Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45i4SPu8_10u9lUkYptatbxhHYU.cer
File: 45i4SPu8_10u9lUkYptatbxhHYU.cer (raw, json)
Hash identifier: fFwKxfRYyeb91CG/FBhFnclfyKVy/C6CM+d6e/ETngs=
Subject key identifier: E3:98:B8:48:FB:BC:FF:5D:2E:F6:55:24:62:9B:5A:B5:BC:61:1D:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 752C5743E2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://nostromo.heficed.net/repo/1123981/0/E398B848FBBCFF5D2EF65524629B5AB5BC611D85.mft
caRepository: rsync://nostromo.heficed.net/repo/1123981/0/
Notify URL: https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before: Fri 01 Jan 2021 00:01:10 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: AS: 61317
AS: 210277
IP: 185.34.40.0/22
IP: 185.137.92.0/22
IP: 2a00:d1a0::/32
IP: 2a0a:4e80::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503255090146 (0x752c5743e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:01:10 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=e398b848fbbcff5d2ef65524629b5ab5bc611d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:f3:81:83:cc:26:44:4c:fc:75:08:78:7f:
67:18:08:9e:5a:bf:d0:6d:69:ef:e1:dd:23:31:4f:
37:54:c6:a9:04:2f:36:f0:09:d2:ea:f1:42:87:2d:
84:2f:95:64:15:c7:7e:d2:9e:8b:c5:04:29:9f:44:
a1:cf:81:96:71:17:06:01:59:9c:08:26:0e:ed:39:
bd:3a:79:68:48:9a:3a:c0:38:3b:db:df:06:dd:dc:
59:9f:9f:1d:6b:f7:84:a7:6c:f4:2c:f4:30:1a:e5:
ec:c2:fd:eb:1b:b8:0f:5a:b4:8b:7b:cf:0d:ff:1a:
8e:b9:57:b2:e8:e9:8b:16:f5:0b:11:6f:8c:ab:6c:
67:67:69:b0:3f:81:89:6b:01:6c:0b:eb:cd:49:a2:
68:03:a0:98:e1:4e:4e:c2:15:ec:13:f6:1a:fd:6c:
25:ab:32:0f:da:c3:47:3e:48:47:c2:28:7c:59:20:
e7:ba:dc:fb:fb:94:e0:1f:3a:9a:1a:3a:a9:25:68:
71:40:a6:6f:23:f7:43:40:c2:37:b4:ff:43:96:96:
8b:b1:fa:86:cc:3a:a3:ca:0c:3a:7b:38:63:5c:16:
d0:9c:30:a7:4a:99:ac:65:54:23:7a:80:df:3e:f0:
90:97:87:d5:3e:c1:52:15:8f:10:8e:6d:c6:43:ad:
8e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:98:B8:48:FB:BC:FF:5D:2E:F6:55:24:62:9B:5A:B5:BC:61:1D:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://nostromo.heficed.net/repo/1123981/0/
RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123981/0/E398B848FBBCFF5D2EF65524629B5AB5BC611D85.mft
RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.40.0/22
185.137.92.0/22
IPv6:
2a00:d1a0::/32
2a0a:4e80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61317
210277
Signature Algorithm: sha256WithRSAEncryption
83:f0:8f:4a:2d:77:10:bc:7e:33:b1:e3:90:6c:19:c4:0f:98:
