Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FsWxYidw22bWbKAg7QBzfVxs6cA.cer
File: FsWxYidw22bWbKAg7QBzfVxs6cA.cer (raw, json)
Hash identifier: lxhIYDI1mQdgxGZVrVmzZBa0Wf5HiFx1r3v6ZQf+eV0=
Subject key identifier: 16:C5:B1:62:27:70:DB:66:D6:6C:A0:20:ED:00:73:7D:5C:6C:E9:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9B9934358E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/2ceb1b-b85c-404f-aea3-23293779cb07/1/FsWxYidw22bWbKAg7QBzfVxs6cA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/2ceb1b-b85c-404f-aea3-23293779cb07/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:55:24 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.159.20.0/22
IP: 2a0f:8080::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 668290266510 (0x9b9934358e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:55:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16c5b1622770db66d66ca020ed00737d5c6ce9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:69:4a:85:28:54:10:d1:cd:cd:93:b3:a8:22:
b7:e3:7a:33:93:8f:93:67:b7:3a:7d:15:05:cf:f6:
b2:d7:f0:f4:84:83:09:96:07:ba:a6:0b:ff:de:2b:
80:8e:99:c1:2d:44:60:ef:02:a2:71:f6:eb:71:5e:
f5:aa:e3:90:7c:72:92:dc:71:4d:29:7f:b1:6c:3c:
80:0a:5c:ad:33:91:d4:61:39:fb:8a:27:5d:48:b1:
de:f1:2f:1f:5d:de:72:d8:39:78:bd:be:78:b8:fb:
0e:9b:03:c2:4d:89:da:1d:4d:7a:e9:f1:22:22:dd:
d9:90:a7:57:2a:d3:a9:53:52:5c:c5:bd:9c:54:60:
37:ae:f0:35:13:2d:42:ea:70:96:6b:1e:2f:0e:78:
84:4b:d7:e2:aa:ff:29:39:ec:f3:23:40:85:9a:c0:
64:a5:a4:ca:29:ad:23:a6:de:c0:dc:82:31:37:4a:
4a:ee:46:91:30:46:b8:90:cb:45:01:be:af:a3:20:
e0:54:e5:1e:85:2c:bc:95:c8:00:76:24:1d:69:40:
6b:cb:62:a3:61:4c:f6:78:87:ca:f2:dd:1b:6a:d0:
32:bb:75:fb:08:b3:df:bf:f6:bf:99:87:d6:60:28:
6a:d3:f6:28:94:0c:ac:d0:37:f9:b3:f2:e2:16:9d:
ee:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C5:B1:62:27:70:DB:66:D6:6C:A0:20:ED:00:73:7D:5C:6C:E9:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2ceb1b-b85c-404f-aea3-23293779cb07/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2ceb1b-b85c-404f-aea3-23293779cb07/1/FsWxYidw22bWbKAg7QBzfVxs6cA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.20.0/22
IPv6:
2a0f:8080::/29
Signature Algorithm: sha256WithRSAEncryption
b0:8a:8f:78:bc:80:e2:46:00:6a:ad:97:5c:28:a1:82:06:41:
19:dd:3c:53:82:b9:31:83:a6:8b:d1:03:f7:64:ad:00:e7:f8:
63:f6:d4:5e:28:b5:c0:8e:7c:19:34:b0:9c:46:0b:72:14:09:
17:42:e3:72:cc:f7:b0:e2:9c:b5:3d:4a:02:4f:94:1e:da:f7:
a1:4f:28:23:55:7e:3a:bc:2b:83:e5:54:ed:79:26:86:8d:29:
fb:14:e3:63:e9:86:46:4c:97:8d:38:cc:62:5b:d7:2c:58:31:
10:0c:4c:7c:65:a7:2a:17:3e:9f:08:d7:32:30:f3:09:51:c7:
5d:1d:c3:56:9f:1d:98:ed:d5:36:ed:93:c5:b7:6c:17:ed:c0:
39:08:bb:d4:7e:aa:66:9b:7a:c8:37:16:48:e8:00:cd:f9:9a:
0e:93:b5:11:54:b7:d8:ad:37:44:1b:a3:ca:fd:aa:d9:28:5e:
90:4f:9b:3a:45:81:c5:8e:8a:b0:56:03:2d:03:ad:77:e7:3f:
a9:3b:9f:71:d8:2d:a6:f4:06:d2:49:ab:9e:ce:1b:eb:a9:5c:
79:60:da:31:51:c7:2e:10:f6:5b:57:9c:c9:01:fa:f5:43:5a:
94:e5:51:c9:3f:12:ad:a6:99:5e:cb:71:1d:06:a9:e8:77:bc:
2e:c1:9c:bf
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIGAJuZNDWOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDI1NTI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxNmM1YjE2MjI3
NzBkYjY2ZDY2Y2EwMjBlZDAwNzM3ZDVjNmNlOWMwMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA7mlKhShUENHNzZOzqCK343ozk4+TZ7c6fRUFz/ay1/D0
hIMJlge6pgv/3iuAjpnBLURg7wKicfbrcV71quOQfHKS3HFNKX+xbDyAClytM5HU
YTn7iiddSLHe8S8fXd5y2Dl4vb54uPsOmwPCTYnaHU166fEiIt3ZkKdXKtOpU1Jc
xb2cVGA3rvA1Ey1C6nCWax4vDniES9fiqv8pOezzI0CFmsBkpaTKKa0jpt7A3IIx
N0pK7kaRMEa4kMtFAb6voyDgVOUehSy8lcgAdiQdaUBry2KjYUz2eIfK8t0batAy
u3X7CLPfv/a/mYfWYChq0/YolAys0Df5s/LiFp3uUQIDAQABo4ICkzCCAo8wHQYD
VR0OBBYEFBbFsWIncNtm1mygIO0Ac31cbOnAMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkLzJjZWIxYi1iODVjLTQwNGYt
YWVhMy0yMzI5Mzc3OWNiMDcvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvMmNlYjFiLWI4NWMtNDA0Zi1h
ZWEzLTIzMjkzNzc5Y2IwNy8xL0ZzV3hZaWR3MjJiV2JLQWc3UUJ6ZlZ4czZjQS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCLZ8UMA0EAgACMAcDBQMqD4CAMA0GCSqGSIb3DQEBCwUAA4IBAQCw
io94vIDiRgBqrZdcKKGCBkEZ3TxTgrkxg6aL0QP3ZK0A5/hj9tReKLXAjnwZNLCc
RgtyFAkXQuNyzPew4py1PUoCT5Qe2vehTygjVX46vCuD5VTteSaGjSn7FONj6YZG
TJeNOMxiW9csWDEQDEx8ZacqFz6fCNcyMPMJUcddHcNWnx2Y7dU27ZPFt2wX7cA5
CLvUfqpmm3rINxZI6ADN+ZoOk7URVLfYrTdEG6PK/arZKF6QT5s6RYHFjoqwVgMt
A6135z+pO59x2C2m9AbSSauezhvrqVx5YNoxUccuEPZbV5zJAfr1Q1qU5VHJPxKt
ppley3EdBqnod7wuwZy/
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:28:44 2024 by rpki-client on console-ams.rpki-client.org