Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3AH6WrqKPdR34Tn3bCPBaVFCEBk.cer
File: 3AH6WrqKPdR34Tn3bCPBaVFCEBk.cer (raw, json)
Hash identifier: 7LJpCLtAz/J/66DmywosHZWjyceAGYOeDILjyz3CXUI=
Subject key identifier: DC:01:FA:5A:BA:8A:3D:D4:77:E1:39:F7:6C:23:C1:69:51:42:10:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 83889E27A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/38bf2d-5764-4533-891c-779ae628f302/1/3AH6WrqKPdR34Tn3bCPBaVFCEBk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/38bf2d-5764-4533-891c-779ae628f302/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 07:14:39 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.135.236.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564932781986 (0x83889e27a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:14:39 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=dc01fa5aba8a3dd477e139f76c23c16951421019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:18:5d:da:be:9a:1a:a4:bb:43:26:8a:c6:39:
b5:4d:fa:8b:97:5c:6e:cc:78:a1:83:d8:95:c2:1f:
5f:56:2c:e6:d4:48:a8:c1:64:20:12:8e:41:0d:76:
be:7c:dc:88:e5:bd:97:ed:d6:1b:a0:52:a0:2a:5c:
1e:da:72:32:b5:2c:44:c7:10:4c:2f:c0:80:78:1e:
96:bd:aa:ed:f7:8b:82:53:eb:d7:76:f6:85:94:25:
7e:e6:ad:f6:77:94:38:ab:11:8b:10:e2:ad:40:8e:
f2:96:14:81:16:4d:61:ae:a0:f7:44:67:bb:84:93:
c0:7b:50:6f:d2:29:80:ca:0d:4e:be:1f:18:bb:e0:
0d:ec:3c:6d:3d:99:4a:76:58:94:5e:07:61:cb:07:
42:c4:ca:15:12:6f:24:ee:f7:87:41:0d:62:b2:17:
84:7a:1f:7e:99:1a:2e:d3:be:1c:cb:c8:61:0d:e7:
6e:6d:d9:50:e9:31:f1:f8:f1:aa:66:7c:0f:78:43:
3f:10:a8:c5:8b:03:9d:39:da:95:c6:7e:6c:f5:7e:
9d:22:e9:cf:c0:f9:89:4f:be:f4:75:95:02:46:33:
00:40:e7:c0:7e:6b:fc:2c:a3:de:c0:fd:10:13:07:
03:1e:13:f0:a0:10:1b:45:be:08:04:e0:b3:38:af:
39:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:01:FA:5A:BA:8A:3D:D4:77:E1:39:F7:6C:23:C1:69:51:42:10:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/38bf2d-5764-4533-891c-779ae628f302/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/38bf2d-5764-4533-891c-779ae628f302/1/3AH6WrqKPdR34Tn3bCPBaVFCEBk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.236.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:b3:60:e1:82:bd:f4:cc:0b:da:63:eb:67:06:d1:11:51:e0:
6a:4a:31:c0:c2:99:b9:1a:5e:02:a6:7c:3b:c3:ae:67:07:9e:
23:b9:06:9f:71:fb:ba:3e:71:8a:b5:f6:4e:3c:05:a0:01:87:
8e:aa:dd:48:1a:b9:35:a2:6b:5a:61:a9:45:60:fc:e0:a0:51:
da:e5:d1:d1:48:f0:de:37:dc:28:db:10:76:f7:9b:dd:f2:ed:
22:82:92:43:ce:ad:e4:9e:05:b0:10:a2:81:f6:6d:05:dc:e3:
ec:a8:7b:ac:c5:4e:bc:d5:50:f2:a5:ce:7c:c6:c7:c9:98:fd:
ed:1f:b5:73:a8:2f:bf:e6:67:21:68:bc:b5:9b:86:5a:b6:97:
29:2e:0e:fb:a5:7d:9d:cb:10:4b:a4:54:46:a4:28:4c:39:52:
38:ce:bf:e9:05:27:ba:54:16:53:0f:d9:b9:a5:e7:24:01:26:
cb:b3:ab:4d:e6:7c:60:5e:90:48:24:91:ca:8a:46:05:d9:48:
a9:d4:2f:42:8e:58:5f:7f:47:fb:9c:6a:9f:fa:d7:af:9c:b0:
d6:03:1c:92:5e:1c:3e:b1:e9:03:ea:a4:b4:05:a9:ba:d1:b2:
6c:06:f4:04:04:2c:b4:f8:c3:e0:c7:81:43:bb:e6:e2:92:32:
5e:fd:96:cb
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAIOInieiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjEw
MTAxMDcxNDM5WhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkYzAxZmE1YWJh
OGEzZGQ0NzdlMTM5Zjc2YzIzYzE2OTUxNDIxMDE5MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAmBhd2r6aGqS7QyaKxjm1TfqLl1xuzHihg9iVwh9fVizm
1EiowWQgEo5BDXa+fNyI5b2X7dYboFKgKlwe2nIytSxExxBML8CAeB6Wvart94uC
U+vXdvaFlCV+5q32d5Q4qxGLEOKtQI7ylhSBFk1hrqD3RGe7hJPAe1Bv0imAyg1O
vh8Yu+AN7DxtPZlKdliUXgdhywdCxMoVEm8k7veHQQ1isheEeh9+mRou074cy8hh
DedubdlQ6THx+PGqZnwPeEM/EKjFiwOdOdqVxn5s9X6dIunPwPmJT770dZUCRjMA
QOfAfmv8LKPewP0QEwcDHhPwoBAbRb4IBOCzOK85BQIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFNwB+lq6ij3Ud+E592wjwWlRQhAZMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0LzM4YmYyZC01NzY0LTQ1MzMt
ODkxYy03NzlhZTYyOGYzMDIvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvMzhiZjJkLTU3NjQtNDUzMy04
OTFjLTc3OWFlNjI4ZjMwMi8xLzNBSDZXcnFLUGRSMzRUbjNiQ1BCYVZGQ0VCay5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCLYfsMA0GCSqGSIb3DQEBCwUAA4IBAQB9s2Dhgr30zAvaY+tnBtER
UeBqSjHAwpm5Gl4Cpnw7w65nB54juQafcfu6PnGKtfZOPAWgAYeOqt1IGrk1omta
YalFYPzgoFHa5dHRSPDeN9wo2xB295vd8u0igpJDzq3kngWwEKKB9m0F3OPsqHus
xU681VDypc58xsfJmP3tH7VzqC+/5mchaLy1m4ZatpcpLg77pX2dyxBLpFRGpChM
OVI4zr/pBSe6VBZTD9m5peckASbLs6tN5nxgXpBIJJHKikYF2Uip1C9Cjlhff0f7
nGqf+tevnLDWAxySXhw+sekD6qS0Bam60bJsBvQEBCy0+MPgx4FDu+bikjJe/ZbL
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:28 2023 by rpki-client on console-ams.rpki-client.org