Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8exK4lplY93_8vsPHAecFhDSUQM.cer
File: 8exK4lplY93_8vsPHAecFhDSUQM.cer (raw, json)
Hash identifier: 1zDRItgihyBPATcySo0UTNqf6Dogz2/IvUw8TRrUZ7g=
Subject key identifier: F1:EC:4A:E2:5A:65:63:DD:FF:F2:FB:0F:1C:07:9C:16:10:D2:51:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7F406F2F05
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/241e92-7115-4351-95ef-ebad299e5f9e/1/8exK4lplY93_8vsPHAecFhDSUQM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/241e92-7115-4351-95ef-ebad299e5f9e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 04:12:59 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 85.208.152.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 546541874949 (0x7f406f2f05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:12:59 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=f1ec4ae25a6563ddfff2fb0f1c079c1610d25103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3e:25:e0:e3:43:c2:2b:05:77:6e:44:4c:1c:
b1:cf:9c:fd:be:e1:a0:68:0c:16:8c:1d:a0:ae:c9:
1a:31:9b:48:ef:ac:16:57:7c:23:7b:f3:65:f7:24:
5b:f2:5c:5b:f5:86:06:f0:10:4a:f8:2e:80:b3:96:
9f:7a:88:b1:a3:10:e8:7e:da:b9:94:22:3b:26:91:
e2:9a:76:bb:5a:71:11:d9:35:06:b7:45:72:de:59:
4c:49:31:52:d6:44:77:6b:e7:61:d2:54:43:51:c1:
19:57:24:08:6d:b4:6c:9f:6c:a3:ba:1b:70:75:15:
ae:fc:2a:e4:6b:b5:09:aa:cb:7f:1f:b7:69:e4:2a:
fc:48:48:6f:10:3c:32:90:dc:7e:0f:1c:bc:f2:ff:
35:1c:94:d4:6b:f4:96:f5:95:f7:d9:82:d9:dd:36:
dc:33:cd:e4:64:41:06:57:57:ed:35:30:8d:26:0f:
99:64:c2:85:57:51:cd:71:b8:d3:5d:fc:6f:a8:d9:
02:25:7f:58:b6:f6:30:5d:b9:82:e5:4f:f1:b5:f6:
66:02:59:ea:b3:4a:ec:e0:d8:9c:ee:4c:15:6e:55:
23:d5:5f:ce:dd:6c:0f:68:22:4d:fc:34:84:d0:0f:
9e:12:4a:24:22:62:d9:0a:f2:9c:48:ce:81:49:e8:
8b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EC:4A:E2:5A:65:63:DD:FF:F2:FB:0F:1C:07:9C:16:10:D2:51:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/241e92-7115-4351-95ef-ebad299e5f9e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/241e92-7115-4351-95ef-ebad299e5f9e/1/8exK4lplY93_8vsPHAecFhDSUQM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.152.0/22
Signature Algorithm: sha256WithRSAEncryption
49:dc:32:8b:1a:4c:5b:8c:f7:3c:04:2d:77:4a:38:bb:cf:10:
d4:97:ad:e0:ba:26:b6:12:7d:9a:28:74:03:9f:bc:c4:6b:3e:
50:e9:d4:d1:f3:11:7c:6f:26:14:ef:50:66:f7:74:06:d6:d7:
ca:38:1a:8a:a4:f1:e1:e0:ae:89:98:86:c5:d8:f8:27:c5:40:
54:04:d9:65:b0:9c:b6:b8:d9:46:dc:c5:fc:85:e2:e0:c6:01:
2c:b3:bc:8c:18:fe:e7:80:f8:e9:d3:5e:d2:5e:ab:0c:97:44:
67:16:ac:ac:c5:45:f9:a7:c8:8f:68:55:eb:d8:fb:a8:da:f2:
17:a2:c6:cd:bc:df:4e:d4:c1:c7:76:1a:3f:66:66:da:df:c1:
8e:89:fc:a4:18:e7:65:f8:62:8e:a9:1a:6c:6b:9e:e9:73:da:
bd:53:d0:64:af:5c:32:25:82:13:fa:d3:c9:db:c4:38:a5:83:
52:1d:52:04:cc:87:59:7a:0c:d0:14:a4:e3:f6:79:9f:e4:5b:
87:d6:1a:ca:58:d6:40:89:7d:86:33:52:37:70:e5:b7:91:cf:
d8:e8:9e:af:e9:64:c2:44:ef:bc:fb:39:df:0f:cc:5a:a0:f7:
36:fe:81:55:19:2e:b2:8a:77:b0:7a:84:c7:9d:33:02:c7:d1:
49:be:ec:88
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIFf0BvLwUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwNDEyNTlaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGYxZWM0YWUyNWE2
NTYzZGRmZmYyZmIwZjFjMDc5YzE2MTBkMjUxMDMwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQClPiXg40PCKwV3bkRMHLHPnP2+4aBoDBaMHaCuyRoxm0jv
rBZXfCN782X3JFvyXFv1hgbwEEr4LoCzlp96iLGjEOh+2rmUIjsmkeKadrtacRHZ
NQa3RXLeWUxJMVLWRHdr52HSVENRwRlXJAhttGyfbKO6G3B1Fa78KuRrtQmqy38f
t2nkKvxISG8QPDKQ3H4PHLzy/zUclNRr9Jb1lffZgtndNtwzzeRkQQZXV+01MI0m
D5lkwoVXUc1xuNNd/G+o2QIlf1i29jBduYLlT/G19mYCWeqzSuzg2JzuTBVuVSPV
X87dbA9oIk38NITQD54SSiQiYtkK8pxIzoFJ6It7AgMBAAGjggKEMIICgDAdBgNV
HQ4EFgQU8exK4lplY93/8vsPHAecFhDSUQMwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvMjQxZTkyLTcxMTUtNDM1MS05
NWVmLWViYWQyOTllNWY5ZS8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8yNDFlOTItNzExNS00MzUxLTk1
ZWYtZWJhZDI5OWU1ZjllLzEvOGV4SzRscGxZOTNfOHZzUEhBZWNGaERTVVFNLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJV0JgwDQYJKoZIhvcNAQELBQADggEBAEncMosaTFuM9zwELXdKOLvP
ENSXreC6JrYSfZoodAOfvMRrPlDp1NHzEXxvJhTvUGb3dAbW18o4Goqk8eHgromY
hsXY+CfFQFQE2WWwnLa42UbcxfyF4uDGASyzvIwY/ueA+OnTXtJeqwyXRGcWrKzF
RfmnyI9oVevY+6ja8heixs28307Uwcd2Gj9mZtrfwY6J/KQY52X4Yo6pGmxrnulz
2r1T0GSvXDIlghP608nbxDilg1IdUgTMh1l6DNAUpOP2eZ/kW4fWGspY1kCJfYYz
Ujdw5beRz9jonq/pZMJE77z7Od8PzFqg9zb+gVUZLrKKd7B6hMedMwLH0Um+7Ig=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:20 2023 by rpki-client on console-fra.rpki-client.org