Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HGIiweP1JpLpcbTN1V_ygwpfZPg.cer
File: HGIiweP1JpLpcbTN1V_ygwpfZPg.cer (raw, json)
Hash identifier: qvtQKq8O94HOaw773HrUXMNUYdkxfTHYyFmp+upAwGE=
Subject key identifier: 1C:62:22:C1:E3:F5:26:92:E9:71:B4:CD:D5:5F:F2:83:0A:5F:64:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 98EAE265F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/56096d-61e6-4bc4-ba59-3ba7acee90e4/1/HGIiweP1JpLpcbTN1V_ygwpfZPg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/56096d-61e6-4bc4-ba59-3ba7acee90e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:51:51 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 176.119.203.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656775734774 (0x98eae265f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:51:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c6222c1e3f52692e971b4cdd55ff2830a5f64f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:76:8a:2d:0b:7a:1f:24:4a:9d:ff:24:cb:e9:
dd:14:23:47:07:9a:db:84:b4:70:5c:8f:23:25:4f:
5d:00:ce:3c:ff:2c:a0:2a:12:18:56:55:70:e2:63:
ef:9b:3e:98:69:b3:82:ae:9e:b2:7f:65:be:9a:86:
6e:91:26:ad:18:59:b9:6e:6d:ea:4d:79:96:8f:08:
44:15:ca:99:a4:48:a4:b2:a1:bd:9a:a4:c7:71:1d:
1b:66:79:d5:45:7d:03:2b:ed:2f:c4:13:61:a6:39:
ba:4e:ed:90:a3:6c:ee:9c:ab:55:fd:95:0b:84:4a:
0b:c9:ec:a0:2d:c0:0b:e1:5a:4b:71:79:7c:e8:57:
1c:ff:64:fc:5f:53:8d:ff:8b:52:64:25:53:61:d5:
ea:1f:35:e8:6a:5e:52:9a:92:89:1a:a3:78:95:68:
9f:d8:d9:29:4f:98:03:52:80:e5:2c:c2:78:d4:56:
42:1d:10:8c:69:87:f2:0d:dc:57:3d:45:8f:c7:72:
df:2d:55:85:02:0e:0a:cc:0d:14:11:e8:67:36:37:
fa:72:a2:61:3d:81:a6:18:93:01:46:75:c8:27:c2:
53:b4:e9:95:bf:90:b4:97:a8:be:c4:28:23:2e:fb:
00:df:15:8d:51:3a:a2:82:71:01:45:d2:7c:2e:0d:
d6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:62:22:C1:E3:F5:26:92:E9:71:B4:CD:D5:5F:F2:83:0A:5F:64:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/56096d-61e6-4bc4-ba59-3ba7acee90e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/56096d-61e6-4bc4-ba59-3ba7acee90e4/1/HGIiweP1JpLpcbTN1V_ygwpfZPg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.203.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e7:64:67:3d:cd:21:2b:4f:8c:7b:ff:f5:a7:0f:6c:a1:7b:
75:e0:97:37:9e:1c:ce:dc:88:0e:78:59:1e:fd:81:70:6b:b6:
91:c0:78:33:46:81:2c:09:c8:9d:84:b2:19:21:47:97:3b:d3:
0b:87:cd:74:1e:86:dd:27:b3:83:92:89:e3:58:9a:ef:b5:98:
01:64:de:8a:15:e9:3a:04:49:2f:1f:1b:f2:33:6d:f1:4b:ce:
be:83:ae:8f:d2:30:c8:cb:3d:3e:05:83:83:19:83:90:da:dc:
52:f3:6c:b2:4c:01:61:d0:d9:ba:c9:e9:45:1b:04:bb:07:8f:
2b:25:69:bd:e8:14:bc:5b:71:55:3e:ea:ad:9d:05:88:f2:10:
ba:2b:4d:7f:e6:39:7b:68:aa:36:a4:04:43:fe:66:1d:2d:19:
4b:7c:8b:43:b9:f8:22:ba:97:3b:29:43:d3:0c:a6:79:e4:27:
c3:cb:03:8f:f2:36:52:30:49:e2:c9:57:7a:08:a5:f7:60:14:
65:40:76:59:db:fe:bb:72:ad:d5:37:88:ee:ff:68:ac:0c:0c:
81:d2:f2:f0:5c:85:c1:b3:b0:55:a2:6f:99:6a:3d:79:69:8e:
e2:31:69:df:09:6a:18:11:47:ea:45:59:4f:95:c9:ca:a2:e2:
6c:66:76:7c
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAJjq4mX2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDA1MTUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxYzYyMjJjMWUz
ZjUyNjkyZTk3MWI0Y2RkNTVmZjI4MzBhNWY2NGY4MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAyHaKLQt6HyRKnf8ky+ndFCNHB5rbhLRwXI8jJU9dAM48
/yygKhIYVlVw4mPvmz6YabOCrp6yf2W+moZukSatGFm5bm3qTXmWjwhEFcqZpEik
sqG9mqTHcR0bZnnVRX0DK+0vxBNhpjm6Tu2Qo2zunKtV/ZULhEoLyeygLcAL4VpL
cXl86Fcc/2T8X1ON/4tSZCVTYdXqHzXoal5SmpKJGqN4lWif2NkpT5gDUoDlLMJ4
1FZCHRCMaYfyDdxXPUWPx3LfLVWFAg4KzA0UEehnNjf6cqJhPYGmGJMBRnXIJ8JT
tOmVv5C0l6i+xCgjLvsA3xWNUTqignEBRdJ8Lg3WBQIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFBxiIsHj9SaS6XG0zdVf8oMKX2T4MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4LzU2MDk2ZC02MWU2LTRiYzQt
YmE1OS0zYmE3YWNlZTkwZTQvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvNTYwOTZkLTYxZTYtNGJjNC1i
YTU5LTNiYTdhY2VlOTBlNC8xL0hHSWl3ZVAxSnBMcGNiVE4xVl95Z3dwZlpQZy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAsHfLMA0GCSqGSIb3DQEBCwUAA4IBAQCO52RnPc0hK0+Me//1pw9s
oXt14Jc3nhzO3IgOeFke/YFwa7aRwHgzRoEsCcidhLIZIUeXO9MLh810HobdJ7OD
konjWJrvtZgBZN6KFek6BEkvHxvyM23xS86+g66P0jDIyz0+BYODGYOQ2txS82yy
TAFh0Nm6yelFGwS7B48rJWm96BS8W3FVPuqtnQWI8hC6K01/5jl7aKo2pARD/mYd
LRlLfItDufgiupc7KUPTDKZ55CfDywOP8jZSMEniyVd6CKX3YBRlQHZZ2/67cq3V
N4ju/2isDAyB0vLwXIXBs7BVom+Zaj15aY7iMWnfCWoYEUfqRVlPlcnKouJsZnZ8
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:29:14 2024 by rpki-client on console-ams.rpki-client.org