Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GkkdyBZZNJjQ7PRDulzDsK7_cYU.cer
File: GkkdyBZZNJjQ7PRDulzDsK7_cYU.cer (raw, json)
Hash identifier: 13n4w4nknEdKieqe8D7DCMBaQ+UcQNdS1aM2nsKu4JI=
Subject key identifier: 1A:49:1D:C8:16:59:34:98:D0:EC:F4:43:BA:5C:C3:B0:AE:FF:71:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A54D6C60A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/bd2fdd-52d0-4b75-a2a1-d156490c16a0/1/GkkdyBZZNJjQ7PRDulzDsK7_cYU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/bd2fdd-52d0-4b75-a2a1-d156490c16a0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:00:13 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 212949
IP: 89.33.108.0/22
IP: 167.160.6.0 -- 167.160.9.255
IP: 167.160.22.0 -- 167.160.25.255
IP: 185.19.24.0/22
IP: 217.61.88.0/21
IP: 2a04:e80::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 709968552099 (0xa54d6c60a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:00:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a491dc816593498d0ecf443ba5cc3b0aeff7185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:7f:50:fb:43:16:b2:d0:f8:dd:b7:2d:08:
c9:59:5e:a0:5d:77:57:9d:12:bd:d1:de:1b:d5:e2:
d5:b2:de:78:0a:cc:b9:77:66:94:a2:e3:08:28:cd:
6a:86:64:e4:35:43:bf:be:8d:f1:f8:ba:1e:f7:52:
46:2e:bc:94:22:8c:5a:1a:ef:66:b4:b2:fe:16:c4:
a3:08:8c:b3:af:2d:d5:d1:c6:90:d7:ef:21:db:71:
12:2c:33:e8:46:db:2f:ba:6f:23:28:36:9f:57:f2:
2a:4e:71:89:c9:fe:b5:69:6c:75:d7:31:1c:12:fd:
48:fa:93:cc:37:ce:f2:d2:54:bd:34:07:6e:a9:46:
90:8a:9e:3a:18:39:b9:df:d0:b1:a6:e5:0b:b1:c2:
61:be:46:7d:8b:8f:1c:85:94:43:2f:43:25:9e:4f:
28:81:c1:16:a4:74:aa:c0:81:4e:94:01:57:b2:8a:
a2:79:5a:ee:54:cf:0a:7f:e4:20:4d:99:36:3a:0e:
1b:11:5c:30:00:94:70:7c:af:e3:0b:22:a4:b9:8f:
49:4b:32:ba:77:a7:84:50:61:4d:9b:46:d4:1c:6a:
24:b8:fb:1f:0b:d6:d7:c5:62:35:53:0f:40:4a:14:
5a:e9:ce:31:a3:13:a3:7d:70:7e:28:d6:3c:7e:16:
2a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:49:1D:C8:16:59:34:98:D0:EC:F4:43:BA:5C:C3:B0:AE:FF:71:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bd2fdd-52d0-4b75-a2a1-d156490c16a0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bd2fdd-52d0-4b75-a2a1-d156490c16a0/1/GkkdyBZZNJjQ7PRDulzDsK7_cYU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.108.0/22
167.160.6.0-167.160.9.255
167.160.22.0-167.160.25.255
185.19.24.0/22
217.61.88.0/21
IPv6:
2a04:e80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212949
Signature Algorithm: sha256WithRSAEncryption
