Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Gjv-tSH2blckgybP_1W-zv3dD80.cer
File: Gjv-tSH2blckgybP_1W-zv3dD80.cer (raw, json)
Hash identifier: 3xlahBYmfDoLONFOmfx3rJBTs+PGArwwceAFdAmbIlc=
Subject key identifier: 1A:3B:FE:B5:21:F6:6E:57:24:83:26:CF:FF:55:BE:CE:FD:DD:0F:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856DF7C6E6E900ABA57A6DB182B0A41082
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/b71d88-2ead-4838-9955-8369dd531af5/1/Gjv-tSH2blckgybP_1W-zv3dD80.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/b71d88-2ead-4838-9955-8369dd531af5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 15:33:52 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.8.206.0/23
IP: 193.8.220.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f7:c6:e6:e9:00:ab:a5:7a:6d:b1:82:b0:a4:10:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:33:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a3bfeb521f66e57248326cfff55becefddd0fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b0:53:cc:66:d8:1a:7d:61:c1:70:fc:72:7c:
31:07:76:17:8e:89:ec:0b:c8:0e:3e:1d:fb:06:4a:
b3:5e:8c:80:df:8c:4d:62:76:8e:d5:5a:ea:a7:0c:
b9:25:a3:44:37:7e:4d:b9:e3:2b:10:30:67:f1:ea:
f4:50:f5:61:cc:3a:11:02:d8:da:52:b2:c7:d5:8a:
92:0b:a7:08:cd:a2:77:87:86:9e:ef:99:b4:63:73:
66:0b:60:d7:2b:b2:e7:98:52:cd:dd:a3:c6:3b:c1:
09:df:cd:ab:b9:f5:00:1f:a2:55:42:37:8e:ce:0f:
88:ba:a3:fe:3e:70:b5:4e:71:6a:31:19:a9:63:85:
63:85:c8:a6:de:0e:15:1b:d5:68:05:a3:37:79:a1:
d5:f2:9f:0a:b3:46:91:8a:1b:5c:43:66:f4:88:3c:
2e:63:9a:02:ce:9d:72:b4:c4:3d:61:d0:70:24:17:
cd:42:5d:fd:e2:b3:76:76:5d:99:c8:67:42:31:d8:
b2:e6:23:c6:7f:14:0c:35:e4:61:18:cc:25:08:40:
e8:b8:59:0e:f4:55:0a:40:05:a1:12:5d:8e:c7:16:
5c:61:cd:2b:a1:55:a6:0e:c3:bf:68:2e:ff:3c:03:
5c:10:42:17:6f:f9:bc:6f:24:90:73:1d:59:1a:4b:
6a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3B:FE:B5:21:F6:6E:57:24:83:26:CF:FF:55:BE:CE:FD:DD:0F:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b71d88-2ead-4838-9955-8369dd531af5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b71d88-2ead-4838-9955-8369dd531af5/1/Gjv-tSH2blckgybP_1W-zv3dD80.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.206.0/23
193.8.220.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:3b:02:04:58:1d:b7:24:ae:fc:84:f8:b8:e2:ce:d7:1a:b5:
05:dd:e8:f4:08:b6:9a:e1:f5:00:61:f8:2b:20:79:2b:f8:09:
58:3f:d7:81:11:dd:4c:a4:95:3c:4a:c3:0d:df:2a:48:0b:2d:
03:6a:62:71:2d:62:fa:3d:63:da:a2:24:c4:9f:75:fb:45:59:
c2:84:46:a7:3f:b5:35:12:e8:b9:bf:f2:94:2b:b4:70:fb:04:
df:be:6e:af:7a:8d:43:e4:14:9d:1d:fe:85:0b:63:6a:4b:10:
80:ae:d0:ab:1f:d6:73:3b:99:0b:1c:c5:d5:0c:d3:4e:84:bb:
44:3c:03:18:a1:28:c7:80:31:c1:93:6e:3c:0a:ce:f9:51:73:
25:ac:b2:0e:55:3a:b5:00:e1:c1:7b:d7:dd:c7:91:bb:a9:3d:
d6:c2:98:1c:9a:e5:e5:a0:55:1d:d6:5b:2b:27:4a:5c:20:3b:
a2:1d:2d:2b:fc:cc:cc:27:da:6f:47:06:6e:a3:ed:59:22:5a:
b7:42:53:7e:3e:ff:d7:b0:84:8e:45:01:cd:13:98:74:a3:ea:
a0:14:4b:74:99:b3:85:4b:93:8f:d1:74:f2:43:44:88:e8:3f:
fa:5a:4f:16:13:6a:0a:31:83:67:f4:9f:e0:8e:aa:b7:0f:77:
8d:d6:dc:b8
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAYVt98bm6QCrpXptsYKwpBCCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTUzMzUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTNiZmViNTIxZjY2ZTU3MjQ4MzI2Y2ZmZjU1YmVjZWZkZGQwZmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrBTzGbYGn1hwXD8cnwxB3YXjons
C8gOPh37BkqzXoyA34xNYnaO1Vrqpwy5JaNEN35NueMrEDBn8er0UPVhzDoRAtja
UrLH1YqSC6cIzaJ3h4ae75m0Y3NmC2DXK7LnmFLN3aPGO8EJ382rufUAH6JVQjeO
zg+IuqP+PnC1TnFqMRmpY4Vjhcim3g4VG9VoBaM3eaHV8p8Ks0aRihtcQ2b0iDwu
Y5oCzp1ytMQ9YdBwJBfNQl394rN2dl2ZyGdCMdiy5iPGfxQMNeRhGMwlCEDouFkO
9FUKQAWhEl2OxxZcYc0roVWmDsO/aC7/PANcEEIXb/m8bySQcx1ZGktqYQIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFBo7/rUh9m5XJIMmz/9Vvs793Q/NMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1L2I3MWQ4
OC0yZWFkLTQ4MzgtOTk1NS04MzY5ZGQ1MzFhZjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvYjcxZDg4
LTJlYWQtNDgzOC05OTU1LTgzNjlkZDUzMWFmNS8xL0dqdi10U0gyYmxja2d5YlBf
MVctenYzZEQ4MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQBwQjOAwQBwQjcMA0GCSqGSIb3DQEBCwUAA4IB
AQBdOwIEWB23JK78hPi44s7XGrUF3ej0CLaa4fUAYfgrIHkr+AlYP9eBEd1MpJU8
SsMN3ypICy0DamJxLWL6PWPaoiTEn3X7RVnChEanP7U1Eui5v/KUK7Rw+wTfvm6v
eo1D5BSdHf6FC2NqSxCArtCrH9ZzO5kLHMXVDNNOhLtEPAMYoSjHgDHBk248Cs75
UXMlrLIOVTq1AOHBe9fdx5G7qT3WwpgcmuXloFUd1lsrJ0pcIDuiHS0r/MzMJ9pv
RwZuo+1ZIlq3QlN+Pv/XsISORQHNE5h0o+qgFEt0mbOFS5OP0XTyQ0SI6D/6Wk8W
E2oKMYNn9J/gjqq3D3eN1ty4
-----END CERTIFICATE-----
Generated at Tue Apr 22 23:31:26 2025 by rpki-client