Certificate
$ rpki-client -vvf rsync.krill.cloud/repo/nlnetlabs/1/7773ED99C6A9084BD4E42AFA0DA15D17F86A2571.cer
File: 7773ED99C6A9084BD4E42AFA0DA15D17F86A2571.cer (raw, json)
Hash identifier: I6/iv8SYtkGn8rnIY+YNdJoNJqy5dvbKKcu40h43Xjs=
Subject key identifier: 77:73:ED:99:C6:A9:08:4B:D4:E4:2A:FA:0D:A1:5D:17:F8:6A:25:71
Authority key identifier: A8:1E:B3:A5:EB:3D:F6:34:55:1A:90:72:2B:C6:3A:D7:E0:22:CA:C4
Certificate issuer: /CN=a81eb3a5eb3df634551a90722bc63ad7e022cac4
Certificate serial: 15575318C86E0F609D4D1348BF4C63847801AE12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qB6zpes99jRVGpByK8Y61-AiysQ.cer
Manifest: rsync://parent.rov.koenvanhove.nl/repo/KoenvanHove/0/7773ED99C6A9084BD4E42AFA0DA15D17F86A2571.mft
caRepository: rsync://parent.rov.koenvanhove.nl/repo/KoenvanHove/0
Notify URL: https://parent.rov.koenvanhove.nl/rrdp/notification.xml
Certificate not before: Tue 20 Sep 2022 10:52:05 +0000
Certificate not after: Tue 19 Sep 2023 10:57:05 +0000
Subordinate resources: IP: 2a04:b905::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:57:53:18:c8:6e:0f:60:9d:4d:13:48:bf:4c:63:84:78:01:ae:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81eb3a5eb3df634551a90722bc63ad7e022cac4
Validity
Not Before: Sep 20 10:52:05 2022 GMT
Not After : Sep 19 10:57:05 2023 GMT
Subject: CN=7773ED99C6A9084BD4E42AFA0DA15D17F86A2571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:67:96:90:7a:f0:37:c9:8f:a7:3b:5f:27:02:
d3:3a:a4:6c:a4:3a:0b:e9:a1:9d:62:5b:32:00:d6:
6f:d6:9e:bd:bc:13:05:27:d2:d5:2e:d8:e2:5a:ba:
32:d5:76:9a:d6:1c:87:ba:39:2a:06:c4:2b:11:e5:
d5:53:e9:4c:41:0f:f2:48:07:83:63:32:bf:8d:be:
08:45:c0:98:34:50:b9:12:76:a4:90:d3:dd:03:d8:
09:5a:97:3a:b9:ff:96:c9:c7:e9:83:81:3e:53:33:
ac:e1:87:fe:a8:6c:47:1b:03:51:db:0d:b8:bd:c6:
e5:37:20:e7:f0:41:a9:32:72:a0:f9:82:4a:87:c7:
d4:7c:06:52:cc:91:61:be:0b:a0:f3:fc:17:62:6c:
c3:6b:f9:5c:f1:f4:79:a0:09:e9:42:23:af:b2:de:
60:44:57:ce:32:72:31:50:3e:46:30:54:33:54:95:
11:a8:c7:c3:c1:24:79:34:fb:df:10:a4:56:9c:fd:
fc:aa:1f:62:1e:98:63:06:82:ea:b6:17:0e:33:5e:
8c:e8:c9:16:c5:e9:d1:9d:67:7c:45:43:e9:a9:0b:
d9:4e:43:e5:73:21:30:e1:e5:83:ed:a1:fe:89:8e:
51:7d:a0:11:62:15:a9:b3:84:ba:94:ac:6a:30:b3:
d2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
77:73:ED:99:C6:A9:08:4B:D4:E4:2A:FA:0D:A1:5D:17:F8:6A:25:71
X509v3 Authority Key Identifier:
keyid:A8:1E:B3:A5:EB:3D:F6:34:55:1A:90:72:2B:C6:3A:D7:E0:22:CA:C4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.cloud/repo/nlnetlabs/1/A81EB3A5EB3DF634551A90722BC63AD7E022CAC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qB6zpes99jRVGpByK8Y61-AiysQ.cer
Subject Information Access:
CA Repository - URI:rsync://parent.rov.koenvanhove.nl/repo/KoenvanHove/0
RPKI Manifest - URI:rsync://parent.rov.koenvanhove.nl/repo/KoenvanHove/0/7773ED99C6A9084BD4E42AFA0DA15D17F86A2571.mft
RPKI Notify - URI:https://parent.rov.koenvanhove.nl/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b905::/32
