Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7VXn3HYQ49A1c3b5JbCK045It80.cer
File: 7VXn3HYQ49A1c3b5JbCK045It80.cer (raw, json)
Hash identifier: EATzhcmXjs7XupWZOFaaFq7K9yAXkwKb33F06af9R/4=
Subject key identifier: ED:55:E7:DC:76:10:E3:D0:35:73:76:F9:25:B0:8A:D3:8E:48:B7:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7CC1541AA0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/0df77b-8398-40e2-a353-8353bf1cbbde/1/7VXn3HYQ49A1c3b5JbCK045It80.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/0df77b-8398-40e2-a353-8353bf1cbbde/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 03:09:43 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 194.42.50.0 -- 194.42.54.255
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535819459232 (0x7cc1541aa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:09:43 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=ed55e7dc7610e3d0357376f925b08ad38e48b7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:45:f0:36:4b:d6:5a:fa:8b:d5:56:e6:05:57:
73:ce:45:b2:bb:87:a2:ef:87:0c:e7:8d:bd:a2:68:
62:89:63:9e:6f:c5:d2:3d:e7:58:cd:d3:e3:be:e0:
b2:24:6a:0e:c7:4f:3a:71:7d:45:7f:d5:4b:85:43:
fc:af:03:d2:2a:ef:75:b5:4a:29:7e:e3:9a:e4:d1:
18:78:1c:3f:b2:fb:d3:3e:fd:75:a1:1e:fa:ca:c4:
24:ba:78:23:a5:3e:32:5a:bf:8b:b1:4a:49:df:f9:
7d:2f:0a:28:2a:9e:e5:1b:29:ad:c3:74:ae:7f:7e:
51:2c:8e:4a:94:41:1b:42:c0:4a:eb:e8:41:9a:15:
16:d2:2e:83:6a:b1:81:a7:e0:60:0b:9d:49:46:5e:
88:26:d7:0e:e4:3a:42:31:dd:7c:64:61:0f:11:32:
1e:c5:17:b4:a3:c0:ba:35:9c:d5:3a:9c:79:ae:06:
ac:e4:e9:47:5c:26:ed:92:54:d4:cd:da:f2:45:e3:
83:97:d8:87:4e:ad:ff:61:28:38:97:75:ad:2b:5c:
6c:2b:d0:43:4a:67:b1:3d:b9:0c:36:24:49:32:04:
e7:69:fe:b8:b0:22:46:6b:e3:81:2f:71:4b:34:76:
aa:ba:86:8b:03:ac:41:f6:0f:95:d5:2e:c0:c2:83:
21:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:55:E7:DC:76:10:E3:D0:35:73:76:F9:25:B0:8A:D3:8E:48:B7:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0df77b-8398-40e2-a353-8353bf1cbbde/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0df77b-8398-40e2-a353-8353bf1cbbde/1/7VXn3HYQ49A1c3b5JbCK045It80.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.42.50.0-194.42.54.255
Signature Algorithm: sha256WithRSAEncryption
65:fb:59:6b:82:68:dc:65:fb:83:9f:dc:ce:65:cc:a3:95:42:
d0:42:70:47:0c:11:c0:08:df:55:31:44:72:a6:35:fd:3e:47:
25:95:c3:7e:d8:44:15:e2:33:2b:d6:6b:70:86:69:f6:ac:29:
59:79:6d:d5:5a:94:49:cf:bd:b6:e3:75:83:c8:4b:a2:28:ad:
67:85:fb:2f:ab:ba:01:d3:26:3e:d4:25:ab:04:3c:8b:f0:15:
54:26:a5:b0:76:23:21:60:69:93:b2:ac:e7:45:1d:e5:55:ae:
34:26:6a:0a:38:5d:d4:c9:25:24:4b:37:43:8f:f9:65:66:79:
fc:55:83:e8:e6:85:c9:fd:d3:67:fa:0d:8b:4f:a6:94:aa:f0:
07:f6:98:04:ad:2d:47:7a:3e:cd:95:e6:0a:bf:72:43:54:d5:
35:45:93:e2:01:da:aa:f7:35:3a:0b:ed:0e:6b:76:7d:50:64:
2a:ca:c2:51:c6:6f:6d:61:54:06:24:f8:02:b7:82:66:c6:22:
8d:a3:46:55:f2:46:a8:cf:c5:e5:ba:5c:f0:3b:10:86:cc:47:
0e:a1:87:48:58:07:4a:b8:ab:98:c7:39:5e:26:42:07:a2:aa:
a9:37:13:2b:89:51:b6:a8:0b:5f:ef:50:c7:ec:f8:57:54:cc:
e0:24:11:e9
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIFfMFUGqAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMzA5NDNaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGVkNTVlN2RjNzYx
MGUzZDAzNTczNzZmOTI1YjA4YWQzOGU0OGI3Y2QwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDRRfA2S9Za+ovVVuYFV3PORbK7h6Lvhwznjb2iaGKJY55v
xdI951jN0+O+4LIkag7HTzpxfUV/1UuFQ/yvA9Iq73W1Sil+45rk0Rh4HD+y+9M+
/XWhHvrKxCS6eCOlPjJav4uxSknf+X0vCigqnuUbKa3DdK5/flEsjkqUQRtCwErr
6EGaFRbSLoNqsYGn4GALnUlGXogm1w7kOkIx3XxkYQ8RMh7FF7SjwLo1nNU6nHmu
Bqzk6UdcJu2SVNTN2vJF44OX2IdOrf9hKDiXda0rXGwr0ENKZ7E9uQw2JEkyBOdp
/riwIkZr44EvcUs0dqq6hosDrEH2D5XVLsDCgyFhAgMBAAGjggKMMIICiDAdBgNV
HQ4EFgQU7VXn3HYQ49A1c3b5JbCK045It80wHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvMGRmNzdiLTgzOTgtNDBlMi1h
MzUzLTgzNTNiZjFjYmJkZS8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wZGY3N2ItODM5OC00MGUyLWEz
NTMtODM1M2JmMWNiYmRlLzEvN1ZYbjNIWVE0OUExYzNiNUpiQ0swNDVJdDgwLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJwYIKwYBBQUHAQcBAf8EGDAWMBQE
AgABMA4wDAMEAcIqMgMEAMIqNjANBgkqhkiG9w0BAQsFAAOCAQEAZftZa4Jo3GX7
g5/czmXMo5VC0EJwRwwRwAjfVTFEcqY1/T5HJZXDfthEFeIzK9ZrcIZp9qwpWXlt
1VqUSc+9tuN1g8hLoiitZ4X7L6u6AdMmPtQlqwQ8i/AVVCalsHYjIWBpk7Ks50Ud
5VWuNCZqCjhd1MklJEs3Q4/5ZWZ5/FWD6OaFyf3TZ/oNi0+mlKrwB/aYBK0tR3o+
zZXmCr9yQ1TVNUWT4gHaqvc1OgvtDmt2fVBkKsrCUcZvbWFUBiT4AreCZsYijaNG
VfJGqM/F5bpc8DsQhsxHDqGHSFgHSrirmMc5XiZCB6KqqTcTK4lRtqgLX+9Qx+z4
V1TM4CQR6Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:16 2023 by rpki-client on console-fra.rpki-client.org