Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AdMZ42kFR0YdmNfvsIxmH5Envd4.cer
File: AdMZ42kFR0YdmNfvsIxmH5Envd4.cer (raw, json)
Hash identifier: EP7R8Fwui4nZcoSYdj+ubspC10EaNSfNQ87lnOA9kPY=
Subject key identifier: 01:D3:19:E3:69:05:47:46:1D:98:D7:EF:B0:8C:66:1F:91:27:BD:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A8C331EBD5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/97e6ab-0f17-4a9a-b887-30c259cb4464/1/AdMZ42kFR0YdmNfvsIxmH5Envd4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/97e6ab-0f17-4a9a-b887-30c259cb4464/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:04:06 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 44632
IP: 194.8.94.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 724829334485 (0xa8c331ebd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:04:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01d319e3690547461d98d7efb08c661f9127bdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5c:4a:5f:e7:68:4f:5c:92:c4:cf:09:12:c1:
b8:01:12:6b:95:2b:a9:ce:e1:19:06:e5:58:f9:4d:
29:47:f0:f4:80:31:6a:88:77:aa:70:25:8e:2a:5c:
b3:dc:03:d3:ae:2f:a7:12:97:62:b9:ce:b7:b6:73:
4b:70:73:c8:98:2d:99:9c:6d:34:8e:77:89:ba:35:
42:23:21:a8:19:05:4e:cb:e7:15:04:18:20:ea:26:
02:9e:ea:4d:07:bb:b4:af:f1:ad:93:19:a7:1d:0e:
c9:94:1b:99:f1:c7:38:b9:c2:3f:ef:aa:ab:51:44:
30:90:3b:ad:24:eb:ee:04:df:09:33:d6:3e:ea:44:
44:ee:7b:29:da:a9:73:0d:ac:3c:07:2d:09:fd:5a:
21:e2:4d:71:d5:c6:71:42:dc:67:ba:2a:e8:1c:c6:
dd:08:ad:53:03:6e:45:96:36:1a:e6:5d:35:8d:f5:
a9:d7:2b:89:01:eb:97:48:c2:60:78:bf:f0:07:42:
be:10:13:9f:1c:b9:a8:d3:a6:6a:47:2b:a6:10:e1:
48:65:78:4e:ba:d4:3f:df:ca:c7:c2:f2:97:15:2e:
f2:18:ed:14:c4:a9:f5:d0:63:69:e9:d3:9c:71:67:
41:36:7e:e8:89:a0:b8:7a:a3:42:95:ea:ee:85:69:
a5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D3:19:E3:69:05:47:46:1D:98:D7:EF:B0:8C:66:1F:91:27:BD:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/97e6ab-0f17-4a9a-b887-30c259cb4464/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/97e6ab-0f17-4a9a-b887-30c259cb4464/1/AdMZ42kFR0YdmNfvsIxmH5Envd4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.94.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44632
Signature Algorithm: sha256WithRSAEncryption
5d:bc:51:e1:4f:b6:f3:4a:72:44:f5:fa:cc:f0:e5:7f:f3:84:
0c:c6:eb:b9:d2:76:af:ad:21:ab:7f:3c:bf:4a:52:93:2f:cd:
05:61:d7:b1:50:95:f6:dc:bf:78:8f:c0:ea:a9:f6:f2:01:b2:
1b:63:bf:a3:7f:e3:1b:fc:34:bb:3f:7e:a4:7e:f5:1f:aa:bd:
cb:4b:c2:e4:7d:d2:ef:61:67:5c:a0:f5:b9:0b:e9:3e:54:64:
2d:fc:46:f4:52:13:68:00:66:4b:1d:4e:f5:33:fd:76:d2:f8:
3e:f5:b7:65:f6:ab:08:74:12:84:65:5e:1c:c2:ce:9d:dd:8c:
da:91:d9:36:70:bb:bc:2f:8e:12:e0:28:21:f4:a0:ac:6a:f8:
6e:6e:14:3c:68:c5:04:26:2a:11:b5:ae:b1:7b:6b:b0:97:f6:
3d:95:22:83:21:f0:86:2f:4f:be:41:b9:26:6f:65:0d:c9:22:
44:52:7e:e7:f7:a1:16:1c:b7:31:df:8e:e2:7f:05:de:ea:1d:
ee:34:b6:64:ba:21:31:34:bf:83:5b:d4:4e:88:a0:f0:07:2e:
0b:20:c7:06:48:f4:ad:4e:5e:fc:8c:d1:78:eb:2d:2c:aa:77:
12:33:b0:0b:94:9c:3b:11:85:f2:ef:ee:4e:81:19:d8:fc:65:
02:52:16:87
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgIGAKjDMevVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTQwNDA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygwMWQzMTllMzY5
MDU0NzQ2MWQ5OGQ3ZWZiMDhjNjYxZjkxMjdiZGRlMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA11xKX+doT1ySxM8JEsG4ARJrlSupzuEZBuVY+U0pR/D0
gDFqiHeqcCWOKlyz3APTri+nEpdiuc63tnNLcHPImC2ZnG00jneJujVCIyGoGQVO
y+cVBBgg6iYCnupNB7u0r/GtkxmnHQ7JlBuZ8cc4ucI/76qrUUQwkDutJOvuBN8J
M9Y+6kRE7nsp2qlzDaw8By0J/Voh4k1x1cZxQtxnuiroHMbdCK1TA25FljYa5l01
jfWp1yuJAeuXSMJgeL/wB0K+EBOfHLmo06ZqRyumEOFIZXhOutQ/38rHwvKXFS7y
GO0UxKn10GNp6dOccWdBNn7oiaC4eqNCleruhWml3wIDAQABo4ICoDCCApwwHQYD
VR0OBBYEFAHTGeNpBUdGHZjX77CMZh+RJ73eMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjLzk3ZTZhYi0wZjE3LTRhOWEt
Yjg4Ny0zMGMyNTljYjQ0NjQvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvOTdlNmFiLTBmMTctNGE5YS1i
ODg3LTMwYzI1OWNiNDQ2NC8xL0FkTVo0MmtGUjBZZG1OZnZzSXhtSDVFbnZkNC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBwgheMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCuWDANBgkqhkiG
9w0BAQsFAAOCAQEAXbxR4U+280pyRPX6zPDlf/OEDMbrudJ2r60hq388v0pSky/N
BWHXsVCV9ty/eI/A6qn28gGyG2O/o3/jG/w0uz9+pH71H6q9y0vC5H3S72FnXKD1
uQvpPlRkLfxG9FITaABmSx1O9TP9dtL4PvW3ZfarCHQShGVeHMLOnd2M2pHZNnC7
vC+OEuAoIfSgrGr4bm4UPGjFBCYqEbWusXtrsJf2PZUigyHwhi9PvkG5Jm9lDcki
RFJ+5/ehFhy3Md+O4n8F3uod7jS2ZLohMTS/g1vUToig8AcuCyDHBkj0rU5e/IzR
eOstLKp3EjOwC5ScOxGF8u/uToEZ2PxlAlIWhw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:27:00 2024 by rpki-client on console-ams.rpki-client.org