Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S6ebHO1u5g2GF9KOx85jkonfT9c.cer
File: S6ebHO1u5g2GF9KOx85jkonfT9c.cer (raw, json)
Hash identifier: RKKaxOu6Ms7U3ztsD3Je3Jip3d2TZVss4Wu75MozLck=
Subject key identifier: 4B:A7:9B:1C:ED:6E:E6:0D:86:17:D2:8E:C7:CE:63:92:89:DF:4F:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9B66D09447
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/ba3771-409f-4070-b941-a700c89efba3/1/S6ebHO1u5g2GF9KOx85jkonfT9c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/ba3771-409f-4070-b941-a700c89efba3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:53:21 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 44601
IP: 91.199.76.0/24
IP: 2001:67c:470::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667444876359 (0x9b66d09447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:53:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ba79b1ced6ee60d8617d28ec7ce639289df4fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:14:11:06:6b:0b:bc:e0:82:22:b2:32:76:
15:16:7d:28:89:48:c0:84:a9:15:db:83:76:5a:7c:
a7:40:fb:7d:22:c9:40:3d:8f:15:8d:68:94:a2:d0:
e4:e7:a7:28:fb:0a:4f:ed:d2:48:13:d0:9f:5a:67:
3b:ed:4a:b4:9d:bf:fb:8c:a1:26:37:7e:03:a1:72:
cf:89:1f:32:a4:e9:10:a0:d1:9d:9a:56:cc:a8:f9:
d5:27:f4:f9:52:70:79:ec:0e:e4:d5:97:22:2c:ac:
8c:ce:d3:35:54:41:29:b8:3e:67:a2:04:e1:c8:61:
8d:b0:e6:82:b2:01:6e:b4:1d:f5:be:83:5a:7a:2f:
49:07:b6:be:1e:4a:24:c2:a8:a7:b5:91:8c:61:ed:
39:11:09:85:29:12:24:42:c6:80:67:e8:a8:a8:a2:
0e:99:eb:47:53:2c:8b:55:01:27:60:46:c5:9b:d5:
e1:e9:6f:06:7c:72:98:9f:24:3a:4a:04:e3:ba:83:
74:f8:12:54:d0:39:4d:c5:c3:7c:b1:eb:fb:7a:b4:
20:3c:56:20:92:53:1c:2b:aa:8c:9a:fb:00:64:01:
81:6b:d7:8b:ff:66:37:26:2e:12:30:57:99:cb:b3:
6c:66:f6:2c:5b:25:c3:5d:2b:0d:ff:79:1e:29:f3:
29:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A7:9B:1C:ED:6E:E6:0D:86:17:D2:8E:C7:CE:63:92:89:DF:4F:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ba3771-409f-4070-b941-a700c89efba3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ba3771-409f-4070-b941-a700c89efba3/1/S6ebHO1u5g2GF9KOx85jkonfT9c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.76.0/24
IPv6:
2001:67c:470::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44601
Signature Algorithm: sha256WithRSAEncryption
3e:a3:4a:86:3f:6b:9f:66:dd:06:43:70:d9:eb:f8:5f:84:3f:
e6:0a:d2:44:e0:6f:7b:b1:f7:04:65:9f:3a:b9:58:d5:17:32:
f3:b1:85:53:bf:a0:c6:36:d0:b7:aa:01:17:28:e7:4a:30:36:
8e:e5:43:a6:c0:60:40:61:6e:e5:72:d5:c5:1a:a5:9b:b8:f2:
fa:2f:7e:60:f0:e3:ef:3c:d5:75:0c:b3:1b:cb:7a:ec:3a:7b:
56:86:0a:36:7a:8c:23:5a:bd:cb:df:fa:bd:31:af:f6:2b:a3:
5c:5d:56:a2:18:2c:5a:21:29:25:b4:04:6e:e6:6b:54:9e:89:
76:ab:ce:3f:4c:8c:6e:4b:1f:9a:9c:c0:b3:cc:0b:70:b9:dd:
6a:9a:97:ac:2e:27:c9:6a:d5:fb:b5:09:8a:67:44:7d:c4:04:
41:26:c2:a0:98:d9:eb:e9:a4:c9:d8:2b:4f:83:4a:f1:5d:08:
cf:d0:ab:15:08:d8:14:a9:e0:1b:09:f6:7f:67:ce:2c:1d:87:
dc:d5:70:be:c0:01:4c:54:86:4a:6a:b3:1d:81:99:fd:5f:f9:
25:5f:39:2d:32:21:1e:ab:12:e1:c4:ed:20:df:42:c1:f3:bd:
ef:cc:d5:b0:43:45:e7:56:8c:b3:64:a2:e1:35:92:18:a4:1f:
73:f0:1a:74
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgIGAJtm0JRHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDI1MzIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0YmE3OWIxY2Vk
NmVlNjBkODYxN2QyOGVjN2NlNjM5Mjg5ZGY0ZmQ3MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAs7cUEQZrC7zggiKyMnYVFn0oiUjAhKkV24N2WnynQPt9
IslAPY8VjWiUotDk56co+wpP7dJIE9CfWmc77Uq0nb/7jKEmN34DoXLPiR8ypOkQ
oNGdmlbMqPnVJ/T5UnB57A7k1ZciLKyMztM1VEEpuD5nogThyGGNsOaCsgFutB31
voNaei9JB7a+HkokwqintZGMYe05EQmFKRIkQsaAZ+ioqKIOmetHUyyLVQEnYEbF
m9Xh6W8GfHKYnyQ6SgTjuoN0+BJU0DlNxcN8sev7erQgPFYgklMcK6qMmvsAZAGB
a9eL/2Y3Ji4SMFeZy7NsZvYsWyXDXSsN/3keKfMp/wIDAQABo4ICsTCCAq0wHQYD
VR0OBBYEFEunmxztbuYNhhfSjsfOY5KJ30/XMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiL2JhMzc3MS00MDlmLTQwNzAt
Yjk0MS1hNzAwYzg5ZWZiYTMvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvYmEzNzcxLTQwOWYtNDA3MC1i
OTQxLWE3MDBjODllZmJhMy8xL1M2ZWJITzF1NWcyR0Y5S094ODVqa29uZlQ5Yy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAW8dMMA8EAgACMAkDBwAgAQZ8BHAwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAK45MA0GCSqGSIb3DQEBCwUAA4IBAQA+o0qGP2ufZt0GQ3DZ6/hfhD/m
CtJE4G97sfcEZZ86uVjVFzLzsYVTv6DGNtC3qgEXKOdKMDaO5UOmwGBAYW7lctXF
GqWbuPL6L35g8OPvPNV1DLMby3rsOntWhgo2eowjWr3L3/q9Ma/2K6NcXVaiGCxa
ISkltARu5mtUnol2q84/TIxuSx+anMCzzAtwud1qmpesLifJatX7tQmKZ0R9xARB
JsKgmNnr6aTJ2CtPg0rxXQjP0KsVCNgUqeAbCfZ/Z84sHYfc1XC+wAFMVIZKarMd
gZn9X/klXzktMiEeqxLhxO0g30LB873vzNWwQ0XnVoyzZKLhNZIYpB9z8Bp0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-fra.rpki-client.org