Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FUEUXdRh4cWLzL8fHBvve1BABXY.cer
File: FUEUXdRh4cWLzL8fHBvve1BABXY.cer (raw, json)
Hash identifier: oFF7Rn+zRnIZM7mlxw5dkt07hS602eZx5/SJCDFKb88=
Subject key identifier: 15:41:14:5D:D4:61:E1:C5:8B:CC:BF:1F:1C:1B:EF:7B:50:40:05:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9A59C965AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d3569-0024-4a85-912e-255216f8492f/1/FUEUXdRh4cWLzL8fHBvve1BABXY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d3569-0024-4a85-912e-255216f8492f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:54:02 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 85.115.196.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662931334573 (0x9a59c965ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:54:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1541145dd461e1c58bccbf1f1c1bef7b50400576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:2a:be:e7:d1:36:40:12:29:b7:db:3e:f7:
57:56:13:5e:19:e1:95:23:00:2e:c9:dc:f4:43:50:
de:71:bc:a5:df:b2:f3:57:48:75:89:9c:c7:ea:7f:
25:16:35:20:ba:8e:04:1b:8a:99:fd:31:99:dd:99:
c6:f9:25:31:ca:49:71:bf:9b:05:2d:c5:d3:ac:82:
d6:36:27:4e:8e:93:2a:36:8f:3d:70:eb:91:65:f5:
60:ba:60:e8:60:a1:33:51:66:30:78:77:23:a2:68:
93:0a:c7:a0:eb:13:05:87:4c:be:45:c8:8e:c8:96:
bd:e2:51:f2:93:92:2f:66:c0:c7:c4:f3:64:35:f9:
aa:49:f0:de:1d:24:9a:d3:44:70:e7:4c:94:72:2c:
40:4d:35:de:99:4b:c4:0d:58:45:92:a5:f4:71:7b:
59:4f:b3:87:ed:45:12:db:2f:51:ba:d0:48:33:c6:
10:0e:e1:51:ef:55:32:c9:2b:2b:1c:44:68:b5:f0:
4e:98:ba:7c:a1:55:8a:d7:8d:f0:9b:c6:41:f3:e9:
7c:ea:81:7c:1b:7b:2b:fb:fd:7c:3d:5b:b0:10:56:
df:a4:f8:e5:88:16:df:8e:09:28:6c:ab:77:c6:88:
d5:ba:af:d8:23:d2:f0:a1:d3:87:ce:96:52:08:42:
dd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:41:14:5D:D4:61:E1:C5:8B:CC:BF:1F:1C:1B:EF:7B:50:40:05:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d3569-0024-4a85-912e-255216f8492f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d3569-0024-4a85-912e-255216f8492f/1/FUEUXdRh4cWLzL8fHBvve1BABXY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.196.0/22
Signature Algorithm: sha256WithRSAEncryption
83:fd:de:a3:71:33:d1:f6:63:14:d8:f2:67:7a:8a:fe:1c:b4:
44:9a:9f:83:93:7a:39:14:a0:32:7d:be:ae:7f:08:83:bf:28:
90:b3:17:f0:31:5a:11:53:c0:01:db:9b:cb:90:e1:15:dd:d6:
27:18:8a:e3:e5:39:51:94:48:ea:f9:76:a3:fa:31:26:42:07:
86:61:8b:ba:46:a0:be:08:11:6e:ed:96:76:7c:28:d3:e6:f0:
84:dd:27:f8:f2:e4:b7:92:ff:f5:4a:16:d1:fb:74:f1:a9:42:
7b:2c:f2:2e:6f:0c:f5:4a:9b:c5:6e:b0:6c:d0:60:aa:81:8c:
66:4c:c2:92:04:7f:69:ab:53:bd:bb:9e:2a:30:08:48:19:ed:
ba:4d:95:3e:9c:20:8a:c9:a8:ac:d2:e5:99:f6:41:2e:5e:94:
0e:3e:0e:8f:39:77:c9:4e:31:58:80:26:ff:5d:9b:5b:88:4a:
93:4d:2d:d9:32:53:62:bc:ca:77:1f:1c:46:47:4e:6f:bb:2f:
3b:71:a2:a7:cb:87:34:8c:ea:ff:94:37:18:b0:10:4f:a2:dd:
8e:bf:5a:99:dc:67:25:41:4b:f3:a5:68:8f:7f:5b:10:78:22:
04:15:8a:f5:58:1e:77:e2:95:4f:ec:6c:8d:f2:1a:45:89:21:
d5:b7:5d:65
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAJpZyWWtMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDE1NDAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxNTQxMTQ1ZGQ0
NjFlMWM1OGJjY2JmMWYxYzFiZWY3YjUwNDAwNTc2MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAu1oqvufRNkASKbfbPvdXVhNeGeGVIwAuydz0Q1Decbyl
37LzV0h1iZzH6n8lFjUguo4EG4qZ/TGZ3ZnG+SUxyklxv5sFLcXTrILWNidOjpMq
No89cOuRZfVgumDoYKEzUWYweHcjomiTCseg6xMFh0y+RciOyJa94lHyk5IvZsDH
xPNkNfmqSfDeHSSa00Rw50yUcixATTXemUvEDVhFkqX0cXtZT7OH7UUS2y9RutBI
M8YQDuFR71UyySsrHERotfBOmLp8oVWK143wm8ZB8+l86oF8G3sr+/18PVuwEFbf
pPjliBbfjgkobKt3xojVuq/YI9LwodOHzpZSCELdowIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFBVBFF3UYeHFi8y/Hxwb73tQQAV2MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiLzVkMzU2OS0wMDI0LTRhODUt
OTEyZS0yNTUyMTZmODQ5MmYvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvNWQzNTY5LTAwMjQtNGE4NS05
MTJlLTI1NTIxNmY4NDkyZi8xL0ZVRVVYZFJoNGNXTHpMOGZIQnZ2ZTFCQUJYWS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCVXPEMA0GCSqGSIb3DQEBCwUAA4IBAQCD/d6jcTPR9mMU2PJneor+
HLREmp+Dk3o5FKAyfb6ufwiDvyiQsxfwMVoRU8AB25vLkOEV3dYnGIrj5TlRlEjq
+Xaj+jEmQgeGYYu6RqC+CBFu7ZZ2fCjT5vCE3Sf48uS3kv/1ShbR+3TxqUJ7LPIu
bwz1SpvFbrBs0GCqgYxmTMKSBH9pq1O9u54qMAhIGe26TZU+nCCKyais0uWZ9kEu
XpQOPg6POXfJTjFYgCb/XZtbiEqTTS3ZMlNivMp3HxxGR05vuy87caKny4c0jOr/
lDcYsBBPot2Ov1qZ3GclQUvzpWiPf1sQeCIEFYr1WB534pVP7GyN8hpFiSHVt11l
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:28:36 2024 by rpki-client on console-ams.rpki-client.org