Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-stv_NpOKroCyhO6CA_98y8uzhE.cer
File: 1-stv_NpOKroCyhO6CA_98y8uzhE.cer (raw, json)
Hash identifier: q1w1iV1pDv06StFBxKwEnt4InqazKVeRYRa9rTwRu7c=
Subject key identifier: FA:CB:6F:FC:DA:4E:2A:BA:02:CA:13:BA:08:0F:FD:F3:2F:2E:CE:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A72C4CCF0A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/06ab43-ceb1-4a9c-b8b4-f3a2b0a5ab97/1/1-stv_NpOKroCyhO6CA_98y8uzhE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/06ab43-ceb1-4a9c-b8b4-f3a2b0a5ab97/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:56:51 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 42755
AS: 51749
IP: 46.21.160.0/20
IP: 91.195.200.0/23
IP: 91.196.168.0/22
IP: 91.198.27.0/24
IP: 185.138.208.0/22
IP: 195.184.64.0/23
IP: 2a02:27f8::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 718002769674 (0xa72c4ccf0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:56:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=facb6ffcda4e2aba02ca13ba080ffdf32f2ece11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7b:98:30:3b:df:7a:91:6a:a7:f6:b3:77:75:
43:38:ef:23:d4:bc:22:4a:7e:f4:41:48:34:8a:7d:
97:58:ae:ce:0f:79:7c:9f:27:4f:49:90:11:77:26:
93:5c:c7:a6:3f:3d:cb:6b:5b:e8:b1:62:de:9e:45:
59:d6:a7:de:52:11:26:82:bc:17:7b:7e:22:35:9a:
28:20:50:3c:c6:d1:02:bb:48:2f:c2:dc:65:af:e5:
cd:61:26:83:04:9e:74:fc:22:9e:2b:80:5a:0a:ae:
43:0a:31:62:fd:b4:ed:a6:66:73:cf:5a:ce:0a:96:
4d:f2:82:71:c4:99:76:ad:49:76:02:d0:cd:43:0c:
1c:0b:9a:79:36:48:89:0b:ac:1d:30:6c:e8:52:37:
34:0f:24:8e:15:25:23:4e:84:03:ce:a1:75:8b:80:
52:09:42:dd:34:ea:df:6f:99:85:71:1e:01:3f:3f:
94:b9:c1:98:78:30:63:c2:b5:42:ca:98:36:5c:dd:
7c:93:44:ce:0c:4c:51:03:dc:fc:00:0d:fb:76:56:
1c:fe:a6:a7:68:44:ea:07:4f:a3:97:ff:83:65:54:
d5:36:5f:f7:1c:74:63:84:4c:d3:cc:67:04:1a:dc:
63:51:b9:19:67:07:73:01:28:89:08:21:1d:dc:e8:
8e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CB:6F:FC:DA:4E:2A:BA:02:CA:13:BA:08:0F:FD:F3:2F:2E:CE:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/06ab43-ceb1-4a9c-b8b4-f3a2b0a5ab97/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/06ab43-ceb1-4a9c-b8b4-f3a2b0a5ab97/1/1-stv_NpOKroCyhO6CA_98y8uzhE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.160.0/20
91.195.200.0/23
91.196.168.0/22
91.198.27.0/24
185.138.208.0/22
195.184.64.0/23
IPv6:
2a02:27f8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42755
51749
Signature Algorithm: sha256WithRSAEncryption
47:6d:89:04:68:2d:ea:a3:11:6e:ff:36:57:c4:0a:6d:b6:c8:
