Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8pv8PxlMuaOAEvLPwFiu-hjIH90.cer
File: 8pv8PxlMuaOAEvLPwFiu-hjIH90.cer (raw, json)
Hash identifier: m6pWLnFOjIEJqr+vQUt9bUTvGPg41ww/HiGQsZ/+Q3g=
Subject key identifier: F2:9B:FC:3F:19:4C:B9:A3:80:12:F2:CF:C0:58:AE:FA:18:C8:1F:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 82A0C76489
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/de8131-8a00-486f-9a2e-cc08ba157209/1/8pv8PxlMuaOAEvLPwFiu-hjIH90.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/de8131-8a00-486f-9a2e-cc08ba157209/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 06:40:38 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 185.161.188.0/22
IP: 2a07:c6c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 561043170441 (0x82a0c76489)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:40:38 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=f29bfc3f194cb9a38012f2cfc058aefa18c81fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b1:95:f9:a6:9d:be:b7:82:f9:b4:6e:15:78:
3f:bb:4b:e5:d7:08:10:cf:16:0d:83:33:c7:86:e2:
38:6c:4e:df:be:0f:e7:85:c9:e1:c5:d2:3b:5b:e8:
d2:16:3f:9b:0f:ae:c2:6b:6c:40:44:b2:d1:c0:33:
93:af:cc:7c:03:fc:65:f8:6f:86:15:96:95:8b:7e:
6a:a0:e1:4f:8b:0e:bf:8f:c8:b3:50:cf:f2:de:17:
86:5b:91:55:34:0b:5d:75:de:2c:69:22:cc:61:bb:
2c:6b:66:3e:13:3e:cd:75:56:31:70:f0:f7:73:64:
d7:d2:55:1a:a2:e5:ef:f5:e4:42:cb:80:39:81:80:
2a:af:8b:34:20:92:9e:53:cb:68:b7:c7:17:bb:3d:
9e:d0:62:ab:e5:20:0d:43:24:d8:a0:cf:b8:66:ca:
68:13:f1:27:6e:7d:07:54:49:e9:8e:5d:85:84:af:
21:10:80:82:9f:29:57:ba:90:7d:bd:c9:6e:8a:40:
84:0a:59:07:46:69:d1:68:74:b4:84:ab:b0:9e:03:
6b:f3:3f:35:d9:ad:12:c3:a3:ba:25:a8:30:ca:26:
b3:89:04:87:c0:37:1a:1a:73:1d:19:fe:b8:53:7f:
a8:6f:6f:12:e3:70:f8:e2:ea:24:61:7a:ce:d7:19:
7a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9B:FC:3F:19:4C:B9:A3:80:12:F2:CF:C0:58:AE:FA:18:C8:1F:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/de8131-8a00-486f-9a2e-cc08ba157209/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/de8131-8a00-486f-9a2e-cc08ba157209/1/8pv8PxlMuaOAEvLPwFiu-hjIH90.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.188.0/22
IPv6:
2a07:c6c0::/29
Signature Algorithm: sha256WithRSAEncryption
80:99:52:5c:7e:e3:c9:0c:4f:e2:4d:c8:17:f2:22:2d:82:07:
5a:e6:63:35:80:a4:18:d9:d9:bc:56:6e:0e:fc:c7:45:70:9f:
75:7f:4b:36:3a:6b:33:07:24:11:1a:d3:82:ae:33:80:ae:09:
f8:21:62:dd:c4:ed:be:07:9d:08:91:7e:68:e8:ec:fa:ed:a3:
e8:c3:52:b2:c5:eb:d7:6e:fd:45:08:19:4a:27:d3:0b:84:d9:
75:d3:52:5e:15:e0:4e:92:63:5f:d9:ee:1f:70:76:77:5c:52:
fd:2c:76:15:79:9f:df:99:52:bd:9c:49:94:d1:b7:2e:62:e2:
3b:0d:bc:c8:85:76:85:2a:57:e2:29:33:d1:a9:09:bf:24:39:
c3:d8:b2:7e:b0:68:49:10:72:2a:a8:f7:c6:d9:fc:2f:26:cd:
7e:4a:62:9e:8d:c9:19:cb:62:a8:0b:a5:1c:3c:07:4c:0c:ef:
5f:ba:a2:c6:db:e2:38:e0:8b:49:60:48:be:22:56:dd:b3:fe:
83:9d:e9:f1:bc:09:56:e6:93:36:2f:59:7a:0d:4e:b5:ed:50:
93:cb:94:78:2e:56:88:30:55:15:87:9d:55:08:c2:39:79:bb:
be:88:64:bd:65:59:ab:7b:42:d6:97:e3:f5:fe:0e:3a:c2:a2:
10:91:42:e6
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIGAIKgx2SJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjEw
MTAxMDY0MDM4WhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmMjliZmMzZjE5
NGNiOWEzODAxMmYyY2ZjMDU4YWVmYTE4YzgxZmRkMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA17GV+aadvreC+bRuFXg/u0vl1wgQzxYNgzPHhuI4bE7f
vg/nhcnhxdI7W+jSFj+bD67Ca2xARLLRwDOTr8x8A/xl+G+GFZaVi35qoOFPiw6/
j8izUM/y3heGW5FVNAtddd4saSLMYbssa2Y+Ez7NdVYxcPD3c2TX0lUaouXv9eRC
y4A5gYAqr4s0IJKeU8tot8cXuz2e0GKr5SANQyTYoM+4ZspoE/Enbn0HVEnpjl2F
hK8hEICCnylXupB9vcluikCEClkHRmnRaHS0hKuwngNr8z812a0Sw6O6Jagwyiaz
iQSHwDcaGnMdGf64U3+ob28S43D44uokYXrO1xl6rQIDAQABo4ICkzCCAo8wHQYD
VR0OBBYEFPKb/D8ZTLmjgBLyz8BYrvoYyB/dMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkL2RlODEzMS04YTAwLTQ4NmYt
OWEyZS1jYzA4YmExNTcyMDkvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvZGU4MTMxLThhMDAtNDg2Zi05
YTJlLWNjMDhiYTE1NzIwOS8xLzhwdjhQeGxNdWFPQUV2TFB3Rml1LWhqSUg5MC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCuaG8MA0EAgACMAcDBQMqB8bAMA0GCSqGSIb3DQEBCwUAA4IBAQCA
mVJcfuPJDE/iTcgX8iItggda5mM1gKQY2dm8Vm4O/MdFcJ91f0s2OmszByQRGtOC
rjOArgn4IWLdxO2+B50IkX5o6Oz67aPow1KyxevXbv1FCBlKJ9MLhNl101JeFeBO
kmNf2e4fcHZ3XFL9LHYVeZ/fmVK9nEmU0bcuYuI7DbzIhXaFKlfiKTPRqQm/JDnD
2LJ+sGhJEHIqqPfG2fwvJs1+SmKejckZy2KoC6UcPAdMDO9fuqLG2+I44ItJYEi+
Ilbds/6DnenxvAlW5pM2L1l6DU617VCTy5R4LlaIMFUVh51VCMI5ebu+iGS9ZVmr
e0LWl+P1/g46wqIQkULm
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:11 2023 by rpki-client on console-ams.rpki-client.org