9a:7a:1f:32:74:99:9f:28:bb:93:c5:b7:19:a1:bd:ad:43:57:
c3:bf:9c:e9:a7:c1:d3:22:d6:52:7b:4d:01:db:b0:fb:61:25:
71:8b:13:94:4f:07:60:a3:e5:0c:48:d7:f4:81:36:18:cf:f1:
ff:46:a4:36:af:e7:f4:e3:66:c1:f8:b5:73:1b:47:02:55:43:
8d:6d:08:9a:fe:fb:19:ed:c8:79:41:56:05:3e:47:2f:af:7e:
32:04:0b:7c:c0:7f:ea:22:77:40:19:df:93:09:d6:d9:7a:d9:
c3:d3:7f:ee:60:90:d4:23:7e:7d:fd:47:4b:15:87:3e:86:15:
1c:04:ab:db:40:b1:5f:79:f1:f4:1d:97:bc:b9:69:02:2a:10:
e5:f8:26:4d:66:8c:02:9d:62:bb:a5:d6:f9:d5:23:6d:25:d5:
ec:02:04:17:ef:91:f7:51:de:07:52:2a:03:4c:e7:35:66:fd:
fa:af:14:90:41:b3:1c:94:22:de:b5:b8:88:de:8a:29:4f:b4:
de:a6:de:ac:dd:0c:0e:50:89:19:44:a4:90:b1:da:2c:d3:43:
25:52:79:71:25:c2:0f:0d:7e:34:a3:fc:fc:bc:8a:1b:83:78:
19:96:e3:fe:9e:dd:4d:b7:c6:4e:24:e1:63:41:a1:99:27:a3:
6b:84:26:a1
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIGAKVNbGCjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTEwMDEzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxYTQ5MWRjODE2
NTkzNDk4ZDBlY2Y0NDNiYTVjYzNiMGFlZmY3MTg1MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAryN/UPtDFrLQ+N23LQjJWV6gXXdXnRK90d4b1eLVst54
Csy5d2aUouMIKM1qhmTkNUO/vo3x+Loe91JGLryUIoxaGu9mtLL+FsSjCIyzry3V
0caQ1+8h23ESLDPoRtsvum8jKDafV/IqTnGJyf61aWx11zEcEv1I+pPMN87y0lS9
NAduqUaQip46GDm539CxpuULscJhvkZ9i48chZRDL0Mlnk8ogcEWpHSqwIFOlAFX
soqieVruVM8Kf+QgTZk2Og4bEVwwAJRwfK/jCyKkuY9JSzK6d6eEUGFNm0bUHGok
uPsfC9bXxWI1Uw9AShRa6c4xoxOjfXB+KNY8fhYqMQIDAQABo4IC1zCCAtMwHQYD
VR0OBBYEFBpJHcgWWTSY0Oz0Q7pcw7Cu/3GFMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0L2JkMmZkZC01MmQwLTRiNzUt
YTJhMS1kMTU2NDkwYzE2YTAvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvYmQyZmRkLTUyZDAtNGI3NS1h
MmExLWQxNTY0OTBjMTZhMC8xL0dra2R5QlpaTkpqUTdQUkR1bHpEc0s3X2NZVS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTA0
BAIAATAuAwQCWSFsMAwDBAGnoAYDBAGnoAgwDAMEAaegFgMEAaegGAMEArkTGAME
A9k9WDANBAIAAjAHAwUDKgQOgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDP9Uw
DQYJKoZIhvcNAQELBQADggEBAJp6HzJ0mZ8ou5PFtxmhva1DV8O/nOmnwdMi1lJ7
TQHbsPthJXGLE5RPB2Cj5QxI1/SBNhjP8f9GpDav5/TjZsH4tXMbRwJVQ41tCJr+
+xntyHlBVgU+Ry+vfjIEC3zAf+oid0AZ35MJ1tl62cPTf+5gkNQjfn39R0sVhz6G
FRwEq9tAsV958fQdl7y5aQIqEOX4Jk1mjAKdYrul1vnVI20l1ewCBBfvkfdR3gdS
KgNM5zVm/fqvFJBBsxyUIt61uIjeiilPtN6m3qzdDA5QiRlEpJCx2izTQyVSeXEl
wg8NfjSj/Py8ihuDeBmW4/6e3U23xk4k4WNBoZkno2uEJqE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:29:02 2024 by rpki-client on console-ams.rpki-client.org