4e:37:61:c8:31:cc:f1:53:81:23:be:9b:e1:bb:85:6d:8b:01:
09:36:a6:95:8a:66:4b:4e:44:dc:80:91:ed:29:fa:81:a8:83:
4a:5c:eb:a6:a2:43:11:dc:92:e9:d6:fb:b1:22:98:55:d5:73:
7c:5d:0f:09:f4:cc:a9:12:31:2f:e1:91:d3:d9:7e:2b:97:e2:
d1:ad:8f:e9:8b:0b:11:57:a1:05:98:51:d7:0d:25:e0:c3:5e:
c0:5a:51:ea:e1:bc:95:1e:a7:2d:74:5c:0d:56:25:5b:ea:20:
c8:75:8d:30:09:01:d7:fd:31:18:bf:5d:f9:27:05:24:5e:e3:
8a:18:7f:49:2d:e3:7b:f4:13:1e:9d:b5:4c:9d:c8:f7:3a:c6:
41:9f:0e:f7:68:48:1e:9e:56:a7:a4:a2:2e:c1:06:3f:42:d1:
e9:b5:da:96:5d:0c:5a:d6:5e:16:b2:10:9e:04:57:ac:46:6d:
3b:d0:0d:32:47:5a:41:2e:0c:72:b4:65:0b:23:b2:47:a8:4c:
5e:07:db:7b:e3:a4:e4:ab:17:df:3f:dc:59:d7:d0:fb:d6:fb:
50:6f:b5:71:fb:af:75:eb:12:68:04:6d:92:78:43:a8:07:84:
08:38:cc:3b
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIGAKcsTM8KMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTI1NjUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmYWNiNmZmY2Rh
NGUyYWJhMDJjYTEzYmEwODBmZmRmMzJmMmVjZTExMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAx3uYMDvfepFqp/azd3VDOO8j1LwiSn70QUg0in2XWK7O
D3l8nydPSZARdyaTXMemPz3La1vosWLenkVZ1qfeUhEmgrwXe34iNZooIFA8xtEC
u0gvwtxlr+XNYSaDBJ50/CKeK4BaCq5DCjFi/bTtpmZzz1rOCpZN8oJxxJl2rUl2
AtDNQwwcC5p5NkiJC6wdMGzoUjc0DySOFSUjToQDzqF1i4BSCULdNOrfb5mFcR4B
Pz+UucGYeDBjwrVCypg2XN18k0TODExRA9z8AA37dlYc/qanaETqB0+jl/+DZVTV
Nl/3HHRjhEzTzGcEGtxjUbkZZwdzASiJCCEd3OiOTQIDAQABo4IC0zCCAs8wHQYD
VR0OBBYEFPrLb/zaTiq6AsoTuggP/fMvLs4RMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg4LzA2YWI0My1jZWIxLTRhOWMt
YjhiNC1mM2EyYjBhNWFiOTcvMS8wfQYIKwYBBQUHMAqGcXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvMDZhYjQzLWNlYjEtNGE5Yy1i
OGI0LWYzYTJiMGE1YWI5Ny8xLzEtc3R2X05wT0tyb0N5aE82Q0FfOTh5OHV6aEUu
bWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5uZXQvbm90aWZpY2F0
aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5j
cmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBMBggrBgEFBQcBBwEB/wQ9MDsw
KgQCAAEwJAMEBC4VoAMEAVvDyAMEAlvEqAMEAFvGGwMEArmK0AMEAcO4QDANBAIA
AjAHAwUAKgIn+DAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMApwMCAwDKJTANBgkq
hkiG9w0BAQsFAAOCAQEAR22JBGgt6qMRbv82V8QKbbbITjdhyDHM8VOBI76b4buF
bYsBCTamlYpmS05E3ICR7Sn6gaiDSlzrpqJDEdyS6db7sSKYVdVzfF0PCfTMqRIx
L+GR09l+K5fi0a2P6YsLEVehBZhR1w0l4MNewFpR6uG8lR6nLXRcDVYlW+ogyHWN
MAkB1/0xGL9d+ScFJF7jihh/SS3je/QTHp21TJ3I9zrGQZ8O92hIHp5Wp6SiLsEG
P0LR6bXall0MWtZeFrIQngRXrEZtO9ANMkdaQS4McrRlCyOyR6hMXgfbe+Ok5KsX
3z/cWdfQ+9b7UG+1cfuvdesSaARtknhDqAeECDjMOw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:24 2024 by rpki-client on console-fra.rpki-client.org