Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BytHhqg7d0y10fe4Ulb9bFG7NGA.cer
File: BytHhqg7d0y10fe4Ulb9bFG7NGA.cer (raw, json)
Hash identifier: 4hnsZswjZK77VOVvt/C64YCX7fTqiKdFGxb2hldDb1w=
Subject key identifier: 07:2B:47:86:A8:3B:77:4C:B5:D1:F7:B8:52:56:FD:6C:51:BB:34:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9A104A4838
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/7ff191-4b47-4a5d-a7aa-42b6f6637396/1/BytHhqg7d0y10fe4Ulb9bFG7NGA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/7ff191-4b47-4a5d-a7aa-42b6f6637396/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:51:31 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 34104
AS: 34595
AS: 35509
AS: 43562
IP: 84.51.0.0/18
IP: 91.93.0.0/16
IP: 2a01:730::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661698267192 (0x9a104a4838)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:51:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=072b4786a83b774cb5d1f7b85256fd6c51bb3460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:53:c5:ca:61:3c:a2:a5:3e:e5:58:2c:d6:76:
5a:a6:40:e0:78:bf:6b:6d:eb:c8:87:5d:6a:58:0d:
ab:37:dd:96:f3:77:6e:fa:f2:33:8f:39:ac:f0:34:
d0:56:2e:10:9e:f1:63:42:44:3b:b9:ab:91:c1:2a:
ee:ad:bf:26:53:33:84:f9:eb:c7:d1:40:f8:a3:db:
d3:9b:59:a5:84:f3:08:82:5f:4f:a4:12:4b:4c:75:
61:03:87:c0:34:86:81:8a:37:c7:d0:e0:15:ab:f8:
39:92:f1:d8:d1:61:2e:a7:28:b1:b7:5a:4a:02:40:
fc:86:36:74:56:ac:f7:04:9b:04:21:e3:b6:71:02:
ac:13:bb:32:e5:ab:2b:60:06:a3:9f:6b:aa:bd:93:
2d:17:d1:a3:38:2a:b3:23:97:d5:11:e7:5a:0c:a2:
98:74:f9:0e:65:73:60:49:14:0a:cc:e2:0c:a6:81:
e0:c4:c9:a0:47:15:ed:26:82:af:91:f6:52:be:bd:
3c:82:38:c9:99:8a:36:18:4f:fb:ac:de:6e:ba:45:
f3:ea:d0:29:3d:88:b8:d5:c0:1c:10:3d:f0:6d:c6:
28:2e:5f:94:82:87:fd:73:95:fa:c1:f6:52:df:98:
bf:85:be:48:fc:79:bb:df:64:b8:c9:14:33:71:94:
44:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2B:47:86:A8:3B:77:4C:B5:D1:F7:B8:52:56:FD:6C:51:BB:34:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7ff191-4b47-4a5d-a7aa-42b6f6637396/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7ff191-4b47-4a5d-a7aa-42b6f6637396/1/BytHhqg7d0y10fe4Ulb9bFG7NGA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.51.0.0/18
91.93.0.0/16
IPv6:
2a01:730::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34104
34595
35509
43562
Signature Algorithm: sha256WithRSAEncryption
5f:06:d7:de:30:af:a2:8d:15:83:2a:9a:14:63:f2:8b:9b:73:
7a:b2:60:32:b9:12:35:c0:28:1f:b5:a7:8c:18:c9:29:a1:57:
ee:a0:de:13:7d:b6:f7:8a:ea:a6:db:f2:da:54:d4:e1:f0:39:
02:f6:1c:fc:ec:8b:ac:3d:41:e1:7e:a0:bb:b6:68:9e:18:18:
44:5a:b1:d0:97:91:7c:88:f9:0b:54:da:1b:43:2a:db:ef:a2:
50:44:dd:e1:c5:27:83:a4:fb:35:51:08:42:31:ee:f4:37:d3:
33:73:b1:f7:26:9c:4c:d3:ba:16:50:f5:30:80:4f:ac:46:47:
47:b7:c1:2b:92:90:4b:43:ab:86:c5:28:70:b5:58:03:3b:86:
af:b7:9c:c8:24:40:f4:30:d7:30:a5:5e:5c:3e:5e:7a:e7:74:
ec:c5:36:2e:45:67:6d:09:fe:ee:e0:fe:87:d3:4a:be:45:39:
d2:33:43:60:fe:d6:de:75:5e:21:68:5a:e5:83:a3:a2:c6:93:
d4:43:99:47:a8:de:6a:73:78:15:2b:3c:6c:15:37:5c:10:58:
ac:0b:83:7a:dc:76:47:40:97:a8:c8:24:6c:41:61:94:81:0f:
61:ac:cc:c2:e1:c4:fd:a5:20:b3:d6:3f:79:aa:64:d0:8d:4c:
92:ce:fb:86
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIGAJoQSkg4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDE1MTMxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygwNzJiNDc4NmE4
M2I3NzRjYjVkMWY3Yjg1MjU2ZmQ2YzUxYmIzNDYwMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAu1PFymE8oqU+5Vgs1nZapkDgeL9rbevIh11qWA2rN92W
83du+vIzjzms8DTQVi4QnvFjQkQ7uauRwSrurb8mUzOE+evH0UD4o9vTm1mlhPMI
gl9PpBJLTHVhA4fANIaBijfH0OAVq/g5kvHY0WEupyixt1pKAkD8hjZ0Vqz3BJsE
IeO2cQKsE7sy5asrYAajn2uqvZMtF9GjOCqzI5fVEedaDKKYdPkOZXNgSRQKzOIM
poHgxMmgRxXtJoKvkfZSvr08gjjJmYo2GE/7rN5uukXz6tApPYi41cAcED3wbcYo
Ll+Ugof9c5X6wfZS35i/hb5I/Hm732S4yRQzcZRElQIDAQABo4ICwzCCAr8wHQYD
VR0OBBYEFAcrR4aoO3dMtdH3uFJW/WxRuzRgMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmLzdmZjE5MS00YjQ3LTRhNWQt
YTdhYS00MmI2ZjY2MzczOTYvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvN2ZmMTkxLTRiNDctNGE1ZC1h
N2FhLTQyYjZmNjYzNzM5Ni8xL0J5dEhocWc3ZDB5MTBmZTRVbGI5YkZHN05HQS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAR
BAIAATALAwQGVDMAAwMAW10wDQQCAAIwBwMFACoBBzAwKQYIKwYBBQUHAQgBAf8E
GjAYoBYwFAIDAIU4AgMAhyMCAwCKtQIDAKoqMA0GCSqGSIb3DQEBCwUAA4IBAQBf
BtfeMK+ijRWDKpoUY/KLm3N6smAyuRI1wCgftaeMGMkpoVfuoN4Tfbb3iuqm2/La
VNTh8DkC9hz87IusPUHhfqC7tmieGBhEWrHQl5F8iPkLVNobQyrb76JQRN3hxSeD
pPs1UQhCMe70N9Mzc7H3JpxM07oWUPUwgE+sRkdHt8ErkpBLQ6uGxShwtVgDO4av
t5zIJED0MNcwpV5cPl5653TsxTYuRWdtCf7u4P6H00q+RTnSM0Ng/tbedV4haFrl
g6OixpPUQ5lHqN5qc3gVKzxsFTdcEFisC4N63HZHQJeoyCRsQWGUgQ9hrMzC4cT9
pSCz1j95qmTQjUySzvuG
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:49 2024 by rpki-client on console-fra.rpki-client.org