a6:4d:2c:f3:90:27:2c:c2:c9:51:13:be:70:69:ab:f2:95:4e:
c3:3c:9b:d9:a6:9d:e9:ee:0b:69:88:55:77:01:39:b2:3c:6c:
e1:f4:74:c2:58:a3:40:ce:04:07:7a:9c:86:73:70:f3:2a:ee:
5b:a7:ec:51:99:61:77:76:79:81:63:63:6b:97:4a:9a:3d:4e:
df:ec:e7:73:78:c6:12:15:d0:23:75:a6:46:f4:79:88:b6:e2:
76:ba:ff:e8:99:d3:f9:f0:56:ca:35:2c:70:2e:b9:12:71:30:
f9:36:db:79:4a:5a:a8:0b:58:e4:95:ac:b1:53:4b:e7:8a:08:
34:3d:db:b2:9f:e3:cf:f8:e1:a8:17:32:3c:09:f9:a6:9a:26:
29:42:49:a1:d3:f0:03:a4:19:24:69:32:36:bd:55:4e:1b:df:
48:75:ad:d4:73:5c:00:7c:6d:34:8a:cc:17:db:ec:46:53:d2:
f8:b9:8a:66:e3:f7:aa:80:94:5c:cb:3c:21:86:95:ba:0e:f1:
8c:12:55:df:26:fd:6d:c6:12:49:ed:99:2e:13:9b:0a:33:72:
f5:88:39:33:57:d4:bf:5c:9f:b5:3b:24:b2:69:65:ce:a5:7a:
31:64:44:1d
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgIFdSxXQ+IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMDAxMTBaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGUzOThiODQ4ZmJi
Y2ZmNWQyZWY2NTUyNDYyOWI1YWI1YmM2MTFkODUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1NfOBg8wmREz8dQh4f2cYCJ5av9Btae/h3SMxTzdUxqkE
LzbwCdLq8UKHLYQvlWQVx37SnovFBCmfRKHPgZZxFwYBWZwIJg7tOb06eWhImjrA
ODvb3wbd3Fmfnx1r94SnbPQs9DAa5ezC/esbuA9atIt7zw3/Go65V7Lo6YsW9QsR
b4yrbGdnabA/gYlrAWwL681JomgDoJjhTk7CFewT9hr9bCWrMg/aw0c+SEfCKHxZ
IOe63Pv7lOAfOpoaOqklaHFApm8j90NAwje0/0OWloux+obMOqPKDDp7OGNcFtCc
MKdKmaxlVCN6gN8+8JCXh9U+wVIVjxCObcZDrY5DAgMBAAGjggKNMIICiTAdBgNV
HQ4EFgQU45i4SPu8/10u9lUkYptatbxhHYUwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCB
8AYIKwYBBQUHAQsEgeMwgeAwOAYIKwYBBQUHMAWGLHJzeW5jOi8vbm9zdHJvbW8u
aGVmaWNlZC5uZXQvcmVwby8xMTIzOTgxLzAvMGQGCCsGAQUFBzAKhlhyc3luYzov
L25vc3Ryb21vLmhlZmljZWQubmV0L3JlcG8vMTEyMzk4MS8wL0UzOThCODQ4RkJC
Q0ZGNUQyRUY2NTUyNDYyOUI1QUI1QkM2MTFEODUubWZ0MD4GCCsGAQUFBzANhjJo
dHRwczovL25vc3Ryb21vLmhlZmljZWQubmV0L3JyZHAvbm90aWZpY2F0aW9uLnht
bDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjA7BggrBgEFBQcBBwEB/wQsMCowEgQCAAEw
DAMEArkiKAMEArmJXDAUBAIAAjAOAwUAKgDRoAMFAyoKToAwHwYIKwYBBQUHAQgB
Af8EEDAOoAwwCgIDAO+FAgMDNWUwDQYJKoZIhvcNAQELBQADggEBAIPwj0otdxC8
fjOx45BsGcQPmKZNLPOQJyzCyVETvnBpq/KVTsM8m9mmnenuC2mIVXcBObI8bOH0
dMJYo0DOBAd6nIZzcPMq7lun7FGZYXd2eYFjY2uXSpo9Tt/s53N4xhIV0CN1pkb0
eYi24na6/+iZ0/nwVso1LHAuuRJxMPk223lKWqgLWOSVrLFTS+eKCDQ927Kf48/4
4agXMjwJ+aaaJilCSaHT8AOkGSRpMja9VU4b30h1rdRzXAB8bTSKzBfb7EZT0vi5
imbj96qAlFzLPCGGlboO8YwSVd8m/W3GEkntmS4TmwozcvWIOTNX1L9cn7U7JLJp
Zc6lejFkRB0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:03 2023 by rpki-client on console-ams.rpki-client.org