Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4N17DFaVDxHIzkhZ94fO0UNB4pQ.cer
File: 4N17DFaVDxHIzkhZ94fO0UNB4pQ.cer (raw, json)
Hash identifier: Z+1qRnKC0GBgNaGqLU2vahpGf2lqTkTasKsQK6TSnkQ=
Subject key identifier: E0:DD:7B:0C:56:95:0F:11:C8:CE:48:59:F7:87:CE:D1:43:41:E2:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7520868D92
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://nostromo.heficed.net/repo/635323/0/E0DD7B0C56950F11C8CE4859F787CED14341E294.mft
caRepository: rsync://nostromo.heficed.net/repo/635323/0/
Notify URL: https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before: Fri 01 Jan 2021 00:00:23 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 5.252.80.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503056862610 (0x7520868d92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:00:23 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=e0dd7b0c56950f11c8ce4859f787ced14341e294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:10:42:ec:39:54:0c:b7:2a:e7:61:85:d6:89:
23:30:d5:40:40:e1:57:2e:a9:cc:f2:9e:31:a8:fd:
3e:be:3a:0c:2f:0e:bf:26:5d:0f:00:d3:ea:e1:3f:
f6:f0:fd:b5:81:f7:ab:76:e1:15:38:f9:4b:27:8f:
a9:6f:ac:77:46:8d:a5:49:11:1c:68:d2:4c:22:fd:
f0:05:fa:f1:bd:59:a3:2b:99:21:a1:59:10:e0:32:
4e:4a:65:8a:a7:b6:81:95:bd:f7:fc:80:59:23:d0:
ed:9b:3e:92:e7:a6:76:07:f8:8a:cb:39:af:cf:38:
c7:b5:b7:e3:86:cc:5f:aa:5e:53:ec:57:cc:8a:10:
e5:c2:4e:f5:d1:d2:96:b2:60:79:d9:17:fd:12:b6:
c6:23:5b:fd:1b:f9:ec:f7:9c:f3:31:4a:64:a7:c1:
ce:02:40:a9:9f:8c:fd:55:34:f6:fe:35:dd:3b:ce:
c0:e3:91:48:94:a9:5a:0d:62:25:a3:7f:1c:37:70:
e5:6d:87:2e:cd:73:03:ef:92:f6:af:3e:92:45:23:
6a:57:31:7b:bf:58:c6:e9:d2:ad:f1:61:c0:94:5a:
02:37:c8:60:5d:da:8d:a4:6e:bd:d5:57:70:a3:9c:
75:c5:b0:8b:62:26:6b:fd:09:49:1d:c3:5c:2f:66:
b9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DD:7B:0C:56:95:0F:11:C8:CE:48:59:F7:87:CE:D1:43:41:E2:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://nostromo.heficed.net/repo/635323/0/
RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/635323/0/E0DD7B0C56950F11C8CE4859F787CED14341E294.mft
RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.80.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:99:cf:8f:03:3d:de:55:60:61:31:40:b1:06:96:4b:35:c2:
e0:43:1a:cf:1b:53:4b:eb:27:a9:fd:99:7c:a8:de:01:ae:e4:
fe:fd:31:22:66:15:50:70:6f:81:05:56:22:5a:87:7d:e3:3b:
8d:1c:50:d1:4a:fa:db:49:a3:b2:4e:6e:26:5a:29:cc:8e:7d:
d5:cb:fe:90:e1:7c:f0:97:95:d7:60:3d:e4:eb:a9:40:10:ad:
05:0a:c0:1a:b3:0c:9d:91:7a:d0:f5:37:e7:03:e5:4a:25:59:
d5:f8:ae:a3:59:2c:cd:5d:c0:4c:4b:f8:46:1a:56:83:95:0d:
51:30:12:8f:7f:d0:5d:a6:f6:5c:9f:8f:4a:fd:1d:95:f6:a8:
57:aa:fa:74:2f:53:44:af:28:71:89:88:1c:e7:e3:03:e0:54:
90:73:15:30:25:c7:ca:65:d8:35:8d:f2:17:8c:a1:90:78:ee:
08:95:51:5b:70:3a:94:9e:51:40:17:4d:1c:cb:32:03:f4:39:
62:81:4c:21:64:24:04:5c:b9:9c:62:46:15:dc:74:65:15:20:
49:f1:80:a5:07:85:3f:44:de:0f:31:f0:b4:78:e7:16:a4:1e:
91:b3:47:6e:33:ca:19:20:73:bc:3f:1d:33:30:9c:8f:fb:12:
52:1d:ad:ff
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIFdSCGjZIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMDAwMjNaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGUwZGQ3YjBjNTY5
NTBmMTFjOGNlNDg1OWY3ODdjZWQxNDM0MWUyOTQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJEELsOVQMtyrnYYXWiSMw1UBA4VcuqczynjGo/T6+Ogwv
Dr8mXQ8A0+rhP/bw/bWB96t24RU4+Usnj6lvrHdGjaVJERxo0kwi/fAF+vG9WaMr
mSGhWRDgMk5KZYqntoGVvff8gFkj0O2bPpLnpnYH+IrLOa/POMe1t+OGzF+qXlPs
V8yKEOXCTvXR0payYHnZF/0StsYjW/0b+ez3nPMxSmSnwc4CQKmfjP1VNPb+Nd07
zsDjkUiUqVoNYiWjfxw3cOVthy7NcwPvkvavPpJFI2pXMXu/WMbp0q3xYcCUWgI3
yGBd2o2kbr3VV3CjnHXFsItiJmv9CUkdw1wvZrlBAgMBAAGjggJOMIICSjAdBgNV
HQ4EFgQU4N17DFaVDxHIzkhZ94fO0UNB4pQwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCB
7gYIKwYBBQUHAQsEgeEwgd4wNwYIKwYBBQUHMAWGK3JzeW5jOi8vbm9zdHJvbW8u
aGVmaWNlZC5uZXQvcmVwby82MzUzMjMvMC8wYwYIKwYBBQUHMAqGV3JzeW5jOi8v
bm9zdHJvbW8uaGVmaWNlZC5uZXQvcmVwby82MzUzMjMvMC9FMEREN0IwQzU2OTUw
RjExQzhDRTQ4NTlGNzg3Q0VEMTQzNDFFMjk0Lm1mdDA+BggrBgEFBQcwDYYyaHR0
cHM6Ly9ub3N0cm9tby5oZWZpY2VkLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWww
WQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3JsMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAIF/FAwDQYJKoZIhvcNAQELBQADggEBAKSZz48DPd5VYGExQLEGlks1wuBDGs8b
U0vrJ6n9mXyo3gGu5P79MSJmFVBwb4EFViJah33jO40cUNFK+ttJo7JObiZaKcyO
fdXL/pDhfPCXlddgPeTrqUAQrQUKwBqzDJ2RetD1N+cD5UolWdX4rqNZLM1dwExL
+EYaVoOVDVEwEo9/0F2m9lyfj0r9HZX2qFeq+nQvU0SvKHGJiBzn4wPgVJBzFTAl
x8pl2DWN8heMoZB47giVUVtwOpSeUUAXTRzLMgP0OWKBTCFkJARcuZxiRhXcdGUV
IEnxgKUHhT9E3g8x8LR45xakHpGzR24zyhkgc7w/HTMwnI/7ElIdrf8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:33 2023 by rpki-client on console-fra.rpki-client.org