Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hn4YSr7fi5MEUetaJLF8MXgt-sw.cer
File: Hn4YSr7fi5MEUetaJLF8MXgt-sw.cer (raw, json)
Hash identifier: b+6QwRoQwCit/TaeTOP08M5QBrq50RsaSXB5QKFA7gw=
Subject key identifier: 1E:7E:18:4A:BE:DF:8B:93:04:51:EB:5A:24:B1:7C:31:78:2D:FA:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AA59B074F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/65e495-1b18-4c07-9031-2cd558281e95/1/Hn4YSr7fi5MEUetaJLF8MXgt-sw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/65e495-1b18-4c07-9031-2cd558281e95/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:07:37 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.133.8.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 731649176822 (0xaa59b074f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:07:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e7e184abedf8b930451eb5a24b17c31782dfacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:9b:d0:b4:3d:d0:a9:09:4f:af:21:94:76:
1b:5f:85:05:43:4c:6d:3c:27:43:f2:02:1b:83:f8:
f9:41:3a:72:9c:e6:e8:27:c4:09:90:dd:2c:aa:f9:
d5:17:6e:19:ae:05:73:c1:3c:a8:c6:85:11:65:58:
9f:a3:79:61:23:80:68:5b:83:e6:87:c4:5c:b4:e1:
7d:57:1a:e4:52:60:52:f7:25:0c:53:5e:e5:10:ae:
b9:e4:a4:b1:fb:dc:f1:4d:b4:9e:45:40:cb:b3:87:
52:2b:75:c2:15:6c:b0:c1:e4:76:7e:99:8c:8f:1f:
dc:1d:e8:07:7a:31:29:98:15:05:ff:bb:05:9b:b5:
4d:c2:99:5f:c8:4b:91:70:68:7f:4b:1d:ec:81:85:
1e:d5:83:ad:47:5b:f2:70:cb:e2:0a:fc:68:70:ad:
bc:5e:4a:45:b1:96:20:d3:73:75:be:42:b3:64:47:
ef:56:0c:f6:e2:01:37:94:5e:b4:08:24:04:fe:1b:
ac:7b:cf:38:db:a3:0e:34:b2:89:f4:ae:73:07:94:
e3:3b:a7:0d:86:11:8a:f9:0b:21:e6:9e:9a:02:c7:
63:eb:d0:58:96:2a:df:f9:93:cb:ac:c1:81:80:83:
63:23:c0:82:ec:e9:3e:a6:be:59:55:d8:05:79:76:
16:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7E:18:4A:BE:DF:8B:93:04:51:EB:5A:24:B1:7C:31:78:2D:FA:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/65e495-1b18-4c07-9031-2cd558281e95/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/65e495-1b18-4c07-9031-2cd558281e95/1/Hn4YSr7fi5MEUetaJLF8MXgt-sw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.8.0/22
Signature Algorithm: sha256WithRSAEncryption
76:3d:13:00:d9:e5:08:ef:6c:99:e9:e8:e6:e0:45:22:a9:11:
9e:67:af:aa:0d:12:eb:90:cf:8e:6b:54:2d:c0:67:63:eb:25:
21:e9:e3:8b:b6:6f:63:4d:d3:4f:92:08:ea:ad:48:e4:51:25:
d4:14:ed:f3:c0:cc:32:8c:4c:eb:22:78:03:8f:30:80:a7:5a:
9c:b3:ac:56:47:1d:10:02:1c:6c:a2:c6:de:ce:35:b0:74:a6:
25:dd:fe:fe:c8:25:16:06:43:11:f5:5b:ae:2a:f3:ce:61:e4:
be:58:86:77:54:ae:ba:32:a9:17:76:cd:fa:33:e8:3f:fb:ea:
c1:68:c1:8e:22:6c:7b:1b:0c:2d:8c:ef:11:70:a8:9a:17:29:
0e:e4:57:b6:eb:bd:80:d9:28:1f:bb:02:f5:28:5c:b9:70:55:
aa:20:f4:d1:14:83:9c:08:cc:6d:29:45:c6:9e:97:4a:e7:15:
a5:b0:09:48:9d:28:3e:85:9f:ce:31:0a:9f:dd:ab:dd:2b:2c:
91:c5:c0:a7:d3:6b:68:1e:32:07:13:7a:c8:0c:73:ea:8a:93:
6d:64:d4:c4:d0:7a:91:36:84:9b:e4:5c:f0:ef:84:f9:af:00:
04:45:44:cd:41:4e:d2:17:e4:f7:d3:18:32:7c:7f:2a:35:73:
60:20:2a:ba
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAKpZsHT2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTUwNzM3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxZTdlMTg0YWJl
ZGY4YjkzMDQ1MWViNWEyNGIxN2MzMTc4MmRmYWNjMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAp/eb0LQ90KkJT68hlHYbX4UFQ0xtPCdD8gIbg/j5QTpy
nOboJ8QJkN0sqvnVF24ZrgVzwTyoxoURZVifo3lhI4BoW4Pmh8RctOF9VxrkUmBS
9yUMU17lEK655KSx+9zxTbSeRUDLs4dSK3XCFWywweR2fpmMjx/cHegHejEpmBUF
/7sFm7VNwplfyEuRcGh/Sx3sgYUe1YOtR1vycMviCvxocK28XkpFsZYg03N1vkKz
ZEfvVgz24gE3lF60CCQE/huse88426MONLKJ9K5zB5TjO6cNhhGK+Qsh5p6aAsdj
69BYlirf+ZPLrMGBgINjI8CC7Ok+pr5ZVdgFeXYWcQIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFB5+GEq+34uTBFHrWiSxfDF4LfrMMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E4LzY1ZTQ5NS0xYjE4LTRjMDct
OTAzMS0yY2Q1NTgyODFlOTUvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgvNjVlNDk1LTFiMTgtNGMwNy05
MDMxLTJjZDU1ODI4MWU5NS8xL0huNFlTcjdmaTVNRVVldGFKTEY4TVhndC1zdy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCLYUIMA0GCSqGSIb3DQEBCwUAA4IBAQB2PRMA2eUI72yZ6ejm4EUi
qRGeZ6+qDRLrkM+Oa1QtwGdj6yUh6eOLtm9jTdNPkgjqrUjkUSXUFO3zwMwyjEzr
IngDjzCAp1qcs6xWRx0QAhxsosbezjWwdKYl3f7+yCUWBkMR9VuuKvPOYeS+WIZ3
VK66MqkXds36M+g/++rBaMGOImx7GwwtjO8RcKiaFykO5Fe2672A2SgfuwL1KFy5
cFWqIPTRFIOcCMxtKUXGnpdK5xWlsAlInSg+hZ/OMQqf3avdKyyRxcCn02toHjIH
E3rIDHPqipNtZNTE0HqRNoSb5Fzw74T5rwAERUTNQU7SF+T30xgyfH8qNXNgICq6
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:29:23 2024 by rpki-client on console-ams.rpki-client.org