Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EOqVxTE8bFh2_b4D038F0ArcLfE.cer
File: EOqVxTE8bFh2_b4D038F0ArcLfE.cer (raw, json)
Hash identifier: Wb6KJO1QdinMUdKM7qEvhxCJmb3NOJw78K62UHxbpLc=
Subject key identifier: 10:EA:95:C5:31:3C:6C:58:76:FD:BE:03:D3:7F:05:D0:0A:DC:2D:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AA0A10DA0E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/126c44-7186-4af9-ac1d-0b00f0736ffb/1/EOqVxTE8bFh2_b4D038F0ArcLfE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/126c44-7186-4af9-ac1d-0b00f0736ffb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:03:59 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 16262
IP: 192.162.240.0/21
IP: 195.211.100.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 730313316878 (0xaa0a10da0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:03:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10ea95c5313c6c5876fdbe03d37f05d00adc2df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:c6:30:ab:4b:c5:de:a5:bd:7b:a1:82:19:
ab:36:24:a7:00:f7:b2:32:c9:33:5b:1f:5c:0a:25:
39:ac:e1:65:84:6a:27:5a:00:a8:b8:dd:b1:b4:91:
2a:15:82:65:cd:85:1f:33:d8:ea:89:80:00:a0:09:
f6:27:76:08:46:f8:51:8b:36:4a:86:ca:13:71:3f:
bf:5c:5e:7b:4e:54:07:f8:6b:f5:f2:b8:bd:b7:9c:
75:26:2a:07:53:95:59:e8:82:a4:b1:9a:58:a9:2c:
d5:e4:d4:44:d5:f8:5b:52:37:5f:11:72:ee:12:cf:
51:25:a8:d7:47:3f:87:90:c9:b3:7b:fd:d5:77:64:
ed:6d:80:e5:ac:8a:48:aa:54:ab:cd:6f:3a:fc:ce:
e5:09:f2:3f:20:a7:cd:2d:ad:ea:0c:42:7b:26:a1:
96:92:e5:65:c6:52:fb:4e:c8:eb:a1:80:5c:6d:5e:
43:8e:b3:44:95:d7:3c:32:83:93:70:c1:f6:7b:2a:
46:6f:ad:f8:f2:4e:d1:a7:c0:bd:7b:2f:0d:dc:ad:
09:2f:69:75:d0:2f:a3:20:58:da:82:7c:bd:e4:74:
09:6f:4d:ea:69:2a:11:62:da:06:4c:ab:d5:a9:b7:
d0:5b:ae:77:59:55:df:56:c4:96:b3:c1:59:74:42:
fd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EA:95:C5:31:3C:6C:58:76:FD:BE:03:D3:7F:05:D0:0A:DC:2D:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/126c44-7186-4af9-ac1d-0b00f0736ffb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/126c44-7186-4af9-ac1d-0b00f0736ffb/1/EOqVxTE8bFh2_b4D038F0ArcLfE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.240.0/21
195.211.100.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16262
Signature Algorithm: sha256WithRSAEncryption
7f:ed:4a:71:c9:87:16:de:1d:2d:99:94:90:57:ef:d8:e7:5e:
44:b5:5a:ec:c5:e7:e2:13:a1:b7:7b:c7:fa:f1:a3:61:77:a1:
7a:5f:28:fe:20:6f:67:0c:b4:f5:5a:a6:01:03:49:67:f6:fc:
16:01:8f:6e:33:05:19:8d:80:6a:cb:83:8b:de:fd:91:ec:81:
28:39:c0:3b:83:a3:d9:57:ff:69:ad:dd:70:c5:3a:30:ef:40:
0a:d6:f5:a5:a7:32:a4:88:59:ba:43:42:48:a7:2c:ff:58:66:
1f:25:3d:78:3b:71:dc:68:80:fe:92:aa:d2:29:bf:e7:06:ea:
03:00:63:22:ed:8e:79:2c:3f:80:3c:09:36:00:28:31:04:30:
17:c4:96:5b:ed:1f:e0:1c:0e:94:70:bb:c3:71:9f:cc:ea:b0:
b7:f6:c6:90:6a:83:88:42:10:fe:36:d6:aa:81:05:25:04:29:
9a:b5:d4:2b:71:14:3f:dd:27:15:28:4a:89:33:a1:fe:0d:1d:
a2:d3:f7:63:b0:0a:0d:e1:62:15:68:cc:82:13:ac:c0:a7:32:
38:00:e2:10:a4:17:be:97:f4:e0:8a:af:5f:a5:6d:df:50:02:
7b:2d:6b:1b:43:7c:dd:d8:c9:d9:ee:2d:55:99:99:1f:ba:8c:
cf:ec:99:40
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIGAKoKENoOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTUwMzU5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxMGVhOTVjNTMx
M2M2YzU4NzZmZGJlMDNkMzdmMDVkMDBhZGMyZGYxMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAqaHGMKtLxd6lvXuhghmrNiSnAPeyMskzWx9cCiU5rOFl
hGonWgCouN2xtJEqFYJlzYUfM9jqiYAAoAn2J3YIRvhRizZKhsoTcT+/XF57TlQH
+Gv18ri9t5x1JioHU5VZ6IKksZpYqSzV5NRE1fhbUjdfEXLuEs9RJajXRz+HkMmz
e/3Vd2TtbYDlrIpIqlSrzW86/M7lCfI/IKfNLa3qDEJ7JqGWkuVlxlL7TsjroYBc
bV5DjrNEldc8MoOTcMH2eypGb6348k7Rp8C9ey8N3K0JL2l10C+jIFjagny95HQJ
b03qaSoRYtoGTKvVqbfQW653WVXfVsSWs8FZdEL9iQIDAQABo4ICpTCCAqEwHQYD
VR0OBBYEFBDqlcUxPGxYdv2+A9N/BdAK3C3xMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjLzEyNmM0NC03MTg2LTRhZjkt
YWMxZC0wYjAwZjA3MzZmZmIvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvMTI2YzQ0LTcxODYtNGFmOS1h
YzFkLTBiMDBmMDczNmZmYi8xL0VPcVZ4VEU4YkZoMl9iNEQwMzhGMEFyY0xmRS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQDwKLwAwQCw9NkMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAj+GMA0G
CSqGSIb3DQEBCwUAA4IBAQB/7UpxyYcW3h0tmZSQV+/Y515EtVrsxefiE6G3e8f6
8aNhd6F6Xyj+IG9nDLT1WqYBA0ln9vwWAY9uMwUZjYBqy4OL3v2R7IEoOcA7g6PZ
V/9prd1wxTow70AK1vWlpzKkiFm6Q0JIpyz/WGYfJT14O3HcaID+kqrSKb/nBuoD
AGMi7Y55LD+APAk2ACgxBDAXxJZb7R/gHA6UcLvDcZ/M6rC39saQaoOIQhD+Ntaq
gQUlBCmatdQrcRQ/3ScVKEqJM6H+DR2i0/djsAoN4WIVaMyCE6zApzI4AOIQpBe+
l/Tgiq9fpW3fUAJ7LWsbQ3zd2MnZ7i1VmZkfuozP7JlA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-fra.rpki-client.org