Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JbaFqO-41iXHq6rL-l9mGCp65ww.cer
File: JbaFqO-41iXHq6rL-l9mGCp65ww.cer (raw, json)
Hash identifier: +oXsra/Ea8UviZrF5mRE/FpmHd73GJGVj0dEY/KMDfg=
Subject key identifier: 25:B6:85:A8:EF:B8:D6:25:C7:AB:AA:CB:FA:5F:66:18:2A:7A:E7:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A33F83B720
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/f82cc3-00a3-4229-92ff-e5992b4b3fad/1/JbaFqO-41iXHq6rL-l9mGCp65ww.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/f82cc3-00a3-4229-92ff-e5992b4b3fad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:03:40 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 24880
IP: 81.27.128.0/20
IP: 2a00:8980::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 701145265952 (0xa33f83b720)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:03:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25b685a8efb8d625c7abaacbfa5f66182a7ae70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ef:0e:50:2a:22:0e:c5:84:9d:ac:d5:fe:b2:
19:66:2f:82:21:5c:e9:80:c0:74:7d:fc:06:eb:d6:
94:fc:4d:8f:ef:86:87:62:36:08:3c:5d:4e:cd:43:
5d:ab:2c:82:af:d8:86:19:9d:0f:26:7a:26:fb:f3:
86:68:53:a9:a6:8a:27:48:a5:19:b6:0f:5e:eb:c0:
a0:4b:d0:79:2d:c3:3f:0c:7e:5f:d9:df:4d:55:4d:
ac:07:e6:14:3d:c7:e8:50:a5:13:66:7b:9d:c3:94:
75:20:7c:aa:8c:21:c4:37:c0:e3:6a:b7:13:37:5c:
b4:95:21:db:65:76:8a:55:3a:bc:5e:7f:ce:7d:68:
97:85:07:2c:b9:79:c5:cc:42:b2:c2:8b:c9:1c:61:
2b:ca:a0:13:9b:04:0b:4e:6f:d7:95:1b:e3:ae:4d:
6e:cc:59:fd:73:6c:08:92:a9:22:0a:3a:b8:f5:f9:
e9:2a:f5:89:72:68:11:27:c9:2e:ef:e1:99:78:37:
13:fc:a5:f4:cb:10:20:fb:90:a9:d3:74:9c:6b:60:
ae:8f:88:72:37:b5:41:3e:79:f6:48:82:2a:95:92:
cd:ca:c6:4a:20:75:44:52:a1:9d:a6:07:8e:45:ef:
0d:e0:70:79:28:b7:a6:52:30:0d:f5:a2:b0:56:24:
4b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B6:85:A8:EF:B8:D6:25:C7:AB:AA:CB:FA:5F:66:18:2A:7A:E7:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f82cc3-00a3-4229-92ff-e5992b4b3fad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f82cc3-00a3-4229-92ff-e5992b4b3fad/1/JbaFqO-41iXHq6rL-l9mGCp65ww.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.128.0/20
IPv6:
2a00:8980::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24880
Signature Algorithm: sha256WithRSAEncryption
9e:a2:dd:db:d4:eb:aa:cb:b0:86:66:ab:f6:09:22:e0:39:80:
46:2b:48:82:55:1c:78:14:ed:0a:9e:be:ff:f2:0e:f2:64:fd:
3f:ab:ae:29:53:98:90:8b:f7:8f:1d:74:f0:eb:02:21:82:1d:
42:62:6b:8e:2b:7b:10:48:56:30:42:1a:44:78:17:dd:a5:45:
f0:8d:e1:a6:6b:cf:45:b1:a5:50:e1:49:9d:00:01:cc:d0:c4:
30:16:33:4c:d5:9f:a2:7a:2b:3b:a2:1a:c3:6a:44:13:f5:d6:
a4:97:2b:9a:ef:24:0e:90:6f:04:51:74:d0:bc:5e:47:27:d3:
3f:92:c9:3a:aa:5e:46:32:c8:91:e0:1d:73:09:08:ef:ce:c3:
ac:e3:af:21:fe:9c:19:85:93:1f:47:ab:e8:7f:2d:2f:79:4c:
84:b8:f7:74:9a:1c:1f:b4:2a:aa:e4:4c:93:e0:16:6d:7c:d3:
42:ed:b4:dc:7f:e6:45:89:32:d4:54:3a:2f:b2:e4:80:1e:03:
0e:70:11:8e:04:fa:73:35:57:9f:a1:33:3e:cd:fe:c9:b7:96:
74:3c:a5:0e:ca:b8:3a:db:bc:bd:0d:fc:18:a5:47:de:89:b1:
a2:cc:af:54:b3:1d:02:a2:f6:87:37:54:ae:7f:42:eb:21:68:
fd:74:74:71
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIGAKM/g7cgMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDkwMzQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyNWI2ODVhOGVm
YjhkNjI1YzdhYmFhY2JmYTVmNjYxODJhN2FlNzBjMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAxu8OUCoiDsWEnazV/rIZZi+CIVzpgMB0ffwG69aU/E2P
74aHYjYIPF1OzUNdqyyCr9iGGZ0PJnom+/OGaFOppoonSKUZtg9e68CgS9B5LcM/
DH5f2d9NVU2sB+YUPcfoUKUTZnudw5R1IHyqjCHEN8DjarcTN1y0lSHbZXaKVTq8
Xn/OfWiXhQcsuXnFzEKywovJHGEryqATmwQLTm/XlRvjrk1uzFn9c2wIkqkiCjq4
9fnpKvWJcmgRJ8ku7+GZeDcT/KX0yxAg+5Cp03Sca2Cuj4hyN7VBPnn2SIIqlZLN
ysZKIHVEUqGdpgeORe8N4HB5KLemUjAN9aKwViRLlQIDAQABo4ICrjCCAqowHQYD
VR0OBBYEFCW2hajvuNYlx6uqy/pfZhgqeucMMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcyL2Y4MmNjMy0wMGEzLTQyMjkt
OTJmZi1lNTk5MmI0YjNmYWQvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvZjgyY2MzLTAwYTMtNDIyOS05
MmZmLWU1OTkyYjRiM2ZhZC8xL0piYUZxTy00MWlYSHE2ckwtbDltR0NwNjV3dy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQEURuAMA0EAgACMAcDBQAqAImAMBkGCCsGAQUFBwEIAQH/BAowCKAG
MAQCAmEwMA0GCSqGSIb3DQEBCwUAA4IBAQCeot3b1Ouqy7CGZqv2CSLgOYBGK0iC
VRx4FO0Knr7/8g7yZP0/q64pU5iQi/ePHXTw6wIhgh1CYmuOK3sQSFYwQhpEeBfd
pUXwjeGma89FsaVQ4UmdAAHM0MQwFjNM1Z+ieis7ohrDakQT9daklyua7yQOkG8E
UXTQvF5HJ9M/ksk6ql5GMsiR4B1zCQjvzsOs468h/pwZhZMfR6vofy0veUyEuPd0
mhwftCqq5EyT4BZtfNNC7bTcf+ZFiTLUVDovsuSAHgMOcBGOBPpzNVefoTM+zf7J
t5Z0PKUOyrg627y9DfwYpUfeibGizK9Usx0CovaHN1Suf0LrIWj9dHRx
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-fra.rpki-client.org