Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JkoZDgt9cSAmq_vn42leEpngwHQ.cer
File: JkoZDgt9cSAmq_vn42leEpngwHQ.cer (raw, json)
Hash identifier: v5UuTXL6LQFnISr5/RnU5+DGfwnstxkEiqHKOn125CM=
Subject key identifier: 26:4A:19:0E:0B:7D:71:20:26:AB:FB:E7:E3:69:5E:12:99:E0:C0:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A0FA6AEC5B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/2434f8-74f1-4b89-a275-1a51561578cf/1/JkoZDgt9cSAmq_vn42leEpngwHQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/2434f8-74f1-4b89-a275-1a51561578cf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:03:32 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 37.148.252.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691396078683 (0xa0fa6aec5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:03:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=264a190e0b7d712026abfbe7e3695e1299e0c074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:94:52:4d:e6:18:66:99:80:72:0b:be:65:73:
9a:d5:ea:56:6f:d8:9c:f9:f1:13:d5:29:3b:e2:54:
16:eb:bb:f6:8a:8c:e2:93:6e:c4:22:e7:af:42:63:
b9:29:9d:9c:9c:46:34:71:52:ee:eb:7c:a4:bb:dc:
99:bb:9b:b4:a9:c9:d2:4d:23:fe:b9:5f:74:3c:75:
86:ad:4f:99:a4:d3:c4:fa:8f:d2:bd:30:8f:1e:7d:
d8:98:ac:6b:95:43:9a:3f:01:af:3a:80:57:fe:28:
3c:cb:89:22:43:65:75:1e:11:35:13:fc:a9:6a:e8:
46:aa:c9:87:94:ab:ba:9e:69:96:32:62:7e:cd:c5:
2b:3b:2f:d6:87:de:e6:bb:08:1d:ba:19:d4:21:80:
cb:38:3a:fd:67:9b:2e:72:86:44:d5:93:a4:6e:d3:
15:92:27:ab:35:b4:0f:1e:0f:f5:5e:a6:82:65:8d:
bf:bb:59:33:dd:03:41:d5:71:f1:ef:e9:88:c3:c8:
57:e2:8a:38:74:d8:6d:94:52:0f:18:13:76:39:e0:
27:e8:16:17:6e:6f:7b:82:09:f0:47:f3:f1:c9:be:
b2:04:58:90:a5:5c:ce:8b:b7:9f:c2:4b:0b:fe:0c:
30:d4:95:a2:d3:9c:8e:4e:b9:e6:56:78:21:fc:5e:
56:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4A:19:0E:0B:7D:71:20:26:AB:FB:E7:E3:69:5E:12:99:E0:C0:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2434f8-74f1-4b89-a275-1a51561578cf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2434f8-74f1-4b89-a275-1a51561578cf/1/JkoZDgt9cSAmq_vn42leEpngwHQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.252.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:c5:0a:c0:f3:44:79:28:72:13:0d:95:90:9a:1e:91:ad:b9:
d9:30:e0:c9:18:6b:7b:dd:9b:b0:9f:7c:15:d4:80:13:d3:34:
ab:2f:a5:69:75:8e:fc:7a:49:e2:fb:f0:bf:f4:d5:bd:cb:3d:
dd:73:d6:9e:cf:d0:8a:ba:06:a3:56:03:c0:28:bf:9a:4a:18:
85:02:a1:f8:50:04:67:6b:81:92:05:af:70:4a:c8:79:c6:9c:
ac:f3:0c:09:0d:8b:fe:8d:c7:10:d1:42:97:61:2e:f1:9f:45:
ce:ce:f9:ff:17:1d:57:91:2a:61:ef:c4:79:7c:0f:6f:0b:14:
1e:d2:39:d9:e9:36:42:4e:f1:cf:b9:e3:0b:dc:ae:7b:37:a3:
f6:6c:0b:0c:54:a3:80:e7:1c:b4:0c:24:c4:63:fb:2c:41:44:
87:9c:b1:db:92:9a:55:7d:59:26:3a:d0:06:6e:46:1e:28:0a:
fa:f4:09:6d:43:10:9c:1c:e2:a6:a6:1f:57:ad:58:75:6f:76:
d8:0c:ed:cb:45:e3:c4:51:8c:65:f4:a2:7f:5b:7c:df:57:21:
38:e7:94:88:ca:7a:d4:8d:89:f1:97:5f:4f:66:86:15:0f:2a:
04:b7:5e:84:0b:4e:fe:c4:b2:1b:4f:64:0f:8e:0e:49:ba:71:
e9:51:1c:c3
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAKD6auxbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDcwMzMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyNjRhMTkwZTBi
N2Q3MTIwMjZhYmZiZTdlMzY5NWUxMjk5ZTBjMDc0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAqJRSTeYYZpmAcgu+ZXOa1epWb9ic+fET1Sk74lQW67v2
iozik27EIuevQmO5KZ2cnEY0cVLu63yku9yZu5u0qcnSTSP+uV90PHWGrU+ZpNPE
+o/SvTCPHn3YmKxrlUOaPwGvOoBX/ig8y4kiQ2V1HhE1E/ypauhGqsmHlKu6nmmW
MmJ+zcUrOy/Wh97muwgduhnUIYDLODr9Z5sucoZE1ZOkbtMVkierNbQPHg/1XqaC
ZY2/u1kz3QNB1XHx7+mIw8hX4oo4dNhtlFIPGBN2OeAn6BYXbm97ggnwR/Pxyb6y
BFiQpVzOi7efwksL/gww1JWi05yOTrnmVngh/F5WQQIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFCZKGQ4LfXEgJqv75+NpXhKZ4MB0MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4LzI0MzRmOC03NGYxLTRiODkt
YTI3NS0xYTUxNTYxNTc4Y2YvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvMjQzNGY4LTc0ZjEtNGI4OS1h
Mjc1LTFhNTE1NjE1NzhjZi8xL0prb1pEZ3Q5Y1NBbXFfdm40MmxlRXBuZ3dIUS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCJZT8MA0GCSqGSIb3DQEBCwUAA4IBAQAcxQrA80R5KHITDZWQmh6R
rbnZMODJGGt73Zuwn3wV1IAT0zSrL6VpdY78ekni+/C/9NW9yz3dc9aez9CKugaj
VgPAKL+aShiFAqH4UARna4GSBa9wSsh5xpys8wwJDYv+jccQ0UKXYS7xn0XOzvn/
Fx1XkSph78R5fA9vCxQe0jnZ6TZCTvHPueML3K57N6P2bAsMVKOA5xy0DCTEY/ss
QUSHnLHbkppVfVkmOtAGbkYeKAr69AltQxCcHOKmph9XrVh1b3bYDO3LRePEUYxl
9KJ/W3zfVyE455SIynrUjYnxl19PZoYVDyoEt16EC07+xLIbT2QPjg5JunHpURzD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:40 2024 by rpki-client on console-fra.rpki-client.org