Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AIb8I1LYyKdgu4CgzjtUckqAgVQ.cer
File: AIb8I1LYyKdgu4CgzjtUckqAgVQ.cer (raw, json)
Hash identifier: NOok6szt3cT679IKNZmEB6zjQV6It5dlNzUilX9Shd0=
Subject key identifier: 00:86:FC:23:52:D8:C8:A7:60:BB:80:A0:CE:3B:54:72:4A:80:81:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AA234A3769
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/87ebde-840a-4acc-b198-36ccf35f32cf/1/AIb8I1LYyKdgu4CgzjtUckqAgVQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/87ebde-840a-4acc-b198-36ccf35f32cf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:05:10 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.148.168.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 730736506729 (0xaa234a3769)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:05:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0086fc2352d8c8a760bb80a0ce3b54724a808154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c1:19:52:d1:b0:01:7b:22:24:20:ca:c2:43:
b0:d5:e3:42:f0:fd:5f:d2:7d:cd:b3:f2:b9:bb:f6:
74:3a:64:34:ea:c6:23:6b:31:09:b2:8d:94:78:35:
61:1d:d4:ee:82:c5:d7:26:51:7c:40:bf:1a:2c:c3:
11:b5:79:fe:94:4c:41:e7:d9:60:24:2a:96:49:0c:
6a:74:21:34:32:37:4a:3a:93:c2:d2:84:5e:e7:99:
d6:58:d0:5a:f1:e4:8a:38:dd:97:6d:a4:fe:94:cd:
71:a9:6a:36:36:3a:36:4a:ed:89:30:fd:64:88:24:
8c:79:4b:14:56:21:12:51:36:87:ad:f6:6b:3f:07:
75:bf:3b:a5:61:e6:23:27:21:a7:fc:cb:51:8c:29:
c2:71:38:fd:ed:6c:df:24:52:67:1e:76:21:aa:07:
ea:57:d4:2c:2e:24:1a:7d:14:08:78:2a:ac:67:56:
04:37:8a:34:35:e0:99:8b:f4:f7:9b:1c:8f:36:62:
aa:c0:86:fd:9b:49:10:a7:6c:21:60:86:14:9e:90:
59:2f:08:54:cc:bc:db:1a:1f:58:50:7d:af:fa:07:
9f:b6:82:47:a5:83:0a:65:3a:26:ba:ba:20:a6:2a:
7d:ac:af:90:19:1f:0f:e3:ff:20:d3:3a:66:60:17:
53:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:86:FC:23:52:D8:C8:A7:60:BB:80:A0:CE:3B:54:72:4A:80:81:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/87ebde-840a-4acc-b198-36ccf35f32cf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/87ebde-840a-4acc-b198-36ccf35f32cf/1/AIb8I1LYyKdgu4CgzjtUckqAgVQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.168.0/22
Signature Algorithm: sha256WithRSAEncryption
14:89:75:c6:fb:34:6e:bc:6b:dc:34:58:e1:c8:63:99:69:80:
65:44:d5:cc:65:c7:ca:77:0b:74:ef:83:4e:c6:f8:0e:c1:12:
5b:d0:28:d0:4b:80:ad:b4:71:e2:99:ae:f4:91:47:dd:34:00:
f7:ec:a1:42:23:38:9f:65:a4:0f:ce:bc:43:33:73:44:4f:e1:
14:8f:e8:c8:d1:b3:b2:04:97:75:3b:31:0f:c4:7b:2f:db:0d:
a6:c8:96:43:0c:3a:4e:c6:3e:be:a0:e7:7b:4a:09:1b:83:ee:
a0:93:e9:51:39:45:93:45:e4:e4:6e:81:94:09:5e:a3:6f:57:
83:fd:88:34:60:b4:1c:12:a6:ce:c3:a1:54:1b:c8:13:ee:12:
bb:5d:39:61:bb:87:fa:4c:e8:83:42:8c:ee:e8:fd:99:5a:3f:
7c:78:58:da:05:09:05:f2:27:91:e1:6e:a6:9b:9b:11:0e:d4:
9b:d2:b6:a2:19:76:15:58:ea:89:fa:cc:e9:81:06:ec:71:c4:
65:8b:d8:b3:8f:84:ec:8f:1b:81:10:51:3f:00:4a:5a:de:85:
6c:10:a0:d8:79:99:d5:46:ee:b8:5d:43:a7:23:67:de:ae:bf:
cd:e5:90:f4:56:df:f7:29:3f:56:54:b4:a8:86:ea:6f:f3:6c:
d8:71:ab:64
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAKojSjdpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTUwNTEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygwMDg2ZmMyMzUy
ZDhjOGE3NjBiYjgwYTBjZTNiNTQ3MjRhODA4MTU0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEArcEZUtGwAXsiJCDKwkOw1eNC8P1f0n3Ns/K5u/Z0OmQ0
6sYjazEJso2UeDVhHdTugsXXJlF8QL8aLMMRtXn+lExB59lgJCqWSQxqdCE0MjdK
OpPC0oRe55nWWNBa8eSKON2XbaT+lM1xqWo2Njo2Su2JMP1kiCSMeUsUViESUTaH
rfZrPwd1vzulYeYjJyGn/MtRjCnCcTj97WzfJFJnHnYhqgfqV9QsLiQafRQIeCqs
Z1YEN4o0NeCZi/T3mxyPNmKqwIb9m0kQp2whYIYUnpBZLwhUzLzbGh9YUH2v+gef
toJHpYMKZTomurogpip9rK+QGR8P4/8g0zpmYBdTcQIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFACG/CNS2MinYLuAoM47VHJKgIFUMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2Lzg3ZWJkZS04NDBhLTRhY2Mt
YjE5OC0zNmNjZjM1ZjMyY2YvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvODdlYmRlLTg0MGEtNGFjYy1i
MTk4LTM2Y2NmMzVmMzJjZi8xL0FJYjhJMUxZeUtkZ3U0Q2d6anRVY2txQWdWUS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCLZSoMA0GCSqGSIb3DQEBCwUAA4IBAQAUiXXG+zRuvGvcNFjhyGOZ
aYBlRNXMZcfKdwt074NOxvgOwRJb0CjQS4CttHHima70kUfdNAD37KFCIzifZaQP
zrxDM3NET+EUj+jI0bOyBJd1OzEPxHsv2w2myJZDDDpOxj6+oOd7Sgkbg+6gk+lR
OUWTReTkboGUCV6jb1eD/Yg0YLQcEqbOw6FUG8gT7hK7XTlhu4f6TOiDQozu6P2Z
Wj98eFjaBQkF8ieR4W6mm5sRDtSb0raiGXYVWOqJ+szpgQbsccRli9izj4TsjxuB
EFE/AEpa3oVsEKDYeZnVRu64XUOnI2ferr/N5ZD0Vt/3KT9WVLSohupv82zYcatk
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:11 2023 by rpki-client on console-fra.rpki-client.org