Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RGJvYLI2P6FELsGgW0VMPBp4Rcs.cer
File: RGJvYLI2P6FELsGgW0VMPBp4Rcs.cer (raw, json)
Hash identifier: GuRF5WYuVcZnDAoUOXpl+596vcxfsUZbBDJ0yvG1+n4=
Subject key identifier: 44:62:6F:60:B2:36:3F:A1:44:2E:C1:A0:5B:45:4C:3C:1A:78:45:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 752AFF33A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://nostromo.heficed.net/repo/1123611/0/44626F60B2363FA1442EC1A05B454C3C1A7845CB.mft
caRepository: rsync://nostromo.heficed.net/repo/1123611/0/
Notify URL: https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before: Fri 01 Jan 2021 00:01:04 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 185.130.204.0/22
IP: 2a0a:8600::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503232541607 (0x752aff33a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:01:04 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=44626f60b2363fa1442ec1a05b454c3c1a7845cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:36:b0:5d:5c:d7:d6:39:12:fc:2d:20:2e:c3:
89:24:d7:22:fd:af:a1:68:b8:b9:37:15:3c:00:ef:
a2:21:6a:43:a6:43:2f:15:56:65:d9:e7:0d:9f:db:
53:99:4d:4a:17:fa:af:2d:26:9d:e4:15:53:89:3d:
7b:00:76:07:9e:95:b5:3a:4c:2a:05:74:ac:0e:87:
4d:65:d3:78:24:15:05:ce:68:0e:a7:7d:8c:ad:50:
fb:84:09:0a:f6:cb:d3:e9:14:30:15:6c:ad:d5:8e:
74:00:09:a3:d3:5e:30:ab:75:f8:65:fb:ab:28:80:
38:fb:df:b0:24:1e:90:17:3e:23:d7:13:dc:60:67:
fd:b6:43:2a:6f:39:f1:97:81:e3:9d:d0:fa:86:d3:
8b:19:eb:84:ad:d4:39:c7:1d:33:9f:08:2d:1b:14:
08:64:39:12:2f:24:7e:0e:7a:70:70:50:58:fb:78:
90:18:eb:5e:ff:e9:23:b8:82:e7:32:74:b6:76:14:
c3:7f:45:63:13:1f:33:4d:03:3c:c4:ac:b5:4b:5d:
45:0e:86:c9:18:9b:00:64:92:2c:0d:5f:f4:90:f8:
e9:1d:05:f4:7e:dd:0f:df:29:9e:02:0c:39:51:f9:
7e:97:e8:54:e0:4e:08:5d:19:5c:6a:c0:a3:1b:9d:
02:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:62:6F:60:B2:36:3F:A1:44:2E:C1:A0:5B:45:4C:3C:1A:78:45:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://nostromo.heficed.net/repo/1123611/0/
RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123611/0/44626F60B2363FA1442EC1A05B454C3C1A7845CB.mft
RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.204.0/22
IPv6:
2a0a:8600::/29
Signature Algorithm: sha256WithRSAEncryption
8f:08:51:ce:76:e3:ce:fc:95:08:db:1a:26:d2:ff:4d:dc:d4:
0a:99:75:1e:30:03:87:a5:61:3d:9a:31:51:d0:8b:4d:54:9f:
