Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4T6XPAZaIM6M0LzbGhtRkOHk5OQ.cer
File: 4T6XPAZaIM6M0LzbGhtRkOHk5OQ.cer (raw, json)
Hash identifier: eY6Tu4KLTxEgvxXToIazBpUNcnWlmufrCh+Kp0518Ks=
Subject key identifier: E1:3E:97:3C:06:5A:20:CE:8C:D0:BC:DB:1A:1B:51:90:E1:E4:E4:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 60B6C166D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/fa646c-d843-42e6-b9d8-c4dbe0ad2c2c/1/4T6XPAZaIM6M0LzbGhtRkOHk5OQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/fa646c-d843-42e6-b9d8-c4dbe0ad2c2c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 24 Feb 2020 15:20:39 +0000
Certificate not after: Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources: IP: 185.243.188.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415382988504 (0x60b6c166d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 24 15:20:39 2020 GMT
Not After : Jul 1 00:00:00 2021 GMT
Subject: CN=e13e973c065a20ce8cd0bcdb1a1b5190e1e4e4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:b9:98:91:0d:6e:7d:5c:d1:56:a2:c7:85:
cf:00:5e:6a:22:c5:1f:5f:ae:b1:7b:83:b0:a4:80:
c2:4b:32:b3:65:81:fc:3d:32:59:fa:6a:8b:0b:9d:
ed:aa:87:28:ff:34:80:40:b9:ff:87:41:72:8e:48:
ae:4f:b6:c9:5a:6b:3b:eb:83:7f:13:e9:a9:be:d9:
0a:c7:3b:63:fa:09:0c:fc:a7:6b:3e:a5:5f:04:c1:
e5:26:ac:ad:de:c8:61:ec:ae:a6:18:4f:75:4e:9a:
8f:17:e5:bf:6f:49:6d:60:6e:8b:3d:8a:aa:84:d0:
e8:27:af:52:02:4c:58:8c:9e:c3:a0:5f:bb:de:ef:
0b:da:e6:ef:67:15:c8:80:00:43:69:45:d0:89:d3:
a8:3f:20:67:e0:62:76:a6:0e:b0:c5:69:66:a6:ca:
b6:46:43:99:89:9d:b5:75:d2:85:36:79:68:7c:12:
f6:80:06:b1:16:3f:67:d4:19:60:67:2c:49:1d:ff:
c4:62:9b:25:75:11:61:32:c0:b8:61:2b:77:75:ad:
37:de:06:a6:ac:4f:de:28:58:80:35:be:13:9c:d0:
70:77:3c:7f:b5:07:68:63:a4:4e:07:36:2b:30:e0:
68:25:bd:12:56:ee:1d:60:d8:24:cb:f3:30:3a:f6:
12:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3E:97:3C:06:5A:20:CE:8C:D0:BC:DB:1A:1B:51:90:E1:E4:E4:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/fa646c-d843-42e6-b9d8-c4dbe0ad2c2c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/fa646c-d843-42e6-b9d8-c4dbe0ad2c2c/1/4T6XPAZaIM6M0LzbGhtRkOHk5OQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.188.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:d6:ef:6d:84:25:66:f7:67:54:58:fb:f0:a5:2a:0a:9b:fb:
91:ac:ee:c5:36:dc:3c:98:51:91:f3:ba:24:b6:b7:48:7f:9e:
83:2c:1c:99:08:17:4a:d1:6c:ee:fd:9e:cb:47:95:17:30:aa:
6b:c6:65:40:28:c3:5a:1b:b3:07:2d:61:d4:6c:fc:26:0f:8d:
52:12:a0:98:70:0d:bf:e8:af:ec:5a:bb:1a:b2:11:ef:c9:75:
98:76:c2:8b:7e:c3:52:04:26:a8:65:0b:e7:8b:01:76:39:9a:
b8:e7:83:42:c3:cf:72:a2:b9:73:b4:00:15:65:71:a1:5d:5c:
f8:dd:16:3a:eb:5d:0a:32:bd:95:60:f5:52:40:93:ca:95:a4:
0c:5a:ee:06:ff:7d:57:02:2d:0b:66:cf:7a:f2:cf:c1:74:d3:
1a:1d:cf:df:aa:dd:a8:09:a1:b7:6a:cd:51:90:98:90:41:0e:
be:4e:4d:71:f4:20:21:b9:83:d3:8c:86:f7:70:e6:9d:1e:b5:
02:12:f7:4b:73:ff:55:8e:47:0f:a8:2c:ab:f7:ce:1b:56:46:
a9:42:ce:e1:1b:37:21:ee:92:a1:d5:7a:26:db:8e:2f:27:3e:
9e:57:24:11:f2:23:99:98:d3:d2:42:f7:57:bb:20:9e:a7:27:
7c:0b:d3:92
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIFYLbBZtgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMDAy
MjQxNTIwMzlaFw0yMTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGUxM2U5NzNjMDY1
YTIwY2U4Y2QwYmNkYjFhMWI1MTkwZTFlNGU0ZTQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDAELmYkQ1ufVzRVqLHhc8AXmoixR9frrF7g7CkgMJLMrNl
gfw9Mln6aosLne2qhyj/NIBAuf+HQXKOSK5Ptslaazvrg38T6am+2QrHO2P6CQz8
p2s+pV8EweUmrK3eyGHsrqYYT3VOmo8X5b9vSW1gbos9iqqE0Ognr1ICTFiMnsOg
X7ve7wva5u9nFciAAENpRdCJ06g/IGfgYnamDrDFaWamyrZGQ5mJnbV10oU2eWh8
EvaABrEWP2fUGWBnLEkd/8RimyV1EWEywLhhK3d1rTfeBqasT94oWIA1vhOc0HB3
PH+1B2hjpE4HNisw4GglvRJW7h1g2CTL8zA69hJvAgMBAAGjggKEMIICgDAdBgNV
HQ4EFgQU4T6XPAZaIM6M0LzbGhtRkOHk5OQwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvZmE2NDZjLWQ4NDMtNDJlNi1i
OWQ4LWM0ZGJlMGFkMmMyYy8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9mYTY0NmMtZDg0My00MmU2LWI5
ZDgtYzRkYmUwYWQyYzJjLzEvNFQ2WFBBWmFJTTZNMEx6YkdodFJrT0hrNU9RLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAK587wwDQYJKoZIhvcNAQELBQADggEBAE3W722EJWb3Z1RY+/ClKgqb
+5Gs7sU23DyYUZHzuiS2t0h/noMsHJkIF0rRbO79nstHlRcwqmvGZUAow1obswct
YdRs/CYPjVISoJhwDb/or+xauxqyEe/JdZh2wot+w1IEJqhlC+eLAXY5mrjng0LD
z3KiuXO0ABVlcaFdXPjdFjrrXQoyvZVg9VJAk8qVpAxa7gb/fVcCLQtmz3ryz8F0
0xodz9+q3agJobdqzVGQmJBBDr5OTXH0ICG5g9OMhvdw5p0etQIS90tz/1WORw+o
LKv3zhtWRqlCzuEbNyHukqHVeibbji8nPp5XJBHyI5mY09JC91e7IJ6nJ3wL05I=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:15 2023 by rpki-client on console-ams.rpki-client.org