Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RxQMVlw0Jk4uJkUcorI04L-GNWo.cer
File: RxQMVlw0Jk4uJkUcorI04L-GNWo.cer (raw, json)
Hash identifier: yyuZ8Y1ICJntPmnamsZfN44v4Qyj72UFhGvrqy+nYkI=
Subject key identifier: 47:14:0C:56:5C:34:26:4E:2E:26:45:1C:A2:B2:34:E0:BF:86:35:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 75468705F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://nostromo.heficed.net/repo/1123662/0/47140C565C34264E2E26451CA2B234E0BF86356A.mft
caRepository: rsync://nostromo.heficed.net/repo/1123662/0/
Notify URL: https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before: Fri 01 Jan 2021 00:02:29 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 193.58.104.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503694427638 (0x75468705f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:02:29 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=47140c565c34264e2e26451ca2b234e0bf86356a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b6:ea:2f:b1:3e:9f:27:28:63:e1:01:da:8d:
3d:77:c7:67:6d:bb:9d:7d:5b:ec:a1:52:a1:63:fe:
c5:ba:76:8e:3f:38:2b:ad:12:d7:e0:06:d9:c4:f9:
52:9c:8b:dc:ba:09:5c:89:2b:f0:98:77:6a:92:19:
66:ca:7d:0a:17:e2:d1:2e:ee:79:b9:4b:8d:27:87:
10:cd:0e:6f:b5:e4:63:0e:7a:89:05:05:72:17:27:
35:52:29:2c:b2:64:34:cc:8f:2a:e2:62:13:b5:0c:
9c:1b:f6:9e:13:94:ac:23:9b:2b:44:61:c2:8f:fe:
1f:ef:d4:47:7d:5b:24:f3:df:84:3f:25:d7:6b:57:
9e:51:e3:e5:3f:52:9d:6a:81:75:8b:b9:46:aa:d7:
1c:86:ed:2c:a2:e0:f2:76:87:ee:dd:99:95:1e:3e:
15:11:cb:97:f6:1a:7c:61:f3:fa:8c:e3:83:cd:9b:
76:42:e3:18:e9:6c:d7:b8:4c:e1:85:5e:c2:51:c1:
ae:e3:49:e5:56:c4:90:eb:34:4c:e6:c9:c4:9e:10:
fb:05:b2:10:da:83:d7:e8:b8:cf:ce:86:17:6c:35:
47:21:d9:87:d1:bd:17:ae:12:a1:f1:e4:00:5a:29:
d5:72:71:6d:12:6b:55:d5:96:bd:01:08:b0:5c:fc:
da:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:14:0C:56:5C:34:26:4E:2E:26:45:1C:A2:B2:34:E0:BF:86:35:6A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://nostromo.heficed.net/repo/1123662/0/
RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123662/0/47140C565C34264E2E26451CA2B234E0BF86356A.mft
RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.104.0/22
Signature Algorithm: sha256WithRSAEncryption
64:f2:b3:15:eb:c7:e6:94:8b:8b:f8:e3:fc:d7:7b:bc:58:81:
3c:7c:fe:87:ab:76:41:55:22:47:4c:79:9e:2d:28:64:4b:27:
ab:59:69:d4:dc:44:c9:37:23:98:1d:7b:95:b8:e4:c4:be:fe:
7d:75:95:c5:e7:37:a7:bd:b6:f7:47:3a:f0:60:d7:36:1b:f3:
9c:70:a9:55:d2:ae:9c:44:71:9c:25:b8:be:d5:83:d5:50:07:
84:fc:d7:e2:99:41:ee:3c:ba:3a:f3:76:cc:58:e1:3e:62:d6:
c9:48:7e:b5:d7:fe:b1:34:6e:45:7c:44:a0:cd:4e:f2:02:e4:
fe:20:57:6a:3f:2d:d6:d6:1c:f8:3d:53:00:1e:2c:a3:a2:c6:
11:2f:b4:25:2c:f2:34:7d:aa:ce:05:08:8c:83:33:32:79:2b:
54:98:33:ff:29:8e:95:8f:fa:0e:e2:a1:55:e3:7f:88:e4:2a:
83:bf:2f:0c:87:2b:44:c4:fb:ae:cb:cb:f8:2f:59:66:36:f6:
54:d9:6e:de:8b:e3:1b:81:a6:79:20:7d:89:a8:34:7e:d7:d4:
fd:ee:fc:c1:1a:a5:d9:d5:69:df:d7:f2:ff:22:9e:33:a5:d0:
d5:35:53:bc:b8:bc:24:83:80:f4:28:f9:9a:fb:5a:c8:b0:ff:
10:01:83:7b
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIFdUaHBfYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMDAyMjlaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDQ3MTQwYzU2NWMz
NDI2NGUyZTI2NDUxY2EyYjIzNGUwYmY4NjM1NmEwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDXtuovsT6fJyhj4QHajT13x2dtu519W+yhUqFj/sW6do4/
OCutEtfgBtnE+VKci9y6CVyJK/CYd2qSGWbKfQoX4tEu7nm5S40nhxDNDm+15GMO
eokFBXIXJzVSKSyyZDTMjyriYhO1DJwb9p4TlKwjmytEYcKP/h/v1Ed9WyTz34Q/
JddrV55R4+U/Up1qgXWLuUaq1xyG7Syi4PJ2h+7dmZUePhURy5f2Gnxh8/qM44PN
m3ZC4xjpbNe4TOGFXsJRwa7jSeVWxJDrNEzmycSeEPsFshDag9fouM/OhhdsNUch
2YfRvReuEqHx5ABaKdVycW0Sa1XVlr0BCLBc/NrbAgMBAAGjggJQMIICTDAdBgNV
HQ4EFgQURxQMVlw0Jk4uJkUcorI04L+GNWowHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCB
8AYIKwYBBQUHAQsEgeMwgeAwOAYIKwYBBQUHMAWGLHJzeW5jOi8vbm9zdHJvbW8u
aGVmaWNlZC5uZXQvcmVwby8xMTIzNjYyLzAvMGQGCCsGAQUFBzAKhlhyc3luYzov
L25vc3Ryb21vLmhlZmljZWQubmV0L3JlcG8vMTEyMzY2Mi8wLzQ3MTQwQzU2NUMz
NDI2NEUyRTI2NDUxQ0EyQjIzNEUwQkY4NjM1NkEubWZ0MD4GCCsGAQUFBzANhjJo
dHRwczovL25vc3Ryb21vLmhlZmljZWQubmV0L3JyZHAvbm90aWZpY2F0aW9uLnht
bDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAsE6aDANBgkqhkiG9w0BAQsFAAOCAQEAZPKzFevH5pSLi/jj/Nd7vFiBPHz+
h6t2QVUiR0x5ni0oZEsnq1lp1NxEyTcjmB17lbjkxL7+fXWVxec3p72290c68GDX
NhvznHCpVdKunERxnCW4vtWD1VAHhPzX4plB7jy6OvN2zFjhPmLWyUh+tdf+sTRu
RXxEoM1O8gLk/iBXaj8t1tYc+D1TAB4so6LGES+0JSzyNH2qzgUIjIMzMnkrVJgz
/ymOlY/6DuKhVeN/iOQqg78vDIcrRMT7rsvL+C9ZZjb2VNlu3ovjG4GmeSB9iag0
ftfU/e78wRql2dVp39fy/yKeM6XQ1TVTvLi8JIOA9Cj5mvtayLD/EAGDew==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:02 2023 by rpki-client on console-fra.rpki-client.org