Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YkKNGtz4LsHE98TSToKS3XsIhVc.cer
File: YkKNGtz4LsHE98TSToKS3XsIhVc.cer (raw, json)
Hash identifier: mON22Q7dSD+CiapwgVc6Y05jRIZ0qI+P1nSF9618Uic=
Subject key identifier: 62:42:8D:1A:DC:F8:2E:C1:C4:F7:C4:D2:4E:82:92:DD:7B:08:85:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 99C84202D1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/8e0a30-7d70-486d-83f5-ca8a847b330a/1/YkKNGtz4LsHE98TSToKS3XsIhVc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/8e0a30-7d70-486d-83f5-ca8a847b330a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:01:23 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.131.136.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660489765585 (0x99c84202d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:01:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62428d1adcf82ec1c4f7c4d24e8292dd7b088557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:85:fb:c1:1b:97:17:f2:35:ef:44:cb:b5:43:
c0:f1:d1:54:63:d4:5c:a0:6e:02:33:32:93:1e:a7:
ea:15:8c:61:da:73:7e:41:16:31:b3:f9:45:be:90:
0b:b6:cf:a0:9a:65:80:bf:f3:13:a2:49:b4:7e:b9:
bb:1a:61:60:0b:c0:41:10:f8:31:9a:5a:44:1a:6f:
02:81:98:7c:b0:16:76:57:90:64:69:c5:7d:06:e6:
fa:90:c9:98:35:c2:f9:9d:cb:bc:6b:18:25:24:93:
6e:b0:2a:8a:82:26:62:1c:bd:5e:b5:29:91:40:6e:
e6:f0:c2:3d:cb:6b:4f:69:cb:d3:05:5b:fc:57:13:
f4:a9:8e:7a:0c:15:90:54:64:2d:7b:ed:1b:a5:05:
9e:6d:a7:4b:3a:2f:c1:56:95:cf:c9:5a:8b:6f:bc:
eb:e4:84:2f:d3:c2:92:7f:d3:54:57:28:8d:b6:88:
f8:c9:bc:95:83:69:cb:46:c2:e5:fd:81:3b:f2:be:
e2:cf:2f:c9:e9:1a:83:8e:2a:8a:ea:24:f2:eb:25:
e0:21:ce:13:ac:ed:2d:1c:24:cf:1f:42:88:c6:07:
e1:56:4b:fd:bb:64:12:39:11:25:c7:e5:8c:d5:30:
ac:25:4b:88:c0:72:24:84:5a:b3:5a:57:9d:72:70:
d6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:42:8D:1A:DC:F8:2E:C1:C4:F7:C4:D2:4E:82:92:DD:7B:08:85:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8e0a30-7d70-486d-83f5-ca8a847b330a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8e0a30-7d70-486d-83f5-ca8a847b330a/1/YkKNGtz4LsHE98TSToKS3XsIhVc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.136.0/22
Signature Algorithm: sha256WithRSAEncryption
88:24:0e:4c:df:6b:3d:15:6d:fa:83:99:45:bb:85:87:53:3c:
ec:c5:cf:dc:9f:90:25:3b:ff:a4:f2:5a:8c:e7:15:c4:70:2e:
61:80:62:04:e8:b0:39:79:a7:d4:04:89:32:47:5f:27:09:f0:
5f:46:47:f1:7a:c0:8b:5a:d8:fc:06:33:94:d0:07:31:39:ca:
06:79:ea:1b:cb:2c:9c:79:ad:4c:b9:5a:42:9a:49:40:ce:ba:
bf:25:d7:4b:80:e7:e2:4c:55:90:cc:d9:fb:12:15:a0:a4:46:
b6:5d:2e:fd:6a:8d:5a:92:8d:7f:df:1e:6f:a0:65:a4:5c:c5:
7c:13:fd:54:3b:0a:76:4e:55:7e:df:db:fb:0c:17:d9:e5:9e:
a2:74:3f:fd:dc:5b:7c:87:0e:7e:b9:f5:33:bd:a2:02:3e:08:
86:2e:69:63:2e:c4:47:be:e5:1c:b4:ca:33:de:9a:e5:51:3f:
82:44:28:fd:99:52:c7:07:9b:ab:26:b5:b9:b8:65:da:22:bb:
c0:2f:06:e9:d7:a9:a2:96:9c:5a:f1:d8:2f:4b:a5:04:41:ea:
9f:a7:cb:ee:d7:36:b4:19:e4:93:98:5e:8d:9c:4c:d3:4b:47:
21:a5:8e:df:ed:ff:95:46:b0:09:38:9e:2c:b7:df:3f:d4:1f:
4e:02:b9:32
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAJnIQgLRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDEwMTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2MjQyOGQxYWRj
ZjgyZWMxYzRmN2M0ZDI0ZTgyOTJkZDdiMDg4NTU3MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA24X7wRuXF/I170TLtUPA8dFUY9RcoG4CMzKTHqfqFYxh
2nN+QRYxs/lFvpALts+gmmWAv/MTokm0frm7GmFgC8BBEPgxmlpEGm8CgZh8sBZ2
V5BkacV9Bub6kMmYNcL5ncu8axglJJNusCqKgiZiHL1etSmRQG7m8MI9y2tPacvT
BVv8VxP0qY56DBWQVGQte+0bpQWebadLOi/BVpXPyVqLb7zr5IQv08KSf9NUVyiN
toj4ybyVg2nLRsLl/YE78r7izy/J6RqDjiqK6iTy6yXgIc4TrO0tHCTPH0KIxgfh
Vkv9u2QSORElx+WM1TCsJUuIwHIkhFqzWledcnDWiwIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFGJCjRrc+C7BxPfE0k6Ckt17CIVXMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E4LzhlMGEzMC03ZDcwLTQ4NmQt
ODNmNS1jYThhODQ3YjMzMGEvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgvOGUwYTMwLTdkNzAtNDg2ZC04
M2Y1LWNhOGE4NDdiMzMwYS8xL1lrS05HdHo0THNIRTk4VFNUb0tTM1hzSWhWYy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCLYOIMA0GCSqGSIb3DQEBCwUAA4IBAQCIJA5M32s9FW36g5lFu4WH
Uzzsxc/cn5AlO/+k8lqM5xXEcC5hgGIE6LA5eafUBIkyR18nCfBfRkfxesCLWtj8
BjOU0AcxOcoGeeobyyycea1MuVpCmklAzrq/JddLgOfiTFWQzNn7EhWgpEa2XS79
ao1ako1/3x5voGWkXMV8E/1UOwp2TlV+39v7DBfZ5Z6idD/93Ft8hw5+ufUzvaIC
PgiGLmljLsRHvuUctMoz3prlUT+CRCj9mVLHB5urJrW5uGXaIrvALwbp16milpxa
8dgvS6UEQeqfp8vu1za0GeSTmF6NnEzTS0chpY7f7f+VRrAJOJ4st98/1B9OArky
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:34:59 2024 by rpki-client on console-ams.rpki-client.org