Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LD0zsdBAK7Y2VOeG7dYh4jeu55w.cer
File: LD0zsdBAK7Y2VOeG7dYh4jeu55w.cer (raw, json)
Hash identifier: L5w3DuzQEp8b2QdcIaLK1MUEHTKwGgBZ/VPk9nwGtkY=
Subject key identifier: 2C:3D:33:B1:D0:40:2B:B6:36:54:E7:86:ED:D6:21:E2:37:AE:E7:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A69DC69EE8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/5ee489-3f16-4899-83fb-0ad8293ff846/1/LD0zsdBAK7Y2VOeG7dYh4jeu55w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/5ee489-3f16-4899-83fb-0ad8293ff846/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:04:23 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 48300
IP: 91.207.206.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 715611610856 (0xa69dc69ee8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c3d33b1d0402bb63654e786edd621e237aee79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:a5:02:34:dd:4f:9f:20:de:a1:0c:6d:e3:
61:bd:34:22:5b:b7:ec:46:b9:ec:59:2b:b4:12:17:
36:7e:1f:a4:d8:33:0d:2e:30:bb:b3:b1:53:40:90:
25:c6:64:fc:bb:0f:2f:57:54:de:de:fa:67:6c:1d:
82:11:ac:a1:42:c3:0b:44:89:90:07:d3:df:44:e5:
a2:f6:14:74:28:2a:43:75:08:34:0e:a8:ef:f9:bb:
fb:c1:9d:60:05:6b:40:5e:22:d7:1d:05:5f:2f:c4:
4f:f2:32:ff:04:fd:51:83:fe:d2:75:e3:15:c0:5a:
15:d7:ad:2c:73:eb:8b:e7:17:9d:a7:cc:d2:6d:06:
33:6a:26:38:82:70:c4:0a:d2:be:10:5c:73:2f:ea:
70:52:a5:1c:62:6a:9c:21:82:d9:59:ea:85:91:14:
dd:91:4f:04:42:68:1b:9b:75:98:4a:bb:6a:11:a2:
e9:2b:18:cc:ce:94:fc:53:cd:82:42:16:a8:70:6c:
2b:88:97:31:66:96:76:bd:7c:9b:a1:cb:d6:79:7a:
07:41:e1:96:0d:3c:17:f0:bd:48:32:0d:6d:91:02:
0f:ad:3f:e7:72:2e:05:b7:71:49:94:81:0b:e1:42:
3a:33:eb:8b:bb:91:b2:95:0d:16:ab:b6:57:78:bf:
b0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3D:33:B1:D0:40:2B:B6:36:54:E7:86:ED:D6:21:E2:37:AE:E7:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5ee489-3f16-4899-83fb-0ad8293ff846/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5ee489-3f16-4899-83fb-0ad8293ff846/1/LD0zsdBAK7Y2VOeG7dYh4jeu55w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.206.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48300
Signature Algorithm: sha256WithRSAEncryption
84:cf:76:4e:be:00:f0:f9:41:fa:9a:1c:1b:f6:8b:08:42:12:
0f:3c:24:63:9d:c5:b6:c5:8c:84:9c:a4:99:2a:55:8a:ae:26:
0f:cb:19:e4:66:30:33:20:b6:ad:37:97:cf:ac:46:84:94:ed:
d2:08:9d:f5:3f:fc:c4:ab:e2:88:07:57:c7:ff:8a:43:02:71:
30:be:99:2e:29:b1:43:80:75:f5:06:cd:bd:41:01:c5:5a:42:
3b:1e:65:43:59:58:69:c2:21:54:d6:90:20:88:74:78:31:22:
fb:1a:e7:a4:c9:56:9d:82:54:42:0f:58:37:f3:87:87:cd:56:
51:ca:3c:5d:33:56:1a:d2:79:97:77:67:ab:fa:89:ba:6e:f8:
b3:d6:1e:4b:ea:6c:48:70:73:ee:88:f8:3f:12:76:7f:5e:54:
b2:86:0b:0b:8c:a3:2f:97:77:d6:13:66:cc:cd:d1:3e:85:c5:
75:be:f8:94:f4:92:83:37:21:77:29:f6:23:37:9b:8c:73:ad:
b0:32:ea:50:c4:c6:82:d6:de:e4:bf:dd:b7:4e:b8:b7:38:38:
b5:51:58:93:fa:ec:63:4b:85:af:3e:96:a3:90:8e:55:25:3a:
24:c9:4c:d6:6a:6d:07:57:53:7c:08:cb:4a:29:cb:04:05:df:
a8:b7:1e:d5
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgIGAKadxp7oMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTIwNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyYzNkMzNiMWQw
NDAyYmI2MzY1NGU3ODZlZGQ2MjFlMjM3YWVlNzljMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAsialAjTdT58g3qEMbeNhvTQiW7fsRrnsWSu0Ehc2fh+k
2DMNLjC7s7FTQJAlxmT8uw8vV1Te3vpnbB2CEayhQsMLRImQB9PfROWi9hR0KCpD
dQg0Dqjv+bv7wZ1gBWtAXiLXHQVfL8RP8jL/BP1Rg/7SdeMVwFoV160sc+uL5xed
p8zSbQYzaiY4gnDECtK+EFxzL+pwUqUcYmqcIYLZWeqFkRTdkU8EQmgbm3WYSrtq
EaLpKxjMzpT8U82CQhaocGwriJcxZpZ2vXybocvWeXoHQeGWDTwX8L1IMg1tkQIP
rT/nci4Ft3FJlIEL4UI6M+uLu5GylQ0Wq7ZXeL+wAQIDAQABo4ICoDCCApwwHQYD
VR0OBBYEFCw9M7HQQCu2NlTnhu3WIeI3ruecMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ExLzVlZTQ4OS0zZjE2LTQ4OTkt
ODNmYi0wYWQ4MjkzZmY4NDYvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEvNWVlNDg5LTNmMTYtNDg5OS04
M2ZiLTBhZDgyOTNmZjg0Ni8xL0xEMHpzZEJBSzdZMlZPZUc3ZFloNGpldTU1dy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBW8/OMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC8rDANBgkqhkiG
9w0BAQsFAAOCAQEAhM92Tr4A8PlB+pocG/aLCEISDzwkY53FtsWMhJykmSpViq4m
D8sZ5GYwMyC2rTeXz6xGhJTt0gid9T/8xKviiAdXx/+KQwJxML6ZLimxQ4B19QbN
vUEBxVpCOx5lQ1lYacIhVNaQIIh0eDEi+xrnpMlWnYJUQg9YN/OHh81WUco8XTNW
GtJ5l3dnq/qJum74s9YeS+psSHBz7oj4PxJ2f15UsoYLC4yjL5d31hNmzM3RPoXF
db74lPSSgzchdyn2IzebjHOtsDLqUMTGgtbe5L/dt064tzg4tVFYk/rsY0uFrz6W
o5COVSU6JMlM1mptB1dTfAjLSinLBAXfqLce1Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:31 2024 by rpki-client on console-ams.rpki-client.org