Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0Y1uugaDSobD2zDODZObe-qOKDc.cer
File: 0Y1uugaDSobD2zDODZObe-qOKDc.cer (raw, json)
Hash identifier: 9793cbJ2sO0A2/BRd8fv+g38NcNSshvFJdvyzMKtVsc=
Subject key identifier: D1:8D:6E:BA:06:83:4A:86:C3:DB:30:CE:0D:93:9B:7B:EA:8E:28:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B3EA6D339E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/a8e701-ed32-4c24-9907-d2fb7d71113b/1/0Y1uugaDSobD2zDODZObe-qOKDc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/a8e701-ed32-4c24-9907-d2fb7d71113b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 04 Jul 2022 14:46:43 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 146.19.97.0/24
IP: 2a13:800::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 772732171166 (0xb3ea6d339e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 4 14:46:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d18d6eba06834a86c3db30ce0d939b7bea8e2837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d3:a6:77:bc:93:9b:8a:5a:00:e6:d6:bc:c5:
9d:56:e8:8b:74:be:09:ad:35:dd:ec:c8:63:81:2b:
49:04:42:19:4d:e7:99:eb:a3:53:19:0e:1c:17:85:
c5:83:e7:da:87:a7:12:33:0e:77:8b:af:87:a6:65:
8f:80:4d:29:9e:f1:ce:49:5f:4e:e9:0a:b2:9b:1d:
db:89:2b:e3:df:a5:a8:1b:5b:3f:4c:3d:fa:37:bf:
c5:6f:f7:53:e7:c3:be:f0:8c:b2:25:01:3b:28:7f:
f9:20:a6:56:98:fe:94:07:00:18:e8:fe:7e:aa:62:
7d:3e:54:fd:06:c8:af:04:39:07:68:7f:ef:6d:3b:
a6:ea:29:89:19:b0:01:fb:c0:2d:36:3a:0b:fd:7d:
5e:3c:22:70:9a:4d:23:4e:7e:55:b6:59:a9:cc:b9:
76:dd:73:62:c7:3e:53:c7:e2:a1:a5:c0:8a:50:86:
07:69:62:cd:ac:1b:76:fb:c6:6e:0a:83:85:ad:b2:
1d:44:a5:4f:cb:3c:85:11:1a:f2:11:08:67:ba:f9:
37:9c:b4:df:ac:d0:df:71:66:13:1d:23:79:a5:89:
ef:93:62:5b:4d:49:bd:ba:f2:86:77:b5:74:e4:fd:
36:e8:11:c3:7e:6d:34:40:c3:a5:8e:49:15:36:9e:
2a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8D:6E:BA:06:83:4A:86:C3:DB:30:CE:0D:93:9B:7B:EA:8E:28:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a8e701-ed32-4c24-9907-d2fb7d71113b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a8e701-ed32-4c24-9907-d2fb7d71113b/1/0Y1uugaDSobD2zDODZObe-qOKDc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.97.0/24
IPv6:
2a13:800::/29
Signature Algorithm: sha256WithRSAEncryption
3e:dc:a6:f8:bd:dc:05:6e:38:4c:a9:2a:ab:8c:a3:8f:3c:85:
74:65:2f:14:1b:9b:e0:68:22:0b:48:35:0c:3f:8f:79:a5:79:
66:41:9a:f1:18:67:4f:80:fe:10:98:e6:9b:20:66:05:1e:1e:
f6:00:76:57:5b:ed:24:e9:4e:15:9c:98:82:af:ab:01:3a:4d:
38:f3:48:61:23:a0:22:a1:c7:e6:da:bc:99:5a:27:d1:38:1b:
d7:0d:d2:22:4c:b3:d1:4e:c2:a1:0a:22:9b:84:82:42:83:8d:
0b:82:1c:88:e4:d6:5b:8e:76:15:c9:67:0a:a9:f4:80:bf:72:
83:5c:e4:89:8c:97:cc:18:00:d0:06:ee:a7:99:4b:6c:28:20:
24:ac:d1:a2:e1:72:c9:e8:eb:59:df:ec:fb:d9:fb:ab:a0:7f:
c2:fc:7f:1a:2b:81:e8:ad:e8:fa:91:a5:6d:37:56:7e:29:e0:
fb:ca:9f:0e:ce:bf:c5:a3:39:31:8d:67:c6:12:f8:a2:b9:a4:
b0:78:b1:cd:de:fa:4e:24:ab:d3:04:ff:ac:d7:19:c8:42:59:
1e:46:13:ec:bf:de:82:72:51:c3:af:da:64:bd:9f:c9:be:b3:
6d:78:b8:7e:18:97:e9:de:0f:f2:c6:07:94:b9:4b:d3:96:7f:
08:b4:3f:24
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIGALPqbTOeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
NzA0MTQ0NjQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkMThkNmViYTA2
ODM0YTg2YzNkYjMwY2UwZDkzOWI3YmVhOGUyODM3MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAp9Omd7yTm4paAObWvMWdVuiLdL4JrTXd7MhjgStJBEIZ
TeeZ66NTGQ4cF4XFg+fah6cSMw53i6+HpmWPgE0pnvHOSV9O6Qqymx3biSvj36Wo
G1s/TD36N7/Fb/dT58O+8IyyJQE7KH/5IKZWmP6UBwAY6P5+qmJ9PlT9BsivBDkH
aH/vbTum6imJGbAB+8AtNjoL/X1ePCJwmk0jTn5VtlmpzLl23XNixz5Tx+KhpcCK
UIYHaWLNrBt2+8ZuCoOFrbIdRKVPyzyFERryEQhnuvk3nLTfrNDfcWYTHSN5pYnv
k2JbTUm9uvKGd7V05P026BHDfm00QMOljkkVNp4qswIDAQABo4ICkzCCAo8wHQYD
VR0OBBYEFNGNbroGg0qGw9swzg2Tm3vqjig3MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljL2E4ZTcwMS1lZDMyLTRjMjQt
OTkwNy1kMmZiN2Q3MTExM2IvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvYThlNzAxLWVkMzItNGMyNC05
OTA3LWQyZmI3ZDcxMTEzYi8xLzBZMXV1Z2FEU29iRDJ6RE9EWk9iZS1xT0tEYy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQAkhNhMA0EAgACMAcDBQMqEwgAMA0GCSqGSIb3DQEBCwUAA4IBAQA+
3Kb4vdwFbjhMqSqrjKOPPIV0ZS8UG5vgaCILSDUMP495pXlmQZrxGGdPgP4QmOab
IGYFHh72AHZXW+0k6U4VnJiCr6sBOk0480hhI6Aiocfm2ryZWifROBvXDdIiTLPR
TsKhCiKbhIJCg40LghyI5NZbjnYVyWcKqfSAv3KDXOSJjJfMGADQBu6nmUtsKCAk
rNGi4XLJ6OtZ3+z72furoH/C/H8aK4Horej6kaVtN1Z+KeD7yp8Ozr/FozkxjWfG
EviiuaSweLHN3vpOJKvTBP+s1xnIQlkeRhPsv96CclHDr9pkvZ/JvrNteLh+GJfp
3g/yxgeUuUvTln8ItD8k
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:07 2024 by rpki-client on console-ams.rpki-client.org