoC874
WVpp9Hu7HyRp/Hi1jYsrX63GpOyzjdtCnu/RFoKIpWXzeB96nDw5jMK+tYaS4qg4
jNjlpiFo9wss4WyvS46SXLCRIg5qoqE4q4QTO8zZMdREnj6kGnPaNDHbk0PokSfG
zt3ZtwH/9MEskF+4qsz2s7Ez+IBs5D9XwUZA7QhzwGxUyS2EYPQ652SnAvD6YG8J
4jRUDLe+GHJYboasbKsy/m3WOD5emCB/MHudzHGczy3Osh5Ca1ow9RSnQdY4+KDS
G86Dws2ShmETspj1UQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:26 2024 by rpki-client on console-fra.rpki-client.org