Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B5Lb3XcNe1CaP7Va286LSFM39ts.cer
File: B5Lb3XcNe1CaP7Va286LSFM39ts.cer (raw, json)
Hash identifier: 6jGiypDeMu4q2sb6Ck82LrXG9OjTR6tBZsmPCRHa0Ec=
Subject key identifier: 07:92:DB:DD:77:0D:7B:50:9A:3F:B5:5A:DB:CE:8B:48:53:37:F6:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A8220608CA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/9486d3-49a0-4b86-bc8a-6bc91f2212cf/1/B5Lb3XcNe1CaP7Va286LSFM39ts.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/9486d3-49a0-4b86-bc8a-6bc91f2212cf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:55:15 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 194.59.247.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722125326538 (0xa8220608ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:55:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0792dbdd770d7b509a3fb55adbce8b485337f6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:93:14:81:18:d6:e9:60:4b:f3:ac:6c:49:d4:
50:16:48:5a:8a:5e:89:5a:3b:86:9b:ff:78:f8:5b:
63:42:b1:8c:79:40:bd:43:58:52:39:a8:c9:83:9a:
36:bd:fd:c0:99:10:cf:74:53:cd:1c:3b:9b:10:90:
e7:44:bb:64:92:e6:7c:0a:ad:57:f1:8e:e9:db:90:
e8:8d:02:48:63:5d:5a:a2:c4:e9:00:2a:65:d1:67:
c1:55:b0:55:b5:fd:29:f5:8d:c2:0f:41:6c:95:2c:
f2:44:c5:8d:d3:35:81:a8:40:95:a4:79:73:0d:0c:
b5:b9:95:04:7a:e8:64:f0:24:30:9e:a3:36:38:d4:
20:d4:4f:8f:8f:ff:9b:f9:d5:99:48:36:8a:c9:cf:
72:c5:aa:de:1a:bf:85:73:0c:ce:70:ce:6b:d6:fc:
69:59:1a:a6:0e:c1:0d:70:bb:9c:4c:ef:4c:67:9c:
da:7f:0b:1f:bc:ce:4b:d1:81:60:ae:1b:f3:b4:c0:
6b:92:84:09:b1:42:0a:64:10:c5:2c:ee:8a:1a:0b:
4f:fb:29:ca:06:76:f3:79:b3:30:5a:bc:29:2e:4a:
96:71:e7:9a:3c:4c:01:60:86:bf:0a:89:77:78:eb:
d9:8a:0f:93:1c:a3:1a:85:d0:40:a1:9e:b4:f7:ee:
50:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:92:DB:DD:77:0D:7B:50:9A:3F:B5:5A:DB:CE:8B:48:53:37:F6:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/9486d3-49a0-4b86-bc8a-6bc91f2212cf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/9486d3-49a0-4b86-bc8a-6bc91f2212cf/1/B5Lb3XcNe1CaP7Va286LSFM39ts.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.247.0/24
Signature Algorithm: sha256WithRSAEncryption
22:d4:53:0f:cb:4b:59:a1:15:34:42:dc:ee:59:17:37:e2:ed:
7d:ac:f9:29:41:83:4a:64:e8:98:ae:a3:bd:d1:01:10:88:b6:
b0:63:c1:71:79:fa:22:0d:91:85:fc:6a:9b:fa:c5:7d:62:de:
99:5e:a3:de:07:b0:ad:30:0b:f9:8b:34:b5:55:08:e1:f6:ee:
90:66:0b:eb:6a:cb:9c:0a:1d:e1:5f:97:d2:26:25:92:8f:40:
d6:ee:1d:89:0f:4c:c1:0b:aa:63:98:9d:fe:9d:8a:1f:1c:f6:
77:41:71:df:7f:30:9c:7d:fe:04:7e:55:66:db:a0:96:a2:b5:
90:ab:3e:37:a7:a2:14:8c:7b:62:c8:4a:cd:55:c9:3a:0a:56:
43:72:7c:d2:3c:99:c9:00:b7:97:0d:56:3d:7c:fc:89:be:b8:
27:79:01:c9:24:4f:c8:b0:f7:5b:6f:6b:0f:45:a2:a2:9b:10:
e0:e1:eb:fb:d3:e2:5c:85:90:0f:3c:8f:32:2f:ef:2c:31:86:
f0:01:0b:04:a6:16:81:f2:a5:8b:d0:c8:a0:75:14:82:d8:56:
20:86:22:cb:18:9e:2d:e8:28:a6:97:a2:04:5e:78:c3:5f:80:
b4:12:5e:3b:70:f0:6b:ae:70:2f:64:4f:78:82:f6:b2:19:d2:
95:dc:24:b8
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAKgiBgjKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTM1NTE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygwNzkyZGJkZDc3
MGQ3YjUwOWEzZmI1NWFkYmNlOGI0ODUzMzdmNmRiMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAjZMUgRjW6WBL86xsSdRQFkhail6JWjuGm/94+FtjQrGM
eUC9Q1hSOajJg5o2vf3AmRDPdFPNHDubEJDnRLtkkuZ8Cq1X8Y7p25DojQJIY11a
osTpACpl0WfBVbBVtf0p9Y3CD0FslSzyRMWN0zWBqECVpHlzDQy1uZUEeuhk8CQw
nqM2ONQg1E+Pj/+b+dWZSDaKyc9yxareGr+FcwzOcM5r1vxpWRqmDsENcLucTO9M
Z5zafwsfvM5L0YFgrhvztMBrkoQJsUIKZBDFLO6KGgtP+ynKBnbzebMwWrwpLkqW
ceeaPEwBYIa/Col3eOvZig+THKMahdBAoZ609+5QTQIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFAeS2913DXtQmj+1WtvOi0hTN/bbMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0Lzk0ODZkMy00OWEwLTRiODYt
YmM4YS02YmM5MWYyMjEyY2YvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvOTQ4NmQzLTQ5YTAtNGI4Ni1i
YzhhLTZiYzkxZjIyMTJjZi8xL0I1TGIzWGNOZTFDYVA3VmEyODZMU0ZNMzl0cy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAwjv3MA0GCSqGSIb3DQEBCwUAA4IBAQAi1FMPy0tZoRU0QtzuWRc3
4u19rPkpQYNKZOiYrqO90QEQiLawY8FxefoiDZGF/Gqb+sV9Yt6ZXqPeB7CtMAv5
izS1VQjh9u6QZgvrasucCh3hX5fSJiWSj0DW7h2JD0zBC6pjmJ3+nYofHPZ3QXHf
fzCcff4EflVm26CWorWQqz43p6IUjHtiyErNVck6ClZDcnzSPJnJALeXDVY9fPyJ
vrgneQHJJE/IsPdbb2sPRaKimxDg4ev70+JchZAPPI8yL+8sMYbwAQsEphaB8qWL
0MigdRSC2FYghiLLGJ4t6Ciml6IEXnjDX4C0El47cPBrrnAvZE94gvayGdKV3CS4
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:27:10 2024 by rpki-client on console-ams.rpki-client.org