Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ES1ZSi8ck32K0r0FD-jkvdu5bHs.cer
File: ES1ZSi8ck32K0r0FD-jkvdu5bHs.cer (raw, json)
Hash identifier: e+BGUb7zRWeFahpvP8eVupIm4Q0j5jwpDuhhYieoB6Q=
Subject key identifier: 11:2D:59:4A:2F:1C:93:7D:8A:D2:BD:05:0F:E8:E4:BD:DB:B9:6C:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B2D732BA58
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/00c33c-dc09-42e9-bf39-5e656dcf7116/1/ES1ZSi8ck32K0r0FD-jkvdu5bHs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/00c33c-dc09-42e9-bf39-5e656dcf7116/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 07 Jun 2022 08:38:06 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 146.19.97.0/24
IP: 2a13:800::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 768114604632 (0xb2d732ba58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 7 08:38:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=112d594a2f1c937d8ad2bd050fe8e4bddbb96c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:79:64:1a:41:a4:81:3c:80:06:ce:0d:04:cb:
c4:b2:cc:55:d0:d3:4c:6a:36:55:29:c0:ad:7f:65:
86:f1:2a:d3:34:24:b7:2b:ef:ba:6a:38:79:43:5b:
e4:d6:01:1e:d6:fa:95:41:e1:00:5f:19:41:77:0b:
ed:1e:d7:82:34:ba:46:3c:5f:9b:50:7f:b3:a2:8a:
6d:cd:15:e9:b2:ce:9d:1f:f5:6d:8c:40:11:bf:c6:
f7:08:7b:a4:5d:6f:9c:0c:27:fa:0e:0e:d2:21:8f:
6e:69:45:a0:55:4a:b1:75:08:4f:44:ee:20:df:2b:
9d:da:2e:c7:af:7c:ed:fe:70:3c:87:81:ef:23:0a:
8e:d2:0b:c2:f8:29:02:6e:a1:c8:ec:58:74:c8:6e:
3f:fe:5c:92:35:db:9c:f5:ae:c6:51:fd:2f:16:7e:
c2:4a:c5:5d:29:f8:28:2e:96:cc:88:7a:f8:c2:20:
65:ba:02:e9:5f:0b:8b:7e:6a:ab:89:ce:bd:aa:8e:
51:db:ac:d2:c4:4f:36:d0:a0:2f:4c:05:38:a1:9b:
d5:a0:d9:a8:f6:f0:5e:86:cf:de:06:29:a5:bb:35:
ac:d5:ac:e0:8c:d6:8b:02:12:1e:89:cf:ce:ec:eb:
e1:c4:89:b3:2e:05:b5:7d:60:47:c4:60:e7:49:4d:
64:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2D:59:4A:2F:1C:93:7D:8A:D2:BD:05:0F:E8:E4:BD:DB:B9:6C:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/00c33c-dc09-42e9-bf39-5e656dcf7116/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/00c33c-dc09-42e9-bf39-5e656dcf7116/1/ES1ZSi8ck32K0r0FD-jkvdu5bHs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.97.0/24
IPv6:
2a13:800::/29
Signature Algorithm: sha256WithRSAEncryption
1d:4a:76:7c:0c:e3:98:32:0f:12:5a:49:fb:ce:e7:60:a0:cf:
90:11:b7:d3:dc:86:2b:da:bf:ef:7d:c5:0e:89:b8:fd:a5:81:
8e:4f:55:be:ea:4f:37:89:ce:7a:40:b1:57:58:15:c9:82:12:
d6:06:aa:9d:a5:b9:a3:9d:dc:d1:0d:e1:dc:bb:85:bf:a5:9d:
f1:d5:ff:20:21:43:fc:da:08:cb:68:8b:0d:ce:96:ed:38:74:
74:51:ff:b0:47:75:bd:e2:85:9c:01:0e:2c:f6:bb:89:5f:8b:
53:ce:28:c9:58:50:2d:75:28:bc:fc:ac:75:64:42:ad:be:ac:
52:df:b1:ac:75:e2:58:02:98:00:e5:e7:3b:7a:74:86:8b:c7:
12:c4:ed:14:27:a9:79:18:5f:05:c2:a9:e9:40:19:22:d7:52:
cd:be:b5:e3:62:ea:c7:4c:08:12:00:30:92:bf:79:8d:92:9d:
31:e3:8f:2f:9c:db:e4:aa:db:f4:7f:05:a6:8a:04:2f:96:a5:
d9:13:51:ae:60:f4:b4:43:c7:8a:1b:e7:fe:76:f4:75:99:34:
dc:b5:02:be:0a:85:60:f7:76:c7:15:65:17:f7:d0:6e:c2:3e:
37:5c:8e:36:5c:e2:69:15:cf:36:ba:a3:33:a1:dc:aa:09:de:
e4:bf:fe:e3
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIGALLXMrpYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
NjA3MDgzODA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxMTJkNTk0YTJm
MWM5MzdkOGFkMmJkMDUwZmU4ZTRiZGRiYjk2YzdiMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAq3lkGkGkgTyABs4NBMvEssxV0NNMajZVKcCtf2WG8SrT
NCS3K++6ajh5Q1vk1gEe1vqVQeEAXxlBdwvtHteCNLpGPF+bUH+zooptzRXpss6d
H/VtjEARv8b3CHukXW+cDCf6Dg7SIY9uaUWgVUqxdQhPRO4g3yud2i7Hr3zt/nA8
h4HvIwqO0gvC+CkCbqHI7Fh0yG4//lySNduc9a7GUf0vFn7CSsVdKfgoLpbMiHr4
wiBlugLpXwuLfmqric69qo5R26zSxE820KAvTAU4oZvVoNmo9vBehs/eBimluzWs
1azgjNaLAhIeic/O7OvhxImzLgW1fWBHxGDnSU1k4wIDAQABo4ICkzCCAo8wHQYD
VR0OBBYEFBEtWUovHJN9itK9BQ/o5L3buWx7MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiLzAwYzMzYy1kYzA5LTQyZTkt
YmYzOS01ZTY1NmRjZjcxMTYvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvMDBjMzNjLWRjMDktNDJlOS1i
ZjM5LTVlNjU2ZGNmNzExNi8xL0VTMVpTaThjazMySzByMEZELWprdmR1NWJIcy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQAkhNhMA0EAgACMAcDBQMqEwgAMA0GCSqGSIb3DQEBCwUAA4IBAQAd
SnZ8DOOYMg8SWkn7zudgoM+QEbfT3IYr2r/vfcUOibj9pYGOT1W+6k83ic56QLFX
WBXJghLWBqqdpbmjndzRDeHcu4W/pZ3x1f8gIUP82gjLaIsNzpbtOHR0Uf+wR3W9
4oWcAQ4s9ruJX4tTzijJWFAtdSi8/Kx1ZEKtvqxS37GsdeJYApgA5ec7enSGi8cS
xO0UJ6l5GF8FwqnpQBki11LNvrXjYurHTAgSADCSv3mNkp0x448vnNvkqtv0fwWm
igQvlqXZE1GuYPS0Q8eKG+f+dvR1mTTctQK+CoVg93bHFWUX99Buwj43XI42XOJp
Fc82uqMzodyqCd7kv/7j
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-fra.rpki-client.org