Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45R8o8SMqIZ_MtNHwZWq1Kpj6Ik.cer
File: 45R8o8SMqIZ_MtNHwZWq1Kpj6Ik.cer (raw, json)
Hash identifier: cYEljfJ0dolGdrfQwe8kmFz1XBRGIevr6zfm0WK6pls=
Subject key identifier: E3:94:7C:A3:C4:8C:A8:86:7F:32:D3:47:C1:95:AA:D4:AA:63:E8:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9EBB910B78
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/21ad1b-99ac-45bb-95d6-d441d50c3a5d/1/45R8o8SMqIZ_MtNHwZWq1Kpj6Ik.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/21ad1b-99ac-45bb-95d6-d441d50c3a5d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:51:39 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 212.115.32.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 681751677816 (0x9ebb910b78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:51:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3947ca3c48ca8867f32d347c195aad4aa63e889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c3:7a:93:0b:00:97:a8:ba:10:7c:8d:70:27:
e5:61:1d:c8:14:bd:05:cb:8a:80:a5:51:85:d9:46:
c4:a5:fe:3f:38:18:5d:05:1a:d2:bd:84:e8:5b:34:
fc:1b:94:f2:71:6a:0d:1a:35:c9:0d:c3:d7:24:3b:
5e:c2:19:9e:33:38:ba:83:14:c8:fb:4d:64:7a:36:
a4:6d:24:16:ce:82:35:f3:aa:ed:09:70:ee:fc:f7:
0b:95:2b:a2:af:4a:4f:45:19:5b:41:f8:87:f5:f9:
e8:d3:08:7b:87:43:03:ff:46:66:02:1f:bb:44:30:
a8:ae:8e:84:cc:af:16:ee:03:b7:15:fb:8b:bd:a2:
47:02:35:27:d0:2e:37:bf:7e:76:89:d3:2c:77:7f:
bf:57:62:d7:56:c7:f7:d9:f1:39:90:92:a9:f0:f3:
0f:8e:42:06:38:57:5b:c0:20:36:8c:b0:b3:7e:08:
d0:11:13:6e:a6:44:f9:d6:e4:05:fa:ed:6a:1b:22:
62:71:db:9d:90:eb:12:aa:ee:38:52:b6:5e:97:9a:
63:9f:7f:54:d5:e1:38:e7:2d:11:23:82:ba:a8:09:
f9:f9:94:54:42:4f:88:fe:9c:31:a0:c9:50:0f:8e:
a1:53:13:05:11:fb:95:40:35:c7:53:25:17:03:21:
2c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:94:7C:A3:C4:8C:A8:86:7F:32:D3:47:C1:95:AA:D4:AA:63:E8:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/21ad1b-99ac-45bb-95d6-d441d50c3a5d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/21ad1b-99ac-45bb-95d6-d441d50c3a5d/1/45R8o8SMqIZ_MtNHwZWq1Kpj6Ik.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.32.0/22
Signature Algorithm: sha256WithRSAEncryption
77:74:97:25:33:0b:66:22:69:8c:aa:07:66:cf:e0:7f:53:df:
0a:0c:f0:6a:cd:2d:63:b5:07:73:c2:8d:68:ae:bc:af:62:e8:
5a:4a:be:ca:02:cf:5e:f2:d9:f7:ca:f6:e8:66:67:e8:15:0b:
b6:46:4e:f4:f1:c6:68:86:d8:c5:85:6b:75:6d:cd:f0:6a:08:
c1:bc:73:ff:dd:5b:7f:19:7b:82:15:a6:2e:12:97:b0:f5:b9:
c1:22:67:5a:2a:7f:24:0d:41:51:de:9f:a0:2d:18:e8:4c:46:
0c:30:c2:95:f9:d5:8c:65:36:ac:72:7c:39:2b:33:fc:9a:5d:
5b:76:5a:f0:e7:f6:23:65:a0:2d:3f:6c:9f:41:e1:32:fa:d5:
7b:0c:13:77:8e:98:e5:16:be:69:52:7f:29:07:d5:da:cc:79:
26:1f:f5:2f:70:9d:68:66:20:22:58:e5:42:36:69:f5:41:2b:
60:fb:b7:b9:93:30:96:54:6b:0d:30:76:d4:7c:ae:02:7c:9b:
dc:cb:06:8a:37:4a:24:3d:7c:e3:e0:2c:a1:5d:dd:c4:f6:76:
77:1a:ef:81:40:14:b8:90:eb:ff:71:bb:7a:c0:b9:f9:6a:32:
35:51:82:d6:95:46:8d:fc:85:03:c8:e3:06:3f:0b:59:de:5d:
c2:b0:8d:89
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAJ67kQt4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDU1MTM5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlMzk0N2NhM2M0
OGNhODg2N2YzMmQzNDdjMTk1YWFkNGFhNjNlODg5MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAo8N6kwsAl6i6EHyNcCflYR3IFL0Fy4qApVGF2UbEpf4/
OBhdBRrSvYToWzT8G5TycWoNGjXJDcPXJDtewhmeMzi6gxTI+01kejakbSQWzoI1
86rtCXDu/PcLlSuir0pPRRlbQfiH9fno0wh7h0MD/0ZmAh+7RDCoro6EzK8W7gO3
FfuLvaJHAjUn0C43v352idMsd3+/V2LXVsf32fE5kJKp8PMPjkIGOFdbwCA2jLCz
fgjQERNupkT51uQF+u1qGyJicdudkOsSqu44UrZel5pjn39U1eE45y0RI4K6qAn5
+ZRUQk+I/pwxoMlQD46hUxMFEfuVQDXHUyUXAyEsOQIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFOOUfKPEjKiGfzLTR8GVqtSqY+iJMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3LzIxYWQxYi05OWFjLTQ1YmIt
OTVkNi1kNDQxZDUwYzNhNWQvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvMjFhZDFiLTk5YWMtNDViYi05
NWQ2LWQ0NDFkNTBjM2E1ZC8xLzQ1UjhvOFNNcUlaX010Tkh3WldxMUtwajZJay5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQC1HMgMA0GCSqGSIb3DQEBCwUAA4IBAQB3dJclMwtmImmMqgdmz+B/
U98KDPBqzS1jtQdzwo1orryvYuhaSr7KAs9e8tn3yvboZmfoFQu2Rk708cZohtjF
hWt1bc3wagjBvHP/3Vt/GXuCFaYuEpew9bnBImdaKn8kDUFR3p+gLRjoTEYMMMKV
+dWMZTascnw5KzP8ml1bdlrw5/YjZaAtP2yfQeEy+tV7DBN3jpjlFr5pUn8pB9Xa
zHkmH/UvcJ1oZiAiWOVCNmn1QStg+7e5kzCWVGsNMHbUfK4CfJvcywaKN0okPXzj
4CyhXd3E9nZ3Gu+BQBS4kOv/cbt6wLn5ajI1UYLWlUaN/IUDyOMGPwtZ3l3CsI2J
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:36 2024 by rpki-client on console-fra.rpki-client.org