Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9evj5GOu41s18Og2wBwvt9tEEk8.cer
File: 9evj5GOu41s18Og2wBwvt9tEEk8.cer (raw, json)
Hash identifier: 1HM16xy1Llsf1oNDQEEf7UMJpadlpDVLT7jIsq/1Qmk=
Subject key identifier: F5:EB:E3:E4:63:AE:E3:5B:35:F0:E8:36:C0:1C:2F:B7:DB:44:12:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 7EBD3AFA64
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/18acf0-3dd0-439d-b57e-4d55f6d3fdb6/1/9evj5GOu41s18Og2wBwvt9tEEk8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/18acf0-3dd0-439d-b57e-4d55f6d3fdb6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 03:59:18 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.65.76.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544340638308 (0x7ebd3afa64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:59:18 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=f5ebe3e463aee35b35f0e836c01c2fb7db44124f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0b:bd:5a:2b:d9:ad:02:1c:6b:58:76:7d:98:
ec:93:b3:93:e3:cd:82:55:2d:e4:29:a5:b4:6b:87:
d4:39:2b:b5:ae:c9:d8:15:fb:d7:b6:35:f6:db:7b:
0d:8f:2b:50:73:bd:7e:32:cb:c2:24:aa:f8:3c:1f:
d6:6c:60:a7:b7:6a:00:f5:00:19:ba:a7:99:0b:5f:
89:60:2e:0d:9e:60:d4:e7:92:28:b8:5b:5e:82:21:
9e:a3:81:02:f8:16:3c:9f:bb:21:cd:7b:df:d3:7a:
bd:3e:b9:4c:2e:33:ed:98:bb:74:db:33:7b:34:fd:
2f:9d:ff:3b:cb:6f:76:84:22:95:be:59:da:a7:21:
08:e7:34:39:16:20:98:a8:46:12:0e:25:21:e1:d7:
e3:59:6b:51:6c:c8:9a:ca:e4:97:c7:a8:5b:a6:51:
ea:a5:6d:37:b3:eb:e3:01:f1:99:8a:02:99:30:8c:
2f:35:0a:ee:73:85:5f:7f:8c:a6:89:d5:36:32:4f:
86:d0:a6:da:af:23:63:a0:7c:77:0b:d9:7e:bc:bc:
39:a7:1e:b9:ee:b1:31:cc:1c:89:19:32:37:80:be:
98:c0:93:51:c6:c3:2f:5a:43:d3:5f:32:96:a7:de:
e3:9e:0c:2e:33:db:7d:d9:68:05:57:6c:3a:38:0b:
92:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EB:E3:E4:63:AE:E3:5B:35:F0:E8:36:C0:1C:2F:B7:DB:44:12:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/18acf0-3dd0-439d-b57e-4d55f6d3fdb6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/18acf0-3dd0-439d-b57e-4d55f6d3fdb6/1/9evj5GOu41s18Og2wBwvt9tEEk8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.76.0/22
Signature Algorithm: sha256WithRSAEncryption
03:31:c6:c6:be:f9:aa:e1:5a:d2:1b:d0:c8:09:d9:56:b0:5e:
59:c7:b9:2f:a3:f9:90:6f:c1:d5:b9:b4:65:43:9f:7d:f2:68:
0e:65:e4:36:1a:7e:e4:1c:2c:a8:ae:84:ac:4c:72:32:44:47:
29:fe:1d:b9:95:04:00:21:56:6b:bd:5d:9b:fc:3c:98:3d:5e:
a6:13:7e:c8:12:e8:7e:ef:c2:78:de:00:e6:e1:9b:76:08:23:
81:8d:0d:52:d7:93:18:21:d4:bb:dd:89:f4:ce:8a:3f:c4:58:
78:68:69:e8:34:fd:3a:12:c5:42:78:ec:52:18:8a:ea:2d:7c:
0b:af:26:72:33:63:e0:7d:7a:92:02:7a:23:64:92:88:34:9c:
01:1c:ab:f9:f9:6b:67:34:4d:c1:62:8f:bf:52:ca:c8:bb:e6:
cd:25:b8:b9:fe:8f:80:cd:3d:5c:51:56:9e:d8:35:81:1a:65:
f4:ef:18:51:73:8d:b8:26:07:c4:34:5e:b3:e9:1a:b5:a8:53:
50:46:59:66:c0:74:a4:4e:27:57:85:3d:44:d2:04:61:35:8f:
85:9c:b1:f4:89:a2:86:eb:e1:e6:d0:4a:d2:21:85:4f:a4:67:
64:38:ec:ba:56:66:36:bd:37:ab:47:3d:bc:f0:de:54:df:d4:
55:a1:a5:7e
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIFfr06+mQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMzU5MThaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGY1ZWJlM2U0NjNh
ZWUzNWIzNWYwZTgzNmMwMWMyZmI3ZGI0NDEyNGYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDdC71aK9mtAhxrWHZ9mOyTs5PjzYJVLeQppbRrh9Q5K7Wu
ydgV+9e2Nfbbew2PK1BzvX4yy8Ikqvg8H9ZsYKe3agD1ABm6p5kLX4lgLg2eYNTn
kii4W16CIZ6jgQL4FjyfuyHNe9/Ter0+uUwuM+2Yu3TbM3s0/S+d/zvLb3aEIpW+
WdqnIQjnNDkWIJioRhIOJSHh1+NZa1FsyJrK5JfHqFumUeqlbTez6+MB8ZmKApkw
jC81Cu5zhV9/jKaJ1TYyT4bQptqvI2OgfHcL2X68vDmnHrnusTHMHIkZMjeAvpjA
k1HGwy9aQ9NfMpan3uOeDC4z233ZaAVXbDo4C5IHAgMBAAGjggKEMIICgDAdBgNV
HQ4EFgQU9evj5GOu41s18Og2wBwvt9tEEk8wHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUvMThhY2YwLTNkZDAtNDM5ZC1i
NTdlLTRkNTVmNmQzZmRiNi8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xOGFjZjAtM2RkMC00MzlkLWI1
N2UtNGQ1NWY2ZDNmZGI2LzEvOWV2ajVHT3U0MXMxOE9nMndCd3Z0OXRFRWs4Lm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAItQUwwDQYJKoZIhvcNAQELBQADggEBAAMxxsa++arhWtIb0MgJ2Vaw
XlnHuS+j+ZBvwdW5tGVDn33yaA5l5DYafuQcLKiuhKxMcjJERyn+HbmVBAAhVmu9
XZv8PJg9XqYTfsgS6H7vwnjeAObhm3YII4GNDVLXkxgh1LvdifTOij/EWHhoaeg0
/ToSxUJ47FIYiuotfAuvJnIzY+B9epICeiNkkog0nAEcq/n5a2c0TcFij79Sysi7
5s0luLn+j4DNPVxRVp7YNYEaZfTvGFFzjbgmB8Q0XrPpGrWoU1BGWWbAdKROJ1eF
PUTSBGE1j4WcsfSJoobr4ebQStIhhU+kZ2Q47LpWZja9N6tHPbzw3lTf1FWhpX4=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:53 2023 by rpki-client on console-ams.rpki-client.org