Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0fpw57DkwHpTkOlAataAjkZ9e4Q.cer
File: 0fpw57DkwHpTkOlAataAjkZ9e4Q.cer (raw, json)
Hash identifier: 7GulUY2+0WGP7edX5XLFAvCcfILVx1ykn3kixCPleo8=
Subject key identifier: D1:FA:70:E7:B0:E4:C0:7A:53:90:E9:40:6A:D6:80:8E:46:7D:7B:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7EF755C82E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/fcd77c-41e5-4e26-a65c-453c0cddf99a/1/0fpw57DkwHpTkOlAataAjkZ9e4Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/fcd77c-41e5-4e26-a65c-453c0cddf99a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 04:05:41 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: AS: 202227
IP: 185.220.164.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545315473454 (0x7ef755c82e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:05:41 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=d1fa70e7b0e4c07a5390e9406ad6808e467d7b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:76:d5:20:ad:4c:24:63:4d:4f:6a:0e:97:
12:6f:0c:ee:e9:e2:f5:5b:56:e6:0b:c8:6f:70:0f:
1b:73:f9:d4:af:43:d2:9c:96:67:7f:b7:1a:03:3a:
f6:4e:97:44:8f:64:3e:46:cd:78:dc:8f:38:07:f1:
96:65:2a:1b:b7:18:d2:17:cf:fc:f6:35:64:d2:a5:
1d:c0:1b:b2:67:35:ec:fc:24:29:91:b1:9a:9b:45:
d8:8c:1e:82:cf:a0:40:3c:cc:f3:ad:45:3e:93:25:
f3:00:fa:e7:de:3c:48:93:9c:61:1e:a5:b8:49:a8:
99:a2:e1:f6:30:ae:21:92:5c:51:6b:34:7e:1c:fa:
64:ef:80:62:3b:83:5a:28:2c:ac:4c:e6:59:d2:55:
05:e3:4b:c6:25:ff:ad:05:b6:bc:4d:7c:e3:73:78:
9a:c6:22:aa:7b:0c:d3:15:d7:bc:9b:1f:e4:e8:cc:
47:0d:67:fc:1a:61:b9:7c:30:00:0c:64:47:d6:38:
fd:e0:05:a3:43:be:29:f1:30:11:05:dd:4b:4a:6c:
2d:88:92:77:1c:ed:bf:5a:3b:b9:0d:88:52:34:9e:
7e:bf:5f:7f:4e:df:2b:40:4b:dd:24:a1:cb:ed:b9:
13:eb:0a:6a:8e:a3:73:81:7d:7c:7b:3d:ac:e9:01:
27:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FA:70:E7:B0:E4:C0:7A:53:90:E9:40:6A:D6:80:8E:46:7D:7B:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/fcd77c-41e5-4e26-a65c-453c0cddf99a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/fcd77c-41e5-4e26-a65c-453c0cddf99a/1/0fpw57DkwHpTkOlAataAjkZ9e4Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.164.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202227
Signature Algorithm: sha256WithRSAEncryption
65:70:2f:ab:d0:0e:ce:e2:02:7c:7d:b8:d7:cd:09:7a:fd:8d:
d6:59:63:05:de:f1:54:12:2b:34:ed:3e:e4:19:1d:cc:98:50:
11:ed:f4:35:bb:a5:5b:b9:67:3d:f4:36:ab:a4:6f:af:cb:b0:
12:65:9a:3a:14:15:89:01:9f:da:d1:ef:82:ad:d6:57:a3:80:
36:16:d1:34:57:f6:5e:7a:a8:1d:9f:ba:dd:e2:05:ba:12:37:
22:e6:d1:9d:e5:47:ad:a5:0c:f2:67:d3:ad:12:c4:80:c9:8e:
5b:c7:1a:8a:a4:59:c5:6f:f5:98:4c:f0:6a:00:d6:46:74:86:
3b:18:c7:ce:89:17:05:7c:04:db:c2:83:70:d5:d5:ae:e2:85:
2c:ce:f4:10:7b:74:e8:a2:bb:42:dd:58:0b:03:0b:9e:76:0b:
b8:c2:e1:53:f9:ef:8d:ce:91:9e:ee:2f:c9:71:fe:5e:fc:30:
73:c6:cf:12:7c:35:da:90:0c:b4:60:62:6c:56:5a:62:95:5f:
a4:5f:d7:f8:cc:a9:2a:b6:5e:60:48:60:8c:8e:21:4a:35:c7:
0b:db:05:84:c3:df:1b:35:a9:dc:49:d6:08:bf:53:06:49:73:
33:22:58:70:ce:e1:4c:d5:06:bb:a3:01:42:84:eb:29:f9:bb:
c2:41:8a:4a
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIFfvdVyC4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwNDA1NDFaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGQxZmE3MGU3YjBl
NGMwN2E1MzkwZTk0MDZhZDY4MDhlNDY3ZDdiODQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwtHbVIK1MJGNNT2oOlxJvDO7p4vVbVuYLyG9wDxtz+dSv
Q9Kclmd/txoDOvZOl0SPZD5GzXjcjzgH8ZZlKhu3GNIXz/z2NWTSpR3AG7JnNez8
JCmRsZqbRdiMHoLPoEA8zPOtRT6TJfMA+ufePEiTnGEepbhJqJmi4fYwriGSXFFr
NH4c+mTvgGI7g1ooLKxM5lnSVQXjS8Yl/60FtrxNfONzeJrGIqp7DNMV17ybH+To
zEcNZ/waYbl8MAAMZEfWOP3gBaNDvinxMBEF3UtKbC2Ikncc7b9aO7kNiFI0nn6/
X39O3ytAS90kocvtuRPrCmqOo3OBfXx7PazpASdRAgMBAAGjggKgMIICnDAdBgNV
HQ4EFgQU0fpw57DkwHpTkOlAataAjkZ9e4QwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvZmNkNzdjLTQxZTUtNGUyNi1h
NjVjLTQ1M2MwY2RkZjk5YS8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9mY2Q3N2MtNDFlNS00ZTI2LWE2
NWMtNDUzYzBjZGRmOTlhLzEvMGZwdzU3RGt3SHBUa09sQWF0YUFqa1o5ZTRRLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAK53KQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAxXzMA0GCSqGSIb3
DQEBCwUAA4IBAQBlcC+r0A7O4gJ8fbjXzQl6/Y3WWWMF3vFUEis07T7kGR3MmFAR
7fQ1u6VbuWc99DarpG+vy7ASZZo6FBWJAZ/a0e+CrdZXo4A2FtE0V/Zeeqgdn7rd
4gW6Ejci5tGd5UetpQzyZ9OtEsSAyY5bxxqKpFnFb/WYTPBqANZGdIY7GMfOiRcF
fATbwoNw1dWu4oUszvQQe3ToortC3VgLAwuedgu4wuFT+e+NzpGe7i/Jcf5e/DBz
xs8SfDXakAy0YGJsVlpilV+kX9f4zKkqtl5gSGCMjiFKNccL2wWEw98bNancSdYI
v1MGSXMzIlhwzuFM1Qa7owFChOsp+bvCQYpK
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:56 2023 by rpki-client on console-fra.rpki-client.org