Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AVm2wZLrH3KFBFJT7m1S5mjyRqs.cer
File: AVm2wZLrH3KFBFJT7m1S5mjyRqs.cer (raw, json)
Hash identifier: 7lahwfharCIDzIB7q1USA/fCZMm2LJgbCAeAUGDglJM=
Subject key identifier: 01:59:B6:C1:92:EB:1F:72:85:04:52:53:EE:6D:52:E6:68:F2:46:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7545BD96FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://nostromo.heficed.net/repo/635291/0/0159B6C192EB1F7285045253EE6D52E668F246AB.mft
caRepository: rsync://nostromo.heficed.net/repo/635291/0/
Notify URL: https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before: Fri 01 Jan 2021 00:02:28 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 185.158.100.0/22
IP: 2a0a:b200::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503681226491 (0x7545bd96fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:02:28 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=0159b6c192eb1f7285045253ee6d52e668f246ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:56:11:2f:3e:b8:a0:be:8a:cb:08:54:b2:7c:
08:f9:1d:00:2f:15:f4:ae:af:71:fc:5a:c7:ef:48:
5c:a2:5d:e6:c9:c6:5d:f9:f3:3a:9b:7e:9c:35:f2:
a2:fd:cf:cc:4e:6c:28:39:cd:47:77:db:53:63:51:
08:97:54:d0:72:d7:1a:d2:9f:b8:15:9b:db:25:c5:
9d:bb:3d:b5:a7:67:13:1a:68:a8:a0:42:d7:b6:11:
b8:13:42:14:ed:a9:c5:a2:d9:9d:9d:ce:d7:a1:c1:
2f:b9:ca:ed:ec:17:be:0b:bc:47:9a:2a:5f:27:05:
2c:41:3a:cf:b4:cf:2c:d2:95:32:1d:b9:d4:6e:47:
80:7d:e4:76:e6:21:d4:d4:e3:a0:c7:ce:62:38:9a:
a3:9b:e3:4d:98:eb:3c:25:cd:1f:a5:d6:3e:ab:e0:
26:ce:f8:df:25:3f:c7:ca:b8:51:5c:fe:86:15:e1:
93:6a:97:71:1a:fb:b3:6e:2f:50:b4:aa:ab:62:4c:
46:42:a0:dd:f3:55:39:46:01:1c:29:61:85:2f:ff:
b0:09:13:eb:c3:c1:f1:26:e1:26:f0:73:30:e7:c3:
89:f9:1c:a0:4e:6b:55:ec:ec:7a:05:93:b4:8c:8d:
c2:25:1a:cd:53:c5:7d:9b:ea:88:41:54:5a:7d:fa:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:59:B6:C1:92:EB:1F:72:85:04:52:53:EE:6D:52:E6:68:F2:46:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://nostromo.heficed.net/repo/635291/0/
RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/635291/0/0159B6C192EB1F7285045253EE6D52E668F246AB.mft
RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.100.0/22
IPv6:
2a0a:b200::/29
Signature Algorithm: sha256WithRSAEncryption
97:fe:eb:64:45:cf:19:d8:47:78:4d:dc:4e:cb:5b:4a:06:f8:
ea:bc:2b:b0:b4:e0:12:ff:f2:64:04:7c:fc:48:f7:3a:4e:ca:
0c:55:aa:a3:32:f4:1b:6f:67:34:65:54:29:26:09:ce:0e:ce:
a4:43:a1:99:04:15:44:8b:f3:b0:ec:50:bc:b6:97:c1:e3:55:
a9:79:c2:c1:22:59:1c:4e:15:2d:03:fc:e5:84:bd:c4:0a:92:
78:92:da:00:29:94:59:16:30:fc:fb:03:37:49:ac:fe:7e:f3:
17:b4:89:82:46:7c:aa:ac:96:86:ec:1d:8e:44:b1:60:7a:8a:
4e:c1:e6:46:2f:3d:e8:39:9b:1c:56:75:4c:60:ce:22:d5:19:
9b:7a:07:2b:22:9b:20:08:52:1c:2a:c8:9c:35:cb:79:b0:80:
93:06:25:d8:e2:25:b5:a0:99:00:b9:9b:00:12:8f:57:e0:0e:
4d:5a:9f:22:26:d8:f2:a8:e9:c8:51:89:a1:48:75:66:94:25:
de:a9:32:86:50:e2:54:20:09:78:dd:ad:78:ec:aa:4c:56:19:
69:17:64:59:cd:22:f6:7d:31:63:6e:dd:b4:2e:7c:f9:83:04:
9b:1b:7c:07:74:c5:d5:df:5c:62:bf:2d:ae:59:b2:a2:2c:c5:
7c:aa:ec:10
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIFdUW9lvswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMDAyMjhaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDAxNTliNmMxOTJl
YjFmNzI4NTA0NTI1M2VlNmQ1MmU2NjhmMjQ2YWIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDTVhEvPrigvorLCFSyfAj5HQAvFfSur3H8WsfvSFyiXebJ
xl358zqbfpw18qL9z8xObCg5zUd321NjUQiXVNBy1xrSn7gVm9slxZ27PbWnZxMa
aKigQte2EbgTQhTtqcWi2Z2dztehwS+5yu3sF74LvEeaKl8nBSxBOs+0zyzSlTId
udRuR4B95HbmIdTU46DHzmI4mqOb402Y6zwlzR+l1j6r4CbO+N8lP8fKuFFc/oYV
4ZNql3Ea+7NuL1C0qqtiTEZCoN3zVTlGARwpYYUv/7AJE+vDwfEm4SbwczDnw4n5
HKBOa1Xs7HoFk7SMjcIlGs1TxX2b6ohBVFp9+iyRAgMBAAGjggJdMIICWTAdBgNV
HQ4EFgQUAVm2wZLrH3KFBFJT7m1S5mjyRqswHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCB
7gYIKwYBBQUHAQsEgeEwgd4wNwYIKwYBBQUHMAWGK3JzeW5jOi8vbm9zdHJvbW8u
aGVmaWNlZC5uZXQvcmVwby82MzUyOTEvMC8wYwYIKwYBBQUHMAqGV3JzeW5jOi8v
bm9zdHJvbW8uaGVmaWNlZC5uZXQvcmVwby82MzUyOTEvMC8wMTU5QjZDMTkyRUIx
RjcyODUwNDUyNTNFRTZENTJFNjY4RjI0NkFCLm1mdDA+BggrBgEFBQcwDYYyaHR0
cHM6Ly9ub3N0cm9tby5oZWZpY2VkLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWww
WQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3JsMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD
BAK5nmQwDQQCAAIwBwMFAyoKsgAwDQYJKoZIhvcNAQELBQADggEBAJf+62RFzxnY
R3hN3E7LW0oG+Oq8K7C04BL/8mQEfPxI9zpOygxVqqMy9BtvZzRlVCkmCc4OzqRD
oZkEFUSL87DsULy2l8HjVal5wsEiWRxOFS0D/OWEvcQKkniS2gAplFkWMPz7AzdJ
rP5+8xe0iYJGfKqslobsHY5EsWB6ik7B5kYvPeg5mxxWdUxgziLVGZt6BysimyAI
UhwqyJw1y3mwgJMGJdjiJbWgmQC5mwASj1fgDk1anyIm2PKo6chRiaFIdWaUJd6p
MoZQ4lQgCXjdrXjsqkxWGWkXZFnNIvZ9MWNu3bQufPmDBJsbfAd0xdXfXGK/La5Z
sqIsxXyq7BA=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:12 2023 by rpki-client on console-fra.rpki-client.org