Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GWuZVzZPPn51Be6uzWpI4XKg-ek.cer
File: GWuZVzZPPn51Be6uzWpI4XKg-ek.cer (raw, json)
Hash identifier: /9D1+UhKo57bNmtehJshAKylHOpGavjyQbPQ0J7kb14=
Subject key identifier: 19:6B:99:57:36:4F:3E:7E:75:05:EE:AE:CD:6A:48:E1:72:A0:F9:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A83BD761BB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/bd27d5-41c9-4791-8d8d-74e7e5ed4ebd/1/GWuZVzZPPn51Be6uzWpI4XKg-ek.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/bd27d5-41c9-4791-8d8d-74e7e5ed4ebd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:56:23 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 211679
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722558476731 (0xa83bd761bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=196b9957364f3e7e7505eeaecd6a48e172a0f9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:d6:ed:80:77:ad:71:ba:fe:23:33:03:c7:
26:32:7f:fe:0b:e6:bb:76:41:5a:fd:c0:34:da:21:
5e:12:b4:4d:ee:9e:79:a8:f4:80:44:fa:05:34:07:
f1:2f:1c:21:ba:81:60:b2:03:fd:db:18:52:f5:bc:
33:4e:4a:82:d7:b6:f1:8a:fa:9f:02:b2:e7:1b:47:
10:8c:65:d7:d6:6b:e8:5d:be:99:08:9f:74:e1:6b:
df:af:3e:42:9b:c3:fc:d3:e5:6b:96:8b:6b:52:ad:
fe:fb:15:61:2b:cc:4e:a7:e7:ec:90:f2:ad:cb:8c:
a8:e4:b9:80:f8:d0:44:d8:4b:32:10:a3:39:0f:9f:
48:46:72:1e:6c:7e:1a:8b:27:50:38:09:fd:72:fa:
22:4b:65:30:54:62:7c:f1:33:15:42:28:16:91:d0:
c4:b8:ad:14:b7:89:aa:70:6f:de:a2:51:17:df:c5:
02:31:22:cb:d2:ab:42:46:b4:5b:ef:92:03:b3:25:
98:db:ab:33:0b:4f:a0:d4:ab:3d:11:9f:88:18:c6:
22:59:c4:23:66:fb:31:1c:a0:53:35:47:32:9c:37:
10:94:09:cd:c6:2a:8b:a6:31:b6:d8:c6:d9:89:84:
0a:57:64:58:a5:ad:f1:3d:62:62:ed:22:fa:9e:f4:
66:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6B:99:57:36:4F:3E:7E:75:05:EE:AE:CD:6A:48:E1:72:A0:F9:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd27d5-41c9-4791-8d8d-74e7e5ed4ebd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd27d5-41c9-4791-8d8d-74e7e5ed4ebd/1/GWuZVzZPPn51Be6uzWpI4XKg-ek.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211679
Signature Algorithm: sha256WithRSAEncryption
ab:d1:62:4e:52:d0:0d:97:7a:3d:27:07:60:37:1d:07:0c:ba:
f1:9a:cf:47:61:c8:b6:f3:57:60:47:f1:b1:39:6e:bf:0d:a3:
f5:41:71:5b:4b:c3:f1:da:25:fe:ba:b5:2a:1b:f5:f7:7e:b0:
f5:25:7e:06:8f:d5:bb:5d:b4:6a:b1:9c:8a:de:34:da:86:e5:
42:fd:67:59:47:a0:21:ee:90:53:3e:19:7c:16:ee:68:c8:e7:
ec:d6:51:33:10:e7:38:a4:c4:d1:6d:27:75:0f:45:2f:26:a1:
5b:d7:9d:49:73:28:9f:45:2f:fd:44:f3:8e:7c:ed:a0:e8:61:
db:cb:ad:54:6f:16:a8:01:d6:1d:09:2c:1c:0d:89:61:7a:9e:
ce:1e:9e:df:cd:e6:4e:0e:c0:c3:26:d6:41:28:6a:7c:46:2f:
66:0f:66:1e:23:46:f9:1c:a4:0a:5a:75:d2:89:80:7d:d8:bd:
14:9a:88:08:c1:4a:d7:f2:60:cc:e0:71:13:48:b4:ea:e4:e4:
d0:e4:88:b7:d6:74:20:02:91:d3:e6:fb:77:95:70:0b:b4:a5:
51:ed:77:7f:c0:83:c7:1d:c2:b3:13:75:27:76:f2:0a:2b:a1:
b5:03:7c:08:49:01:e6:fd:a8:28:6d:18:74:5a:70:d5:71:27:
ff:0c:74:e1
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIGAKg712G7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTM1NjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxOTZiOTk1NzM2
NGYzZTdlNzUwNWVlYWVjZDZhNDhlMTcyYTBmOWU5MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEArhXW7YB3rXG6/iMzA8cmMn/+C+a7dkFa/cA02iFeErRN
7p55qPSARPoFNAfxLxwhuoFgsgP92xhS9bwzTkqC17bxivqfArLnG0cQjGXX1mvo
Xb6ZCJ904Wvfrz5Cm8P80+VrlotrUq3++xVhK8xOp+fskPKty4yo5LmA+NBE2Esy
EKM5D59IRnIebH4aiydQOAn9cvoiS2UwVGJ88TMVQigWkdDEuK0Ut4mqcG/eolEX
38UCMSLL0qtCRrRb75IDsyWY26szC0+g1Ks9EZ+IGMYiWcQjZvsxHKBTNUcynDcQ
lAnNxiqLpjG22MbZiYQKV2RYpa3xPWJi7SL6nvRmMwIDAQABo4ICfzCCAnswHQYD
VR0OBBYEFBlrmVc2Tz5+dQXurs1qSOFyoPnpMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0L2JkMjdkNS00MWM5LTQ3OTEt
OGQ4ZC03NGU3ZTVlZDRlYmQvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvYmQyN2Q1LTQxYzktNDc5MS04
ZDhkLTc0ZTdlNWVkNGViZC8xL0dXdVpWelpQUG41MUJlNnV6V3BJNFhLZy1lay5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwM63zANBgkqhkiG9w0BAQsFAAOCAQEAq9FiTlLQDZd6PScHYDcdBwy68ZrP
R2HItvNXYEfxsTluvw2j9UFxW0vD8dol/rq1Khv1936w9SV+Bo/Vu120arGcit40
2oblQv1nWUegIe6QUz4ZfBbuaMjn7NZRMxDnOKTE0W0ndQ9FLyahW9edSXMon0Uv
/UTzjnztoOhh28utVG8WqAHWHQksHA2JYXqezh6e383mTg7AwybWQShqfEYvZg9m
HiNG+RykClp10omAfdi9FJqICMFK1/JgzOBxE0i06uTk0OSIt9Z0IAKR0+b7d5Vw
C7SlUe13f8CDxx3CsxN1J3byCiuhtQN8CEkB5v2oKG0YdFpw1XEn/wx04Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:28:57 2024 by rpki-client on console-ams.rpki-client.org