Signature Algorithm: sha256WithRSAEncryption
98:76:bf:e9:89:7a:64:f1:55:81:40:67:db:b9:a6:fa:46:d1:
46:83:e3:59:7f:79:b4:b1:3c:d6:5f:86:b9:09:c1:fb:74:82:
06:6c:0a:f7:0c:61:9b:09:09:88:ba:ab:95:2d:34:7c:de:c4:
94:29:d1:9e:e6:4b:0c:f1:d2:a0:3b:fb:46:d8:c7:cd:d1:cb:
d1:de:1d:d8:e7:9f:f3:30:5e:f9:21:32:c1:e8:41:05:47:03:
1a:20:b1:cd:10:9d:66:2d:75:34:ea:44:c2:78:db:56:17:26:
2b:97:4c:90:c9:db:7c:54:3e:8c:eb:c3:11:69:17:e0:7a:4d:
fe:9a:96:81:94:41:97:ef:19:9e:32:51:ce:6d:d7:aa:12:37:
74:bf:06:d4:50:60:8a:0c:d2:94:90:4f:57:b5:9d:33:5c:13:
7e:6d:55:2c:51:5c:8b:9a:74:f0:3d:2c:d2:cb:36:e8:54:07:
d8:71:2b:62:9a:be:76:30:42:ed:1b:52:ff:4c:a8:9d:9e:1f:
c6:8b:c9:eb:f3:64:e5:b0:d4:f2:94:fd:b8:fe:d2:c4:38:e2:
52:4f:fe:76:01:5d:c0:cf:2d:fe:55:d8:58:e5:1f:7f:df:91:
34:86:e4:da:16:be:43:66:76:61:14:25:e8:0f:31:6f:46:37:
f3:d3:82:29
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgIUFVdTGMhuD2CdTRNIv0xjhHgBrhIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgxZWIzYTVlYjNkZjYzNDU1MWE5MDcyMmJjNjNhZDdl
MDIyY2FjNDAeFw0yMjA5MjAxMDUyMDVaFw0yMzA5MTkxMDU3MDVaMDMxMTAvBgNV
BAMTKDc3NzNFRDk5QzZBOTA4NEJENEU0MkFGQTBEQTE1RDE3Rjg2QTI1NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaZ5aQevA3yY+nO18nAtM6pGyk
OgvpoZ1iWzIA1m/Wnr28EwUn0tUu2OJaujLVdprWHIe6OSoGxCsR5dVT6UxBD/JI
B4NjMr+NvghFwJg0ULkSdqSQ090D2Alalzq5/5bJx+mDgT5TM6zhh/6obEcbA1Hb
Dbi9xuU3IOfwQakycqD5gkqHx9R8BlLMkWG+C6Dz/BdibMNr+Vzx9HmgCelCI6+y
3mBEV84ycjFQPkYwVDNUlRGox8PBJHk0+98QpFac/fyqH2IemGMGguq2Fw4zXozo
yRbF6dGdZ3xFQ+mpC9lOQ+VzITDh5YPtof6JjlF9oBFiFamzhLqUrGows9J9AgMB
AAGjggJ7MIICdzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR3c+2ZxqkIS9Tk
KvoNoV0X+GolcTAfBgNVHSMEGDAWgBSoHrOl6z32NFUakHIrxjrX4CLKxDAOBgNV
HQ8BAf8EBAMCAQYwaAYDVR0fBGEwXzBdoFugWYZXcnN5bmM6Ly9yc3luYy5rcmls
bC5jbG91ZC9yZXBvL25sbmV0bGFicy8xL0E4MUVCM0E1RUIzREY2MzQ1NTFBOTA3
MjJCQzYzQUQ3RTAyMkNBQzQuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcw
AoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9xQjZ6
cGVzOTlqUlZHcEJ5SzhZNjEtQWl5c1EuY2VyMIIBBgYIKwYBBQUHAQsEgfkwgfYw
QAYIKwYBBQUHMAWGNHJzeW5jOi8vcGFyZW50LnJvdi5rb2VudmFuaG92ZS5ubC9y
ZXBvL0tvZW52YW5Ib3ZlLzAwbQYIKwYBBQUHMAqGYXJzeW5jOi8vcGFyZW50LnJv
di5rb2VudmFuaG92ZS5ubC9yZXBvL0tvZW52YW5Ib3ZlLzAvNzc3M0VEOTlDNkE5
MDg0QkQ0RTQyQUZBMERBMTVEMTdGODZBMjU3MS5tZnQwQwYIKwYBBQUHMA2GN2h0
dHBzOi8vcGFyZW50LnJvdi5rb2VudmFuaG92ZS5ubC9ycmRwL25vdGlmaWNhdGlv
bi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACoEuQUwDQYJKoZIhvcNAQELBQADggEBAJh2v+mJemTxVYFA
Z9u5pvpG0UaD41l/ebSxPNZfhrkJwft0ggZsCvcMYZsJCYi6q5UtNHzexJQp0Z7m
Swzx0qA7+0bYx83Ry9HeHdjnn/MwXvkhMsHoQQVHAxogsc0QnWYtdTTqRMJ421YX
JiuXTJDJ23xUPozrwxFpF+B6Tf6aloGUQZfvGZ4yUc5t16oSN3S/BtRQYIoM0pSQ
T1e1nTNcE35tVSxRXIuadPA9LNLLNuhUB9hxK2KavnYwQu0bUv9MqJ2eH8aLyevz
ZOWw1PKU/bj+0sQ44lJP/nYBXcDPLf5V2FjlH3/fkTSG5NoWvkNmdmEUJegPMW9G
N/PTgik=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org