Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FXH3B_B3KRJZNz2HpQlDyqFstxU.cer
File: FXH3B_B3KRJZNz2HpQlDyqFstxU.cer (raw, json)
Hash identifier: h9QFcbpEN7fFQoPT8H1TINuRTgdQyPOS+IafjgTaW/k=
Subject key identifier: 15:71:F7:07:F0:77:29:12:59:37:3D:87:A5:09:43:CA:A1:6C:B7:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A6AA08B651
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/a99180-e048-429e-ba0b-732809a93354/1/FXH3B_B3KRJZNz2HpQlDyqFstxU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/a99180-e048-429e-ba0b-732809a93354/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:04:48 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.216.34.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 715817268817 (0xa6aa08b651)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:04:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1571f707f077291259373d87a50943caa16cb715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fa:97:72:dd:2e:bd:ad:04:5a:e4:d8:cc:b0:
6f:9f:7a:b7:e8:78:3a:59:e0:c7:06:fa:66:56:b7:
40:2b:29:bd:b8:b0:29:2e:b1:77:8a:52:e4:c7:e6:
88:7d:0a:80:f4:3c:7b:30:7b:5b:35:4d:a2:ea:37:
99:e9:dc:ce:25:2e:55:84:cd:ad:3c:37:85:52:ab:
03:34:68:91:fd:64:cf:47:a0:65:44:82:bb:1d:58:
19:cb:05:56:ae:54:bc:52:c7:8b:26:92:de:e4:3f:
50:a8:c1:bb:3f:62:cd:91:d8:93:0d:55:05:90:27:
ab:7f:3a:c9:90:40:84:56:1b:83:1a:c0:5e:52:b4:
4d:22:4c:18:76:0f:9f:da:48:e5:17:7e:ff:fd:9a:
16:a9:d9:31:1c:96:59:0d:59:d7:f2:b9:54:95:97:
2a:37:89:54:74:a1:cc:54:c9:ae:fb:25:84:72:b0:
1f:74:2e:fb:4b:d6:60:c0:f0:4f:69:75:b3:78:58:
e4:30:b3:46:1f:72:ee:f2:7f:ac:bf:59:27:ad:50:
b9:4a:c9:87:8a:be:00:d7:a5:93:23:1c:e6:4b:9b:
49:3c:3d:e1:1e:e6:74:56:d4:66:41:58:98:8b:72:
44:41:f0:75:23:2c:5d:6a:bf:28:c3:fd:af:33:40:
59:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:71:F7:07:F0:77:29:12:59:37:3D:87:A5:09:43:CA:A1:6C:B7:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a99180-e048-429e-ba0b-732809a93354/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a99180-e048-429e-ba0b-732809a93354/1/FXH3B_B3KRJZNz2HpQlDyqFstxU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
93:8e:7a:0a:46:74:78:f3:f2:67:e0:9c:38:00:3d:ad:b2:c3:
49:c5:f0:c0:91:c6:5b:54:85:98:e6:3e:ef:1c:e4:b1:01:ab:
15:c7:45:da:7c:b3:d9:64:46:6a:d6:7c:a0:ce:14:96:56:c6:
42:6b:2d:8d:e5:3a:e1:cc:17:09:08:e1:09:28:cd:a3:ae:13:
89:f1:53:c4:3b:e2:71:1a:7f:1d:34:57:9e:0c:45:ef:03:d3:
98:0d:61:02:d0:43:2c:8c:60:0a:65:1a:8b:05:b3:41:ba:fc:
05:c3:2c:c9:66:2e:03:4b:f2:51:c0:4d:e3:16:c6:e4:e1:01:
72:9c:9a:68:8d:8a:a3:0f:93:a5:12:85:2b:a8:3f:e3:88:0b:
fc:d9:cf:ac:34:81:10:92:2f:69:92:65:ec:ab:de:66:82:fc:
9a:16:76:35:9f:09:5d:a2:67:2b:e0:14:fc:b9:0d:8c:bb:3e:
84:42:3f:fa:93:f7:75:cb:68:20:3a:7a:c5:7e:f2:92:78:d1:
5c:fb:b1:de:ec:99:af:da:6c:0b:e6:e9:e7:48:74:be:9e:fa:
9c:de:b1:fb:d8:bd:e4:88:a7:c8:ad:3e:70:63:0a:94:ba:6c:
ed:f6:aa:a0:61:93:1c:0a:bd:44:32:d6:2f:8c:ba:42:e9:d7:
01:42:be:85
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAKaqCLZRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTIwNDQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxNTcxZjcwN2Yw
NzcyOTEyNTkzNzNkODdhNTA5NDNjYWExNmNiNzE1MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAmvqXct0uva0EWuTYzLBvn3q36Hg6WeDHBvpmVrdAKym9
uLApLrF3ilLkx+aIfQqA9Dx7MHtbNU2i6jeZ6dzOJS5VhM2tPDeFUqsDNGiR/WTP
R6BlRIK7HVgZywVWrlS8UseLJpLe5D9QqMG7P2LNkdiTDVUFkCerfzrJkECEVhuD
GsBeUrRNIkwYdg+f2kjlF37//ZoWqdkxHJZZDVnX8rlUlZcqN4lUdKHMVMmu+yWE
crAfdC77S9ZgwPBPaXWzeFjkMLNGH3Lu8n+sv1knrVC5SsmHir4A16WTIxzmS5tJ
PD3hHuZ0VtRmQViYi3JEQfB1Iyxdar8ow/2vM0BZGwIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFBVx9wfwdykSWTc9h6UJQ8qhbLcVMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzL2E5OTE4MC1lMDQ4LTQyOWUt
YmEwYi03MzI4MDlhOTMzNTQvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvYTk5MTgwLWUwNDgtNDI5ZS1i
YTBiLTczMjgwOWE5MzM1NC8xL0ZYSDNCX0IzS1JKWk56MkhwUWxEeXFGc3R4VS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAW9giMA0GCSqGSIb3DQEBCwUAA4IBAQCTjnoKRnR48/Jn4Jw4AD2t
ssNJxfDAkcZbVIWY5j7vHOSxAasVx0XafLPZZEZq1nygzhSWVsZCay2N5TrhzBcJ
COEJKM2jrhOJ8VPEO+JxGn8dNFeeDEXvA9OYDWEC0EMsjGAKZRqLBbNBuvwFwyzJ
Zi4DS/JRwE3jFsbk4QFynJpojYqjD5OlEoUrqD/jiAv82c+sNIEQki9pkmXsq95m
gvyaFnY1nwldomcr4BT8uQ2Muz6EQj/6k/d1y2ggOnrFfvKSeNFc+7He7Jmv2mwL
5unnSHS+nvqc3rH72L3kiKfIrT5wYwqUumzt9qqgYZMcCr1EMtYvjLpC6dcBQr6F
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:38 2024 by rpki-client on console-fra.rpki-client.org