Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LaRwadRDnVgXcPKGUOOJbLcNiyE.cer
File: LaRwadRDnVgXcPKGUOOJbLcNiyE.cer (raw, json)
Hash identifier: eJzuGSLsTd+oUVSBmylrGSfWTQTwBhdrcNHc7s6SL3Y=
Subject key identifier: 2D:A4:70:69:D4:43:9D:58:17:70:F2:86:50:E3:89:6C:B7:0D:8B:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A8AD63B95D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/e77172-2f2c-4ee5-97b8-2ade36e94e7a/1/LaRwadRDnVgXcPKGUOOJbLcNiyE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/e77172-2f2c-4ee5-97b8-2ade36e94e7a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:02:32 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 197209
IP: 91.209.181.0/24
IP: 91.209.251.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 724463499613 (0xa8ad63b95d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:02:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2da47069d4439d581770f28650e3896cb70d8b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c8:48:b2:10:a2:99:cf:cb:46:55:d5:a7:e1:
dd:28:d9:cc:8c:fa:45:53:e7:d6:e3:90:42:a7:82:
2c:35:73:f4:0b:b1:d4:18:cf:64:ca:ce:47:52:5d:
b6:d1:b4:68:fa:1f:5e:90:8d:e7:11:0b:9b:a8:62:
e7:52:58:03:24:4c:e8:74:bb:86:f0:ad:9a:92:a9:
11:c1:28:c2:46:e5:99:4d:5c:ae:2c:1a:88:0d:9b:
64:1a:05:98:35:68:55:74:2f:70:48:6e:e3:36:d9:
db:ae:41:d3:8c:2f:4c:c7:ac:3b:ee:8c:fa:e5:de:
b5:ea:1f:14:ee:56:b1:7c:94:ad:b6:fe:dd:43:4a:
d4:3e:7c:4a:52:66:fc:7e:87:14:24:57:6a:46:73:
a9:8c:a2:b4:38:6e:9a:4f:78:67:3d:f8:9f:ff:8a:
66:a5:12:ea:ae:92:35:43:af:1d:16:80:f5:58:da:
f6:99:18:9a:f1:77:38:20:a1:de:d0:73:a3:88:0b:
46:af:3e:33:a3:d4:96:33:15:c8:49:0e:3e:23:d8:
2c:92:99:f2:02:56:9d:e3:61:41:51:ea:5e:31:c8:
e8:61:ca:ca:cf:c7:f1:2e:89:bd:c6:da:1f:af:45:
5d:3d:af:c3:e6:1b:66:41:98:aa:ac:ed:d4:ec:b6:
17:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A4:70:69:D4:43:9D:58:17:70:F2:86:50:E3:89:6C:B7:0D:8B:21
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e77172-2f2c-4ee5-97b8-2ade36e94e7a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e77172-2f2c-4ee5-97b8-2ade36e94e7a/1/LaRwadRDnVgXcPKGUOOJbLcNiyE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.181.0/24
91.209.251.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197209
Signature Algorithm: sha256WithRSAEncryption
a6:8a:50:61:c7:57:7e:3e:5f:7f:a9:d5:67:e5:03:a3:34:e0:
2f:db:15:e0:cd:d1:01:90:81:30:89:70:9f:2a:8a:45:df:e7:
3a:3c:e9:b6:a3:d3:65:be:4d:37:4d:19:ce:dd:8e:0d:60:04:
fc:08:c0:68:06:3c:6c:7f:de:38:77:3d:66:cd:76:9c:d9:d4:
a0:d0:2c:e2:a6:47:fa:0b:ed:36:36:fd:7f:0f:9a:b2:02:ef:
0a:0b:da:65:ea:39:3c:bd:a9:f9:b0:4c:57:47:7e:14:68:ef:
bc:b7:c9:aa:e7:4b:b5:31:b4:a3:8a:63:43:ee:6b:99:a8:aa:
88:65:88:d7:6f:c0:06:27:59:6b:35:a3:75:11:45:e5:80:3d:
ff:1c:9a:ff:e2:7d:98:f2:c3:ce:8b:eb:f9:27:65:13:6a:4e:
c1:ea:08:bd:52:f6:71:3d:95:4d:8a:1a:eb:ed:11:e9:fa:ba:
bb:56:1c:62:04:ba:9b:d6:27:79:90:cb:f1:25:68:22:69:73:
68:91:87:06:8d:57:45:80:34:d2:f6:10:a2:44:db:d7:40:98:
3f:84:0c:52:8a:5b:2a:cc:b6:35:4b:ea:b1:29:a8:99:7f:5c:
4f:91:55:e9:15:a9:5d:c1:df:bd:b3:2b:a6:5d:13:b7:dd:61:
11:2b:fa:ae
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIGAKitY7ldMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTQwMjMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyZGE0NzA2OWQ0
NDM5ZDU4MTc3MGYyODY1MGUzODk2Y2I3MGQ4YjIxMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAmMhIshCimc/LRlXVp+HdKNnMjPpFU+fW45BCp4IsNXP0
C7HUGM9kys5HUl220bRo+h9ekI3nEQubqGLnUlgDJEzodLuG8K2akqkRwSjCRuWZ
TVyuLBqIDZtkGgWYNWhVdC9wSG7jNtnbrkHTjC9Mx6w77oz65d616h8U7laxfJSt
tv7dQ0rUPnxKUmb8focUJFdqRnOpjKK0OG6aT3hnPfif/4pmpRLqrpI1Q68dFoD1
WNr2mRia8Xc4IKHe0HOjiAtGrz4zo9SWMxXISQ4+I9gskpnyAlad42FBUepeMcjo
YcrKz8fxLom9xtofr0VdPa/D5htmQZiqrO3U7LYXsQIDAQABo4ICpjCCAqIwHQYD
VR0OBBYEFC2kcGnUQ51YF3DyhlDjiWy3DYshMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1L2U3NzE3Mi0yZjJjLTRlZTUt
OTdiOC0yYWRlMzZlOTRlN2EvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvZTc3MTcyLTJmMmMtNGVlNS05
N2I4LTJhZGUzNmU5NGU3YS8xL0xhUndhZFJEblZnWGNQS0dVT09KYkxjTml5RS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAW9G1AwQAW9H7MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMCWTAN
BgkqhkiG9w0BAQsFAAOCAQEApopQYcdXfj5ff6nVZ+UDozTgL9sV4M3RAZCBMIlw
nyqKRd/nOjzptqPTZb5NN00Zzt2ODWAE/AjAaAY8bH/eOHc9Zs12nNnUoNAs4qZH
+gvtNjb9fw+asgLvCgvaZeo5PL2p+bBMV0d+FGjvvLfJqudLtTG0o4pjQ+5rmaiq
iGWI12/ABidZazWjdRFF5YA9/xya/+J9mPLDzovr+SdlE2pOweoIvVL2cT2VTYoa
6+0R6fq6u1YcYgS6m9YneZDL8SVoImlzaJGHBo1XRYA00vYQokTb10CYP4QMUopb
Ksy2NUvqsSmomX9cT5FV6RWpXcHfvbMrpl0Tt91hESv6rg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:40 2024 by rpki-client on console-ams.rpki-client.org