Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6z7n7qfn5ndrWdC3Xpk90WbocXc.cer
File: 6z7n7qfn5ndrWdC3Xpk90WbocXc.cer (raw, json)
Hash identifier: CvteBsM9dmY02L8twBzlAOUjatt5mhqZyyhwkUjL3Yk=
Subject key identifier: EB:3E:E7:EE:A7:E7:E6:77:6B:59:D0:B7:5E:99:3D:D1:66:E8:71:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A0E527961D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/c410b5-e056-4e1a-b123-f95f871d23dd/1/6z7n7qfn5ndrWdC3Xpk90WbocXc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/c410b5-e056-4e1a-b123-f95f871d23dd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:02:32 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.154.20.0/22
IP: 2a07:8a40::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691039344157 (0xa0e527961d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:02:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb3ee7eea7e7e6776b59d0b75e993dd166e87177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:35:49:4c:4b:40:b6:3f:f2:a8:2a:41:25:
49:33:7f:b6:23:c8:a6:c0:94:94:ce:34:a1:c1:d8:
1e:84:20:b3:ca:44:9e:5b:70:98:ab:b5:14:26:df:
37:e0:1e:98:14:e7:c1:94:65:51:7a:e0:a5:3e:c8:
c9:1c:f7:a6:fd:3d:5e:b9:ef:ad:26:58:5e:5a:7d:
e6:be:5b:58:53:c5:7e:a1:34:0e:d0:13:9c:fd:d4:
93:c9:9a:03:16:3a:3b:d3:0d:93:52:f7:ca:95:cf:
94:f0:4b:0a:c0:e5:b4:84:87:46:13:fa:97:9d:3c:
8c:a8:8c:bd:ea:93:ef:e1:39:dc:1d:82:b7:0c:75:
a1:f0:22:dd:f6:76:ed:df:23:2f:f1:6f:4f:b6:08:
83:a6:72:56:a8:6f:ee:60:28:45:aa:64:b2:99:96:
40:85:81:9c:1a:f6:25:51:c3:65:2e:b3:9a:f7:79:
fc:c6:17:e4:58:32:8b:98:98:53:4d:b1:df:50:32:
b2:bc:f1:b8:f9:15:15:46:d5:38:fd:79:03:e8:e5:
4a:82:49:bf:4d:d4:10:70:ce:91:38:d0:82:af:6b:
fe:13:92:2b:be:de:17:68:4c:fb:91:a9:e1:8a:be:
a9:51:db:0c:2d:f8:60:4a:4f:fb:2d:37:b1:9b:ee:
fd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3E:E7:EE:A7:E7:E6:77:6B:59:D0:B7:5E:99:3D:D1:66:E8:71:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c410b5-e056-4e1a-b123-f95f871d23dd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c410b5-e056-4e1a-b123-f95f871d23dd/1/6z7n7qfn5ndrWdC3Xpk90WbocXc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.20.0/22
IPv6:
2a07:8a40::/29
Signature Algorithm: sha256WithRSAEncryption
40:e9:b5:53:4f:dc:8b:fa:20:36:e4:ff:15:8c:06:c2:92:4f:
c3:ca:92:74:12:4d:5e:25:ef:6b:b9:0f:f5:8e:18:95:bc:fb:
f8:9b:2d:01:c4:ea:6b:be:83:7b:90:79:e2:90:cb:48:e9:c8:
e2:fd:7b:13:fd:24:fe:a7:d9:45:22:f3:98:37:06:ce:c5:fa:
02:3f:9b:a7:7b:17:6a:05:af:01:32:c6:d0:b8:5e:53:98:af:
be:e0:f2:a8:bc:fc:4b:50:21:8e:33:a5:02:c2:fd:ac:eb:78:
9c:54:cf:b3:e8:45:f6:ce:8e:d9:e1:1c:65:91:89:2f:16:82:
77:f8:d2:13:30:79:52:48:e2:44:e3:a2:27:22:41:bb:0f:4b:
5a:de:10:b8:f3:6a:44:bf:b1:90:98:3a:41:aa:e2:e9:fd:05:
92:a6:db:12:5b:58:df:f4:d5:0b:29:21:1d:26:1d:74:37:d2:
a5:92:f2:3f:9f:5b:ce:e8:97:71:3b:71:53:8b:fe:48:15:ba:
64:49:c0:3a:ad:02:80:db:fb:73:36:b9:87:b0:fb:ac:28:3f:
46:bc:c6:19:46:2e:ce:fa:c7:d5:cb:6b:bb:07:3c:42:f6:f4:
62:61:61:5f:71:8d:6e:25:02:d3:eb:fa:4e:1a:e1:63:f7:cf:
ff:ac:69:ce
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIGAKDlJ5YdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDcwMjMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlYjNlZTdlZWE3
ZTdlNjc3NmI1OWQwYjc1ZTk5M2RkMTY2ZTg3MTc3MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAsj81SUxLQLY/8qgqQSVJM3+2I8imwJSUzjShwdgehCCz
ykSeW3CYq7UUJt834B6YFOfBlGVReuClPsjJHPem/T1eue+tJlheWn3mvltYU8V+
oTQO0BOc/dSTyZoDFjo70w2TUvfKlc+U8EsKwOW0hIdGE/qXnTyMqIy96pPv4Tnc
HYK3DHWh8CLd9nbt3yMv8W9PtgiDpnJWqG/uYChFqmSymZZAhYGcGvYlUcNlLrOa
93n8xhfkWDKLmJhTTbHfUDKyvPG4+RUVRtU4/XkD6OVKgkm/TdQQcM6RONCCr2v+
E5Irvt4XaEz7kanhir6pUdsMLfhgSk/7LTexm+795QIDAQABo4ICkzCCAo8wHQYD
VR0OBBYEFOs+5+6n5+Z3a1nQt16ZPdFm6HF3MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwL2M0MTBiNS1lMDU2LTRlMWEt
YjEyMy1mOTVmODcxZDIzZGQvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvYzQxMGI1LWUwNTYtNGUxYS1i
MTIzLWY5NWY4NzFkMjNkZC8xLzZ6N243cWZuNW5kcldkQzNYcGs5MFdib2NYYy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCuZoUMA0EAgACMAcDBQMqB4pAMA0GCSqGSIb3DQEBCwUAA4IBAQBA
6bVTT9yL+iA25P8VjAbCkk/DypJ0Ek1eJe9ruQ/1jhiVvPv4my0BxOprvoN7kHni
kMtI6cji/XsT/ST+p9lFIvOYNwbOxfoCP5unexdqBa8BMsbQuF5TmK++4PKovPxL
UCGOM6UCwv2s63icVM+z6EX2zo7Z4RxlkYkvFoJ3+NITMHlSSOJE46InIkG7D0ta
3hC482pEv7GQmDpBquLp/QWSptsSW1jf9NULKSEdJh10N9KlkvI/n1vO6JdxO3FT
i/5IFbpkScA6rQKA2/tzNrmHsPusKD9GvMYZRi7O+sfVy2u7BzxC9vRiYWFfcY1u
JQLT6/pOGuFj98//rGnO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:28 2024 by rpki-client on console-fra.rpki-client.org