Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9lyYRFEG-ej67lCRim-_pt3u-_s.cer
File: 9lyYRFEG-ej67lCRim-_pt3u-_s.cer (raw, json)
Hash identifier: LNWezbYz60Mx/Y+I5yailZKS539i7Xz6JEG+uoC7sMc=
Subject key identifier: F6:5C:98:44:51:06:F9:E8:FA:EE:50:91:8A:6F:BF:A6:DD:EE:FB:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 77E5A0E08B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/b9774a-de1b-424c-be0a-ac6f33473bd0/1/9lyYRFEG-ej67lCRim-_pt3u-_s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/b9774a-de1b-424c-be0a-ac6f33473bd0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 01:01:33 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 185.190.64.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 514953633931 (0x77e5a0e08b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:01:33 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=f65c98445106f9e8faee50918a6fbfa6ddeefbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:5e:fd:f1:e4:b5:1c:89:d6:6e:98:06:0c:
f0:e5:63:32:65:b6:a8:27:f6:21:8e:84:b5:f8:94:
91:0d:3c:06:56:07:48:db:29:f1:0e:57:99:6c:c6:
31:63:53:84:be:b2:ab:87:0f:e3:1e:b4:2a:6c:38:
10:ed:df:77:6e:26:5a:7f:39:7a:9f:81:f7:2a:10:
a8:63:d7:10:c7:ba:2c:f8:83:9b:c1:d1:0f:d1:6c:
b7:b0:09:8a:19:39:b8:b7:96:2b:df:27:6b:74:68:
1e:e9:97:f4:1f:1b:28:95:aa:a3:0a:85:03:79:31:
fc:1c:e0:41:ce:dc:aa:04:d2:8f:88:65:4e:8d:d8:
ad:f9:c6:43:8e:74:8e:b4:90:8d:ac:e5:88:6b:cb:
ac:d8:70:b3:b1:15:81:7a:24:fd:da:b6:07:7f:04:
9c:cb:bf:8f:73:b7:43:54:d7:c8:ea:23:c6:9a:c1:
40:9b:13:6b:6c:3b:3c:63:74:fd:a0:f6:45:f9:1b:
aa:61:37:be:d9:96:0f:e1:be:2b:15:6a:20:a8:fc:
7b:4d:08:74:6b:1a:1c:cb:39:05:02:9d:29:26:8b:
b7:10:c2:3b:0f:a2:5e:60:c5:4c:28:b5:94:86:f7:
4c:c2:7c:d6:9a:b5:3d:97:b5:04:3e:47:71:34:f8:
d8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5C:98:44:51:06:F9:E8:FA:EE:50:91:8A:6F:BF:A6:DD:EE:FB:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b9774a-de1b-424c-be0a-ac6f33473bd0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b9774a-de1b-424c-be0a-ac6f33473bd0/1/9lyYRFEG-ej67lCRim-_pt3u-_s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.64.0/22
Signature Algorithm: sha256WithRSAEncryption
02:22:d8:7f:7d:45:11:4c:64:50:0d:64:87:41:e8:84:c9:21:
88:c7:70:d4:19:5c:1a:13:41:89:eb:f8:ab:b4:d2:74:3a:8b:
e1:6c:d4:ac:b6:9a:04:88:0d:c4:a4:fd:fe:05:50:1b:51:ad:
8f:27:69:b5:66:ce:70:ee:a7:c7:38:ce:26:0d:2c:fb:21:aa:
09:86:55:8e:0a:45:77:0d:8f:f0:a7:bb:4c:77:9e:df:53:a7:
5e:f0:40:d2:68:fe:59:3c:cf:3c:19:68:16:f6:99:c1:ab:59:
2b:fb:73:c8:7b:7c:a0:bf:88:d3:6a:3a:e8:14:d0:f5:15:00:
cf:b9:c4:6f:ba:87:42:ee:5e:20:d9:4f:45:27:2a:46:c6:e8:
96:39:32:15:bd:53:11:0d:53:89:b7:b9:10:b9:c9:a4:bb:5b:
77:f5:43:0b:dc:6c:3f:c4:58:e4:fd:3f:1a:4e:7c:3c:4c:21:
ee:2b:40:0c:d4:17:04:63:24:20:79:b8:23:bb:b4:e8:d1:2d:
46:08:47:39:6b:c5:96:f9:b4:94:21:7b:22:91:fb:f2:16:dc:
58:29:0c:cd:49:08:df:b2:e2:6c:b7:38:8e:b9:79:e4:cc:87:
cf:e4:71:f5:93:fd:9d:4c:8a:9b:db:10:01:8b:3f:f5:78:44:
e5:42:9d:0f
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIFd+Wg4IswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMTAxMzNaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGY2NWM5ODQ0NTEw
NmY5ZThmYWVlNTA5MThhNmZiZmE2ZGRlZWZiZmIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1fl798eS1HInWbpgGDPDlYzJltqgn9iGOhLX4lJENPAZW
B0jbKfEOV5lsxjFjU4S+squHD+MetCpsOBDt33duJlp/OXqfgfcqEKhj1xDHuiz4
g5vB0Q/RbLewCYoZObi3livfJ2t0aB7pl/QfGyiVqqMKhQN5Mfwc4EHO3KoE0o+I
ZU6N2K35xkOOdI60kI2s5Yhry6zYcLOxFYF6JP3atgd/BJzLv49zt0NU18jqI8aa
wUCbE2tsOzxjdP2g9kX5G6phN77Zlg/hvisVaiCo/HtNCHRrGhzLOQUCnSkmi7cQ
wjsPol5gxUwotZSG90zCfNaatT2XtQQ+R3E0+NhpAgMBAAGjggKEMIICgDAdBgNV
HQ4EFgQU9lyYRFEG+ej67lCRim+/pt3u+/swHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvYjk3NzRhLWRlMWItNDI0Yy1i
ZTBhLWFjNmYzMzQ3M2JkMC8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9iOTc3NGEtZGUxYi00MjRjLWJl
MGEtYWM2ZjMzNDczYmQwLzEvOWx5WVJGRUctZWo2N2xDUmltLV9wdDN1LV9zLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAK5vkAwDQYJKoZIhvcNAQELBQADggEBAAIi2H99RRFMZFANZIdB6ITJ
IYjHcNQZXBoTQYnr+Ku00nQ6i+Fs1Ky2mgSIDcSk/f4FUBtRrY8nabVmznDup8c4
ziYNLPshqgmGVY4KRXcNj/Cnu0x3nt9Tp17wQNJo/lk8zzwZaBb2mcGrWSv7c8h7
fKC/iNNqOugU0PUVAM+5xG+6h0LuXiDZT0UnKkbG6JY5MhW9UxENU4m3uRC5yaS7
W3f1QwvcbD/EWOT9PxpOfDxMIe4rQAzUFwRjJCB5uCO7tOjRLUYIRzlrxZb5tJQh
eyKR+/IW3FgpDM1JCN+y4my3OI65eeTMh8/kcfWT/Z1MipvbEAGLP/V4ROVCnQ8=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:57 2023 by rpki-client on console-ams.rpki-client.org