Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5cx3ELAy3EfmzJGLuSSbxV9n2b0.cer
File: 5cx3ELAy3EfmzJGLuSSbxV9n2b0.cer (raw, json)
Hash identifier: 02hVhmPKzhmj7yzXUNmauM745qoPc4VOY5sDpGgb9/8=
Subject key identifier: E5:CC:77:10:B0:32:DC:47:E6:CC:91:8B:B9:24:9B:C5:5F:67:D9:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 722DD72A27
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/0230bd-cf1f-4967-b051-3f6c01af7da0/1/5cx3ELAy3EfmzJGLuSSbxV9n2b0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/0230bd-cf1f-4967-b051-3f6c01af7da0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 13 Nov 2020 20:11:11 +0000
Certificate not after: Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources: IP: 193.149.28.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490395347495 (0x722dd72a27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 13 20:11:11 2020 GMT
Not After : Jul 1 00:00:00 2021 GMT
Subject: CN=e5cc7710b032dc47e6cc918bb9249bc55f67d9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c1:31:42:e9:98:0f:8a:56:54:c3:87:1b:f3:
70:15:71:41:7d:29:46:8f:b5:4b:00:07:fe:38:4c:
6c:6a:36:ab:6e:02:f5:3e:28:c8:c1:39:d5:e6:2f:
c9:3e:44:20:68:07:69:b2:e9:4e:9f:ce:b5:31:18:
a2:5c:a3:35:6e:64:1c:75:45:61:62:38:75:44:50:
14:48:8a:1f:fe:09:f2:ae:2f:40:c9:66:c5:f4:9e:
ad:91:0c:e5:d5:2d:31:2f:4f:e4:88:83:71:b5:19:
ac:19:2d:c8:3b:5e:b6:d3:ec:6c:46:07:7a:ba:4b:
90:36:ae:7d:02:75:40:08:fa:de:e2:6d:fb:c2:8f:
4a:d8:59:34:7f:df:62:c4:3f:e5:79:ea:bd:0b:6c:
75:f6:a2:75:1b:3a:b7:d4:a3:fa:24:3e:77:bd:b2:
b5:25:82:75:0b:ea:4d:3c:4e:a0:f9:ba:84:db:08:
67:ad:26:1b:ea:b0:88:53:01:8c:d3:19:8a:6d:57:
e0:7b:59:c2:f0:be:58:73:e8:3c:26:5b:68:54:d0:
db:16:22:48:21:d6:43:2a:f0:92:e9:95:0e:5f:b8:
5d:97:1a:0c:b5:ae:de:21:23:ff:18:4d:4d:14:f4:
7a:2d:be:13:98:5d:d0:f2:fd:1d:17:ea:7b:b1:48:
c8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CC:77:10:B0:32:DC:47:E6:CC:91:8B:B9:24:9B:C5:5F:67:D9:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0230bd-cf1f-4967-b051-3f6c01af7da0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0230bd-cf1f-4967-b051-3f6c01af7da0/1/5cx3ELAy3EfmzJGLuSSbxV9n2b0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.28.0/22
Signature Algorithm: sha256WithRSAEncryption
57:4a:a2:57:57:d6:93:24:96:11:df:b7:17:45:32:2b:8a:8c:
e9:3c:12:cf:3d:0b:56:e8:7c:e8:85:cf:7b:47:c2:cc:e2:70:
65:ff:81:66:53:1f:b2:98:a8:a5:5a:69:ef:29:4e:89:7f:4e:
4f:ab:d2:1c:bd:41:12:16:72:ee:e8:fb:16:85:1d:1d:0a:bf:
91:0a:d8:69:61:f9:3a:53:63:b1:5f:82:71:1f:27:8a:bd:4e:
77:09:0a:cd:d2:f3:cc:dc:da:74:0b:f2:0c:aa:c6:aa:03:89:
94:90:22:09:4e:eb:f5:ea:de:3d:7e:fc:d7:06:2e:5c:4e:6c:
8c:1f:02:6a:1a:f9:e2:cc:ce:db:74:c4:ff:90:cf:bd:b9:c7:
c3:4a:77:fb:cf:72:7b:23:56:f6:ef:1b:98:9a:21:9f:99:49:
b8:a7:11:7e:aa:b0:5f:77:b3:06:bc:ab:b1:6c:b1:f5:14:bc:
1d:57:24:ac:f8:b1:87:9c:c8:4f:12:11:e3:18:db:ed:5f:49:
db:b2:d1:bb:b1:3f:22:85:b7:10:47:00:8e:ae:fd:11:f2:8e:
55:7a:3c:a6:b2:12:d3:ab:33:ac:a0:9e:8a:63:5c:26:37:78:
32:a4:26:44:71:ea:df:ae:d5:14:9c:a9:0c:9d:49:de:28:b9:
a1:6e:5f:f9
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIFci3XKicwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMDEx
MTMyMDExMTFaFw0yMTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGU1Y2M3NzEwYjAz
MmRjNDdlNmNjOTE4YmI5MjQ5YmM1NWY2N2Q5YmQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDywTFC6ZgPilZUw4cb83AVcUF9KUaPtUsAB/44TGxqNqtu
AvU+KMjBOdXmL8k+RCBoB2my6U6fzrUxGKJcozVuZBx1RWFiOHVEUBRIih/+CfKu
L0DJZsX0nq2RDOXVLTEvT+SIg3G1GawZLcg7XrbT7GxGB3q6S5A2rn0CdUAI+t7i
bfvCj0rYWTR/32LEP+V56r0LbHX2onUbOrfUo/okPne9srUlgnUL6k08TqD5uoTb
CGetJhvqsIhTAYzTGYptV+B7WcLwvlhz6DwmW2hU0NsWIkgh1kMq8JLplQ5fuF2X
Ggy1rt4hI/8YTU0U9HotvhOYXdDy/R0X6nuxSMjdAgMBAAGjggKEMIICgDAdBgNV
HQ4EFgQU5cx3ELAy3EfmzJGLuSSbxV9n2b0wHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvMDIzMGJkLWNmMWYtNDk2Ny1i
MDUxLTNmNmMwMWFmN2RhMC8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMjMwYmQtY2YxZi00OTY3LWIw
NTEtM2Y2YzAxYWY3ZGEwLzEvNWN4M0VMQXkzRWZtekpHTHVTU2J4VjluMmIwLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBALBlRwwDQYJKoZIhvcNAQELBQADggEBAFdKoldX1pMklhHftxdFMiuK
jOk8Es89C1bofOiFz3tHwszicGX/gWZTH7KYqKVaae8pTol/Tk+r0hy9QRIWcu7o
+xaFHR0Kv5EK2Glh+TpTY7FfgnEfJ4q9TncJCs3S88zc2nQL8gyqxqoDiZSQIglO
6/Xq3j1+/NcGLlxObIwfAmoa+eLMztt0xP+Qz725x8NKd/vPcnsjVvbvG5iaIZ+Z
SbinEX6qsF93swa8q7FssfUUvB1XJKz4sYecyE8SEeMY2+1fSduy0buxPyKFtxBH
AI6u/RHyjlV6PKayEtOrM6ygnopjXCY3eDKkJkRx6t+u1RScqQydSd4ouaFuX/k=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:44 2023 by rpki-client on console-ams.rpki-client.org