68:3d:1d:d4:38:62:94:0f:53:14:2b:cd:5d:a7:02:f7:36:df:
16:fb:ea:be:b1:5e:72:17:6e:7e:4d:02:07:7e:3d:f7:1e:69:
94:8b:1e:43:95:70:fd:a6:09:49:a6:2f:3b:c4:ce:f2:01:7e:
ad:4d:a4:48:22:6a:49:7f:d3:69:ca:78:43:03:23:23:01:ba:
eb:3e:89:9d:55:65:db:88:9f:de:ed:04:8b:23:13:79:3a:aa:
08:fd:2d:6b:d2:01:2b:da:b5:cf:fe:fa:8d:00:c2:b9:cb:14:
27:ca:b6:2e:81:8e:c6:67:f0:53:dd:34:ab:74:e1:d8:2f:cd:
7a:9d:5c:bc:33:0e:a7:43:18:ee:de:e6:ce:e4:b3:59:3d:c3:
fb:93:d5:33:3f:25:a2:49:b3:44:29:bc:51:d2:0a:f2:a2:25:
5d:3f:15:fb:f2:4a:e9:0a:12:a5:a0:de:5d:b0:a6:44:bf:1e:
fb:19:16:ed:15:aa:a1:02:2d:e6:de:f2:6b:57:9f:98:1d:a1:
ae:69:26:b4:5a:31:51:b7:ff:1e:fe:11:27:19:64:47:f8:3b:
fd:da:78:b1
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIFdSr/M6cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMDAxMDRaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDQ0NjI2ZjYwYjIz
NjNmYTE0NDJlYzFhMDViNDU0YzNjMWE3ODQ1Y2IwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDZNrBdXNfWORL8LSAuw4kk1yL9r6FouLk3FTwA76IhakOm
Qy8VVmXZ5w2f21OZTUoX+q8tJp3kFVOJPXsAdgeelbU6TCoFdKwOh01l03gkFQXO
aA6nfYytUPuECQr2y9PpFDAVbK3VjnQACaPTXjCrdfhl+6sogDj737AkHpAXPiPX
E9xgZ/22QypvOfGXgeOd0PqG04sZ64St1DnHHTOfCC0bFAhkORIvJH4OenBwUFj7
eJAY617/6SO4gucydLZ2FMN/RWMTHzNNAzzErLVLXUUOhskYmwBkkiwNX/SQ+Okd
BfR+3Q/fKZ4CDDlR+X6X6FTgTghdGVxqwKMbnQL3AgMBAAGjggJfMIICWzAdBgNV
HQ4EFgQURGJvYLI2P6FELsGgW0VMPBp4RcswHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCB
8AYIKwYBBQUHAQsEgeMwgeAwOAYIKwYBBQUHMAWGLHJzeW5jOi8vbm9zdHJvbW8u
aGVmaWNlZC5uZXQvcmVwby8xMTIzNjExLzAvMGQGCCsGAQUFBzAKhlhyc3luYzov
L25vc3Ryb21vLmhlZmljZWQubmV0L3JlcG8vMTEyMzYxMS8wLzQ0NjI2RjYwQjIz
NjNGQTE0NDJFQzFBMDVCNDU0QzNDMUE3ODQ1Q0IubWZ0MD4GCCsGAQUFBzANhjJo
dHRwczovL25vc3Ryb21vLmhlZmljZWQubmV0L3JyZHAvbm90aWZpY2F0aW9uLnht
bDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEw
BgMEArmCzDANBAIAAjAHAwUDKgqGADANBgkqhkiG9w0BAQsFAAOCAQEAjwhRznbj
zvyVCNsaJtL/TdzUCpl1HjADh6VhPZoxUdCLTVSfaD0d1DhilA9TFCvNXacC9zbf
FvvqvrFechdufk0CB3499x5plIseQ5Vw/aYJSaYvO8TO8gF+rU2kSCJqSX/Tacp4
QwMjIwG66z6JnVVl24if3u0EiyMTeTqqCP0ta9IBK9q1z/76jQDCucsUJ8q2LoGO
xmfwU900q3Th2C/Nep1cvDMOp0MY7t7mzuSzWT3D+5PVMz8lokmzRCm8UdIK8qIl
XT8V+/JK6QoSpaDeXbCmRL8e+xkW7RWqoQIt5t7ya1efmB2hrmkmtFoxUbf/Hv4R
JxlkR/g7/dp4sQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:00 2023 by rpki-client on console-fra.rpki-client.org