Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-IhSoFVQbp5d9_gYWZ_KdiPnuuE.cer
File: 1-IhSoFVQbp5d9_gYWZ_KdiPnuuE.cer (raw, json)
Hash identifier: khyH1oQHaT8ruUP5J92Ls5PhwB1BaWcLhYUQDLUVlQA=
Subject key identifier: F8:88:52:A0:55:50:6E:9E:5D:F7:F8:18:59:9F:CA:76:23:E7:BA:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 8394816317
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/c76563-4f53-4ae6-b4f4-fbaa10cbf8a3/1/1-IhSoFVQbp5d9_gYWZ_KdiPnuuE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/c76563-4f53-4ae6-b4f4-fbaa10cbf8a3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 07:16:41 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 194.49.108.0/23
IP: 194.49.112.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565132223255 (0x8394816317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:16:41 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=f88852a055506e9e5df7f818599fca7623e7bae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ed:95:24:dd:ea:96:1c:a5:8a:e6:38:77:6b:
30:d0:fa:56:9b:9e:d0:9d:ad:f2:e3:15:a0:0f:17:
d6:1f:cd:15:19:a6:f1:01:0a:f4:71:e8:72:02:b5:
78:51:c7:1f:c9:3b:c0:eb:d2:fa:df:2b:76:50:aa:
89:87:58:6f:f3:24:e6:02:48:5d:f6:b8:d6:48:8a:
e5:1a:c8:22:14:e0:7b:28:5d:33:b9:c0:17:73:d3:
27:eb:f1:03:93:d0:9c:2f:b7:4c:69:ae:39:df:35:
78:b6:cd:d1:db:d4:0d:70:64:ac:a1:e1:9a:c9:b5:
8d:bf:f9:1b:70:c3:da:a7:ae:f0:bd:fb:bb:91:91:
43:35:8f:73:69:af:52:d1:c0:60:9f:0f:05:41:ff:
43:63:4b:d2:27:87:99:c7:a6:01:ba:3d:53:a0:d7:
ae:93:91:87:67:70:f1:4c:b4:73:82:05:38:cd:6c:
1b:e9:61:f0:47:e1:53:1b:e0:10:0d:ae:07:3b:26:
c0:b3:ac:c7:0a:26:ef:12:a9:50:4a:9a:6c:b7:8c:
c6:d5:5e:6f:3b:0a:ff:12:8c:a3:e4:2d:c2:11:f7:
ab:a0:df:1a:bb:43:c8:c1:f7:31:8e:80:90:14:da:
92:f1:68:86:42:18:a5:0f:55:e7:74:9f:92:76:15:
92:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:88:52:A0:55:50:6E:9E:5D:F7:F8:18:59:9F:CA:76:23:E7:BA:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c76563-4f53-4ae6-b4f4-fbaa10cbf8a3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c76563-4f53-4ae6-b4f4-fbaa10cbf8a3/1/1-IhSoFVQbp5d9_gYWZ_KdiPnuuE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.108.0/23
194.49.112.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:bf:a9:7d:a3:1b:2c:a6:f4:f5:84:d1:17:74:a0:ec:cc:1e:
54:24:02:63:77:92:6e:c7:3f:dd:99:02:89:59:2b:0b:1b:8a:
5c:b7:ad:87:2f:54:b0:cb:bb:89:ba:8e:7e:87:8a:ba:b6:be:
16:14:a9:60:93:ce:59:1c:b7:e5:0a:a8:59:c4:a9:83:f7:0f:
8c:02:86:d6:c6:6c:91:fe:02:09:a1:33:3e:6a:35:06:dc:ae:
20:14:6d:4f:3a:a5:1e:51:5b:ab:e6:f0:89:6a:f7:a6:83:c9:
e1:b3:90:71:d5:f3:8e:69:c6:93:51:91:b9:e9:e9:c0:4c:28:
1c:05:35:a6:b8:ec:cd:82:74:c9:44:5f:9a:d3:8a:1a:fe:59:
b8:ea:c6:f1:c7:59:f3:65:91:59:30:e2:f5:91:ad:de:48:3e:
a3:3b:4b:fa:cf:d6:7b:f6:95:62:d8:46:a0:2d:f2:7c:c5:42:
5a:a4:d0:fd:47:36:d5:ba:8e:33:57:25:16:d1:cf:93:e6:dc:
32:db:78:b0:c3:35:ce:bf:54:f1:e2:9e:5b:93:70:86:bf:04:
38:fa:dc:90:4d:54:ca:ea:ec:94:f2:d0:ec:11:02:2f:42:62:
07:2d:54:f4:53:7c:aa:99:4c:02:4c:ca:16:e7:57:d6:cb:0d:
f0:bf:6c:78
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIGAIOUgWMXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjEw
MTAxMDcxNjQxWhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmODg4NTJhMDU1
NTA2ZTllNWRmN2Y4MTg1OTlmY2E3NjIzZTdiYWUxMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAnu2VJN3qlhyliuY4d2sw0PpWm57Qna3y4xWgDxfWH80V
GabxAQr0cehyArV4UccfyTvA69L63yt2UKqJh1hv8yTmAkhd9rjWSIrlGsgiFOB7
KF0zucAXc9Mn6/EDk9CcL7dMaa453zV4ts3R29QNcGSsoeGaybWNv/kbcMPap67w
vfu7kZFDNY9zaa9S0cBgnw8FQf9DY0vSJ4eZx6YBuj1ToNeuk5GHZ3DxTLRzggU4
zWwb6WHwR+FTG+AQDa4HOybAs6zHCibvEqlQSppst4zG1V5vOwr/Eoyj5C3CEfer
oN8au0PIwfcxjoCQFNqS8WiGQhilD1XndJ+SdhWSwwIDAQABo4ICizCCAocwHQYD
VR0OBBYEFPiIUqBVUG6eXff4GFmfynYj57rhMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhL2M3NjU2My00ZjUzLTRhZTYt
YjRmNC1mYmFhMTBjYmY4YTMvMS8wfQYIKwYBBQUHMAqGcXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvYzc2NTYzLTRmNTMtNGFlNi1i
NGY0LWZiYWExMGNiZjhhMy8xLzEtSWhTb0ZWUWJwNWQ5X2dZV1pfS2RpUG51dUUu
bWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5uZXQvbm90aWZpY2F0
aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5j
cmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAcIxbAMEAcIxcDANBgkqhkiG9w0BAQsFAAOCAQEAX7+pfaMbLKb0
9YTRF3Sg7MweVCQCY3eSbsc/3ZkCiVkrCxuKXLethy9UsMu7ibqOfoeKura+FhSp
YJPOWRy35QqoWcSpg/cPjAKG1sZskf4CCaEzPmo1BtyuIBRtTzqlHlFbq+bwiWr3
poPJ4bOQcdXzjmnGk1GRuenpwEwoHAU1prjszYJ0yURfmtOKGv5ZuOrG8cdZ82WR
WTDi9ZGt3kg+oztL+s/We/aVYthGoC3yfMVCWqTQ/Uc21bqOM1clFtHPk+bcMtt4
sMM1zr9U8eKeW5Nwhr8EOPrckE1UyurslPLQ7BECL0JiBy1U9FN8qplMAkzKFudX
1ssN8L9seA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:55 2023 by rpki-client on console-ams.rpki-client.org