Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Cf4mk-YkKXP80HLGuuU_PF68bmM.cer
File: Cf4mk-YkKXP80HLGuuU_PF68bmM.cer (raw, json)
Hash identifier: 2NyvuDnJ+qPpt2yNslvG/R9dBzmvKa9H8PBA6kOqbjY=
Subject key identifier: 09:FE:26:93:E6:24:29:73:FC:D0:72:C6:BA:E5:3F:3C:5E:BC:6E:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01837A31C5DF3E457367ABDFE87C9B27C990
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/a6ae1b-3966-4392-9683-920da8e14df9/1/Cf4mk-YkKXP80HLGuuU_PF68bmM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/a6ae1b-3966-4392-9683-920da8e14df9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 26 Sep 2022 14:27:05 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 21156
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7a:31:c5:df:3e:45:73:67:ab:df:e8:7c:9b:27:c9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 26 14:27:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09fe2693e6242973fcd072c6bae53f3c5ebc6e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:70:43:e9:a8:b3:da:4a:4f:a1:f9:b6:75:b3:
4f:1b:b4:9b:cb:44:d5:d7:ba:40:65:cc:dc:2b:be:
a8:0a:4f:93:e7:ab:7b:83:da:d0:18:ab:f9:70:dc:
8e:ae:eb:5d:f1:cc:ed:d2:ad:6b:e2:f6:b4:6a:0e:
64:6b:eb:e3:f3:05:75:fa:7c:84:d6:ec:b0:a3:70:
13:58:c2:cc:21:5f:55:90:4e:82:26:ea:05:c6:ac:
dc:20:44:16:67:32:ec:04:1b:30:9c:f9:fa:f6:15:
d2:5b:16:c9:d8:b8:99:6f:c8:cd:2d:88:50:34:45:
4b:99:c5:04:87:bd:67:a4:0b:01:5f:89:ef:95:fa:
05:6c:ea:6a:0b:6b:6c:26:db:96:10:04:9b:95:43:
65:29:76:84:38:04:fb:d6:34:c3:b5:8d:cb:93:69:
f1:9b:27:c4:b1:2d:21:e1:c8:2f:77:67:2c:ff:26:
24:04:ac:c3:2c:ea:20:40:83:fa:ae:8c:35:79:5d:
53:13:cb:34:ca:47:9d:6f:ee:26:85:2f:52:3b:bc:
e3:88:31:20:7f:ab:1a:32:be:a8:80:b9:f0:4c:bf:
56:03:f5:e8:dc:94:34:c5:86:b9:94:cc:16:23:f4:
c3:2e:21:35:44:1a:4c:4e:e1:5e:94:9d:63:f8:75:
5b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FE:26:93:E6:24:29:73:FC:D0:72:C6:BA:E5:3F:3C:5E:BC:6E:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a6ae1b-3966-4392-9683-920da8e14df9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a6ae1b-3966-4392-9683-920da8e14df9/1/Cf4mk-YkKXP80HLGuuU_PF68bmM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21156
Signature Algorithm: sha256WithRSAEncryption
27:65:d2:03:50:86:ee:64:5a:fc:1f:d1:db:56:18:6a:8a:25:
9c:32:e7:7f:29:6b:67:c4:b5:e6:e7:55:c2:8f:3c:f8:8f:97:
e4:e5:ab:fc:39:f6:76:15:4a:41:1c:b6:8d:2f:c8:28:85:7c:
6a:ea:96:cc:6d:ce:f6:9f:f6:d9:84:18:e1:a4:af:5d:24:9e:
92:0f:d2:4a:23:15:6e:3f:b8:6d:e2:11:73:2e:15:2c:7f:5c:
f1:01:9d:f6:27:77:45:ce:f5:52:a3:3d:86:c4:34:26:08:d2:
82:df:a9:50:ef:2a:e7:e3:e5:8a:7f:92:80:de:66:63:fe:ff:
29:fc:4e:0d:9a:b5:85:2e:f6:7e:fb:6b:60:88:35:43:4a:7f:
59:e1:14:a3:0a:3c:8b:54:17:ca:b0:32:98:79:85:6c:5b:80:
0a:05:ee:4e:72:fc:fe:8b:3b:d2:45:f5:9b:f4:ab:86:51:fe:
9e:45:85:4d:0a:e7:a1:63:df:56:0c:ea:b3:7f:5a:2c:c8:b5:
f9:36:38:f0:a9:1d:3c:5f:e0:65:7e:49:db:b1:bc:a0:d8:6c:
6e:ca:96:a7:28:b3:60:1e:23:cf:14:95:9b:80:d4:6a:63:eb:
44:c1:07:b0:d6:e5:35:45:42:db:e3:8e:59:68:e6:59:51:30:
a5:d7:00:15
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgISAYN6McXfPkVzZ6vf6HybJ8mQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjIwOTI2MTQyNzA1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWZlMjY5M2U2MjQyOTczZmNkMDcyYzZiYWU1M2YzYzVlYmM2ZTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXBD6aiz2kpPofm2dbNPG7Sby0TV
17pAZczcK76oCk+T56t7g9rQGKv5cNyOrutd8czt0q1r4va0ag5ka+vj8wV1+nyE
1uywo3ATWMLMIV9VkE6CJuoFxqzcIEQWZzLsBBswnPn69hXSWxbJ2LiZb8jNLYhQ
NEVLmcUEh71npAsBX4nvlfoFbOpqC2tsJtuWEASblUNlKXaEOAT71jTDtY3Lk2nx
myfEsS0h4cgvd2cs/yYkBKzDLOogQIP6row1eV1TE8s0ykedb+4mhS9SO7zjiDEg
f6saMr6ogLnwTL9WA/Xo3JQ0xYa5lMwWI/TDLiE1RBpMTuFelJ1j+HVb2wIDAQAB
o4ICfjCCAnowHQYDVR0OBBYEFAn+JpPmJClz/NByxrrlPzxevG5jMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkL2E2YWUx
Yi0zOTY2LTQzOTItOTY4My05MjBkYThlMTRkZjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvYTZhZTFi
LTM5NjYtNDM5Mi05NjgzLTkyMGRhOGUxNGRmOS8xL0NmNG1rLVlrS1hQODBITEd1
dVVfUEY2OGJtTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAlKkMA0GCSqGSIb3DQEBCwUAA4IBAQAnZdIDUIbuZFr8
H9HbVhhqiiWcMud/KWtnxLXm51XCjzz4j5fk5av8OfZ2FUpBHLaNL8gohXxq6pbM
bc72n/bZhBjhpK9dJJ6SD9JKIxVuP7ht4hFzLhUsf1zxAZ32J3dFzvVSoz2GxDQm
CNKC36lQ7yrn4+WKf5KA3mZj/v8p/E4NmrWFLvZ++2tgiDVDSn9Z4RSjCjyLVBfK
sDKYeYVsW4AKBe5Ocvz+izvSRfWb9KuGUf6eRYVNCuehY99WDOqzf1osyLX5Njjw
qR08X+Blfknbsbyg2GxuypanKLNgHiPPFJWbgNRqY+tEwQew1uU1RULb445ZaOZZ
UTCl1wAV
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:27:40 2024 by rpki-client on console-ams.rpki-client.org