Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8UV_jAIM3Zse_3V0BQawHA2o7Mw.cer
File: 8UV_jAIM3Zse_3V0BQawHA2o7Mw.cer (raw, json)
Hash identifier: ng3t7gNqQ+q8rxeNrCEq165zPPTW8m+Q2+AwE+akAG0=
Subject key identifier: F1:45:7F:8C:02:0C:DD:9B:1E:FF:75:74:05:06:B0:1C:0D:A8:EC:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 76494F79DF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/da128b-2d9d-4e42-bbe2-1ac128663fe5/1/8UV_jAIM3Zse_3V0BQawHA2o7Mw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/da128b-2d9d-4e42-bbe2-1ac128663fe5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 00:24:16 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.133.196.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 508036086239 (0x76494f79df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:24:16 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=f1457f8c020cdd9b1eff75740506b01c0da8eccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:60:50:84:2e:d5:c8:6b:78:3e:0f:b2:4c:
e4:f2:c6:47:c4:92:2e:0c:4e:3f:a2:2c:00:da:b7:
6b:42:b5:10:01:cc:07:00:f5:42:24:14:ef:07:a6:
a8:cd:57:20:7b:55:8e:c7:1f:c0:57:86:83:f3:74:
b8:66:0a:b2:81:98:b7:3f:e2:24:1d:c9:95:f7:d8:
df:71:31:a7:a8:f4:fd:78:e1:a0:90:ae:15:06:c6:
62:28:a7:93:be:b2:48:16:0f:cb:53:33:ed:fc:51:
89:32:f7:d0:ce:7f:07:59:f2:ff:a4:a2:31:a0:54:
76:d7:67:92:82:f9:fe:9c:af:18:4d:2d:a4:b6:3a:
f8:13:f8:8e:c8:80:50:b1:b6:7f:de:bd:9a:8a:ee:
b2:f8:44:a8:4a:8c:2f:12:a3:1e:6f:fd:79:59:af:
77:15:05:85:ee:c0:0b:7d:0c:7c:53:27:12:74:85:
26:b8:23:e6:82:5f:25:c9:c2:07:2a:eb:63:29:ee:
a1:ea:13:2b:32:85:98:13:24:0f:24:51:63:08:67:
5c:7d:d1:fb:72:c0:af:bf:31:14:42:4b:87:f2:a1:
fe:af:79:9e:eb:c4:36:d6:3f:6d:88:28:c8:dd:47:
c0:ec:31:e1:72:44:8e:3e:ea:c7:e9:dc:40:70:bb:
cf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:45:7F:8C:02:0C:DD:9B:1E:FF:75:74:05:06:B0:1C:0D:A8:EC:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/da128b-2d9d-4e42-bbe2-1ac128663fe5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/da128b-2d9d-4e42-bbe2-1ac128663fe5/1/8UV_jAIM3Zse_3V0BQawHA2o7Mw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.196.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:da:60:a2:88:79:ee:35:b7:eb:c5:65:fb:4e:f6:9a:a0:e8:
77:92:7c:09:08:26:f3:06:ee:1a:17:6d:55:47:70:52:89:88:
c1:11:d4:0b:59:bc:d2:9c:d1:db:09:76:4d:40:93:3c:4a:18:
fa:69:64:05:ac:31:43:a5:ab:11:a6:65:c1:09:e7:94:d6:c5:
c1:34:3a:28:83:70:d6:a2:2c:75:b6:96:15:58:0b:66:33:35:
e0:cc:74:1b:15:3b:75:a2:7d:39:45:28:e4:40:5e:7e:6a:e4:
15:11:04:f5:e9:82:fa:df:7d:c0:ad:a1:17:bc:71:80:13:ac:
76:86:04:8d:31:1b:83:d3:fb:89:c3:9a:16:a1:c2:5f:8b:4e:
20:a6:e0:14:92:24:70:d5:1e:62:53:f0:65:ea:05:ed:d9:4a:
0f:4a:54:fc:e6:8c:f1:2f:01:65:f6:9b:ea:ff:29:c2:c6:e3:
54:96:90:33:38:f3:fa:dd:d2:0a:41:ca:81:9e:e0:e9:f1:33:
90:45:f8:40:16:ae:e7:d2:34:e3:ec:91:f3:3c:ad:90:04:fd:
1f:f5:60:cd:90:b6:ca:ee:eb:e2:36:ab:18:2a:e0:2b:f0:d3:
b3:9e:da:ff:f6:f8:7f:8b:9f:70:71:d1:1e:5c:b6:3f:66:9a:
44:47:14:31
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIFdklPed8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMDI0MTZaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGYxNDU3ZjhjMDIw
Y2RkOWIxZWZmNzU3NDA1MDZiMDFjMGRhOGVjY2MwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCzGBQhC7VyGt4Pg+yTOTyxkfEki4MTj+iLADat2tCtRAB
zAcA9UIkFO8HpqjNVyB7VY7HH8BXhoPzdLhmCrKBmLc/4iQdyZX32N9xMaeo9P14
4aCQrhUGxmIop5O+skgWD8tTM+38UYky99DOfwdZ8v+kojGgVHbXZ5KC+f6crxhN
LaS2OvgT+I7IgFCxtn/evZqK7rL4RKhKjC8Sox5v/XlZr3cVBYXuwAt9DHxTJxJ0
hSa4I+aCXyXJwgcq62Mp7qHqEysyhZgTJA8kUWMIZ1x90ftywK+/MRRCS4fyof6v
eZ7rxDbWP22IKMjdR8DsMeFyRI4+6sfp3EBwu88PAgMBAAGjggKEMIICgDAdBgNV
HQ4EFgQU8UV/jAIM3Zse/3V0BQawHA2o7MwwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvZGExMjhiLTJkOWQtNGU0Mi1i
YmUyLTFhYzEyODY2M2ZlNS8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9kYTEyOGItMmQ5ZC00ZTQyLWJi
ZTItMWFjMTI4NjYzZmU1LzEvOFVWX2pBSU0zWnNlXzNWMEJRYXdIQTJvN013Lm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAIthcQwDQYJKoZIhvcNAQELBQADggEBAH7aYKKIee41t+vFZftO9pqg
6HeSfAkIJvMG7hoXbVVHcFKJiMER1AtZvNKc0dsJdk1AkzxKGPppZAWsMUOlqxGm
ZcEJ55TWxcE0OiiDcNaiLHW2lhVYC2YzNeDMdBsVO3WifTlFKORAXn5q5BURBPXp
gvrffcCtoRe8cYATrHaGBI0xG4PT+4nDmhahwl+LTiCm4BSSJHDVHmJT8GXqBe3Z
Sg9KVPzmjPEvAWX2m+r/KcLG41SWkDM48/rd0gpByoGe4OnxM5BF+EAWrufSNOPs
kfM8rZAE/R/1YM2Qtsru6+I2qxgq4Cvw07Oe2v/2+H+Ln3Bx0R5ctj9mmkRHFDE=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:45 2023 by rpki-client on console-ams.rpki-client.org