Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6gsf_7NZHYg3IrMHo8u4xzqaywg.cer
File: 6gsf_7NZHYg3IrMHo8u4xzqaywg.cer (raw, json)
Hash identifier: lwe8AorhwsPlOwyTT6tKiqOgWCf4mlSeIxtLWwXkUuM=
Subject key identifier: EA:0B:1F:FF:B3:59:1D:88:37:22:B3:07:A3:CB:B8:C7:3A:9A:CB:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7A91CD38C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/c4f370-b7fa-421d-ae73-c0e1d281228c/1/6gsf_7NZHYg3IrMHo8u4xzqaywg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/c4f370-b7fa-421d-ae73-c0e1d281228c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 02:17:46 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.90.4.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 526432155841 (0x7a91cd38c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:17:46 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=ea0b1fffb3591d883722b307a3cbb8c73a9acb08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:01:03:91:94:53:64:90:c5:f9:72:4f:ac:1c:
a2:33:ff:9f:62:43:97:f3:a7:fb:e4:27:54:0a:a4:
ea:69:25:92:f2:06:8f:9c:94:68:f4:13:76:1e:e9:
20:8d:ac:52:b5:14:b3:22:98:74:32:18:ff:14:ae:
48:1a:1b:83:e3:5b:63:d4:30:66:eb:80:86:ee:21:
c2:28:b7:08:6e:2e:58:6e:4b:be:b1:59:2a:20:d0:
16:c1:92:08:74:92:d0:34:0f:fb:6c:11:9b:f3:ca:
e1:f3:7e:15:6c:0b:26:7b:b7:14:b0:8e:f9:f5:06:
c3:99:6c:27:f2:db:03:91:76:23:00:cf:e5:99:e3:
c2:20:41:cd:05:42:2c:f3:eb:d8:00:7b:cb:9e:92:
7d:ce:71:8e:c7:41:13:72:ff:b9:92:e6:68:d5:83:
53:3d:1c:e9:f5:a1:f6:db:88:b1:5e:49:1d:e6:8f:
8c:96:e2:78:2a:ea:5c:11:c7:70:5b:91:ed:66:1f:
e1:e2:a8:51:aa:d3:54:15:50:36:49:43:ce:72:94:
7f:79:a6:75:1c:40:a1:4c:ca:b2:5e:7c:8e:2c:44:
d4:dd:05:5b:4f:2a:35:73:18:60:ff:7f:9c:1f:67:
e5:3c:79:2c:45:87:e8:c4:19:82:64:86:5d:db:91:
8b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0B:1F:FF:B3:59:1D:88:37:22:B3:07:A3:CB:B8:C7:3A:9A:CB:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4f370-b7fa-421d-ae73-c0e1d281228c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4f370-b7fa-421d-ae73-c0e1d281228c/1/6gsf_7NZHYg3IrMHo8u4xzqaywg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.4.0/22
Signature Algorithm: sha256WithRSAEncryption
27:14:4a:b4:d4:ae:cb:7b:68:8b:1b:6f:46:a0:ec:37:d1:73:
1a:7f:a7:b1:3d:1e:ed:aa:18:f2:55:b2:69:bb:12:fd:34:f2:
4d:ac:29:df:1a:e1:47:da:d3:95:04:5d:03:2b:1f:eb:b2:f6:
78:b9:8d:8f:a2:25:cb:77:d7:6c:9a:53:7b:3f:5a:02:b4:97:
de:80:35:68:9c:fa:fe:50:82:fb:a9:3b:87:98:30:89:05:42:
c1:e6:4b:7c:5c:fd:6b:dc:9f:5e:a1:05:7e:4c:79:f2:33:aa:
68:c2:41:b3:5c:0d:15:51:a3:dc:88:59:ec:f1:57:d1:80:83:
56:df:79:5e:be:35:6a:5b:72:a4:df:3e:75:a9:ec:71:c3:5c:
6b:20:40:05:e3:2f:41:b9:1e:0f:44:d9:52:97:76:45:af:f6:
2b:b3:d7:ae:53:31:ed:c2:17:26:01:83:f7:b5:b4:dd:8d:40:
65:29:f6:5a:cb:cb:6d:bf:18:dc:89:92:7d:41:23:f8:c5:b4:
6c:2a:1b:b1:9a:fc:ad:f0:d6:cc:4c:d0:1d:26:61:38:0d:ca:
e3:00:52:87:2e:e5:0f:a7:a6:ad:d9:90:01:e5:38:46:75:cf:
4d:ea:53:1a:db:41:f7:92:94:23:47:c0:04:1c:1f:c9:03:01:
38:68:c6:88
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIFepHNOMEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMjE3NDZaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGVhMGIxZmZmYjM1
OTFkODgzNzIyYjMwN2EzY2JiOGM3M2E5YWNiMDgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCFAQORlFNkkMX5ck+sHKIz/59iQ5fzp/vkJ1QKpOppJZLy
Bo+clGj0E3Ye6SCNrFK1FLMimHQyGP8UrkgaG4PjW2PUMGbrgIbuIcIotwhuLlhu
S76xWSog0BbBkgh0ktA0D/tsEZvzyuHzfhVsCyZ7txSwjvn1BsOZbCfy2wORdiMA
z+WZ48IgQc0FQizz69gAe8uekn3OcY7HQRNy/7mS5mjVg1M9HOn1ofbbiLFeSR3m
j4yW4ngq6lwRx3Bbke1mH+HiqFGq01QVUDZJQ85ylH95pnUcQKFMyrJefI4sRNTd
BVtPKjVzGGD/f5wfZ+U8eSxFh+jEGYJkhl3bkYt9AgMBAAGjggKEMIICgDAdBgNV
HQ4EFgQU6gsf/7NZHYg3IrMHo8u4xzqaywgwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAvYzRmMzcwLWI3ZmEtNDIxZC1h
ZTczLWMwZTFkMjgxMjI4Yy8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9jNGYzNzAtYjdmYS00MjFkLWFl
NzMtYzBlMWQyODEyMjhjLzEvNmdzZl83TlpIWWczSXJNSG84dTR4enFheXdnLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAItWgQwDQYJKoZIhvcNAQELBQADggEBACcUSrTUrst7aIsbb0ag7DfR
cxp/p7E9Hu2qGPJVsmm7Ev008k2sKd8a4Ufa05UEXQMrH+uy9ni5jY+iJct312ya
U3s/WgK0l96ANWic+v5QgvupO4eYMIkFQsHmS3xc/Wvcn16hBX5MefIzqmjCQbNc
DRVRo9yIWezxV9GAg1bfeV6+NWpbcqTfPnWp7HHDXGsgQAXjL0G5Hg9E2VKXdkWv
9iuz165TMe3CFyYBg/e1tN2NQGUp9lrLy22/GNyJkn1BI/jFtGwqG7Ga/K3w1sxM
0B0mYTgNyuMAUocu5Q+npq3ZkAHlOEZ1z03qUxrbQfeSlCNHwAQcH8kDAThoxog=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:41 2023 by rpki-client on console-fra.rpki-client.org