Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0sDuK7qXx3IEh9NaODbk14qDAqQ.cer
File: 0sDuK7qXx3IEh9NaODbk14qDAqQ.cer (raw, json)
Hash identifier: bubunFVUfVf2U65caDq5AZ3xsCkQyOoS6801sKJJ4EE=
Subject key identifier: D2:C0:EE:2B:BA:97:C7:72:04:87:D3:5A:38:36:E4:D7:8A:83:02:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A2B8B577DF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/2b3515-7fe7-426c-892e-4f0431fc39ab/1/0sDuK7qXx3IEh9NaODbk14qDAqQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/2b3515-7fe7-426c-892e-4f0431fc39ab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:57:56 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 212384
IP: 185.180.147.0/24
IP: 2a10:63c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 698883602399 (0xa2b8b577df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:57:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2c0ee2bba97c7720487d35a3836e4d78a8302a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bd:45:a0:34:6c:88:67:45:e4:c4:85:e8:14:
91:89:00:dd:43:21:9f:b6:ba:29:66:05:93:a5:42:
c4:ac:50:8d:fb:83:bb:48:67:bc:22:09:f0:b7:72:
60:c4:85:2f:50:5c:1d:bc:25:ba:55:94:5e:a4:3b:
54:c3:fc:cf:4f:f6:dc:14:1b:68:ae:6a:0c:50:54:
52:24:c5:e3:d7:37:20:c7:e2:01:50:4a:e4:72:1c:
a0:31:ee:fe:bf:16:e5:7d:ab:4c:be:14:53:fd:14:
16:b3:66:fa:8c:48:cb:79:6b:40:32:ab:cf:04:08:
a6:7d:39:b8:0d:0b:16:05:3f:39:ef:b5:40:ed:e6:
ee:f6:6a:a2:1d:5e:64:db:a6:c0:c7:8c:b5:17:0d:
2e:7a:91:e5:36:2a:77:ae:79:d3:46:64:5f:0f:07:
8c:81:23:c0:e3:ef:c3:5d:cd:2d:80:17:6b:2f:39:
57:07:3b:dc:72:4a:13:34:04:6a:0e:22:af:9b:79:
5a:67:22:70:01:88:bc:07:f8:d9:df:9a:8a:fd:85:
ed:60:64:5f:77:23:07:d3:98:0c:dd:b3:5c:1e:65:
ba:e7:f7:bb:a9:ae:74:55:fb:4a:85:cb:58:f3:ff:
06:7a:71:0b:9b:8b:aa:8f:4d:93:2d:7e:45:5c:33:
fa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C0:EE:2B:BA:97:C7:72:04:87:D3:5A:38:36:E4:D7:8A:83:02:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2b3515-7fe7-426c-892e-4f0431fc39ab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2b3515-7fe7-426c-892e-4f0431fc39ab/1/0sDuK7qXx3IEh9NaODbk14qDAqQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.147.0/24
IPv6:
2a10:63c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212384
Signature Algorithm: sha256WithRSAEncryption
5d:98:da:06:7f:ff:5d:15:48:4f:14:92:e5:50:f7:8c:fc:07:
31:03:ae:68:01:38:13:a1:88:a3:80:4a:3b:54:86:e3:fd:a3:
ad:0b:86:87:20:3a:a0:aa:d0:ea:09:04:a6:66:6b:4a:e4:7c:
1a:69:d1:33:40:76:d5:b9:f3:5e:44:a4:8f:b2:9c:a6:81:d5:
2b:b0:77:44:32:f3:2f:27:0c:84:8a:6d:4e:3d:a0:44:f4:bc:
71:7e:0e:47:95:e8:bd:ac:6f:1b:04:c2:f3:c5:4e:ce:59:19:
eb:bf:a8:dd:de:79:26:3a:20:ec:29:19:79:df:d8:fa:3c:96:
99:6d:c8:99:d2:4a:6b:ea:91:3a:5d:4e:86:c7:fd:e4:64:f9:
ee:27:19:e7:96:f7:45:bb:a6:07:6d:11:5b:03:4f:eb:b4:78:
1f:7c:5a:9b:ce:b6:b1:42:d3:cb:9d:c4:c6:03:4b:06:7c:0c:
97:8d:76:14:e3:54:2d:8a:89:63:fd:85:10:12:09:ee:52:ed:
04:67:b2:d7:b8:39:80:40:51:50:4a:56:36:47:1c:0c:d1:10:
df:70:d8:d1:24:e8:16:ca:c8:4d:6f:b7:6f:2d:30:1b:f6:2b:
b3:31:25:29:40:6a:7c:9b:99:a8:c5:4d:7e:05:6a:09:49:14:
a8:8b:37:83
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIGAKK4tXffMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDg1NzU2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkMmMwZWUyYmJh
OTdjNzcyMDQ4N2QzNWEzODM2ZTRkNzhhODMwMmE0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA171FoDRsiGdF5MSF6BSRiQDdQyGftropZgWTpULErFCN
+4O7SGe8Ignwt3JgxIUvUFwdvCW6VZRepDtUw/zPT/bcFBtormoMUFRSJMXj1zcg
x+IBUErkchygMe7+vxblfatMvhRT/RQWs2b6jEjLeWtAMqvPBAimfTm4DQsWBT85
77VA7ebu9mqiHV5k26bAx4y1Fw0uepHlNip3rnnTRmRfDweMgSPA4+/DXc0tgBdr
LzlXBzvcckoTNARqDiKvm3laZyJwAYi8B/jZ35qK/YXtYGRfdyMH05gM3bNcHmW6
5/e7qa50VftKhctY8/8GenELm4uqj02TLX5FXDP6GQIDAQABo4ICrzCCAqswHQYD
VR0OBBYEFNLA7iu6l8dyBIfTWjg25NeKgwKkMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y3LzJiMzUxNS03ZmU3LTQyNmMt
ODkyZS00ZjA0MzFmYzM5YWIvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvMmIzNTE1LTdmZTctNDI2Yy04
OTJlLTRmMDQzMWZjMzlhYi8xLzBzRHVLN3FYeDNJRWg5TmFPRGJrMTRxREFxUS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQAubSTMA0EAgACMAcDBQMqEGPAMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwM9oDANBgkqhkiG9w0BAQsFAAOCAQEAXZjaBn//XRVITxSS5VD3jPwHMQOu
aAE4E6GIo4BKO1SG4/2jrQuGhyA6oKrQ6gkEpmZrSuR8GmnRM0B21bnzXkSkj7Kc
poHVK7B3RDLzLycMhIptTj2gRPS8cX4OR5XovaxvGwTC88VOzlkZ67+o3d55Jjog
7CkZed/Y+jyWmW3ImdJKa+qROl1Ohsf95GT57icZ55b3RbumB20RWwNP67R4H3xa
m862sULTy53ExgNLBnwMl412FONULYqJY/2FEBIJ7lLtBGey17g5gEBRUEpWNkcc
DNEQ33DY0SToFsrITW+3by0wG/YrszElKUBqfJuZqMVNfgVqCUkUqIs3gw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:27 2024 by rpki-client on console-ams.rpki-client.org