Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M5nZY6y6TodwXRFKCDXbTk9ZAHw.cer
File: M5nZY6y6TodwXRFKCDXbTk9ZAHw.cer (raw, json)
Hash identifier: 7qB+Ocl7MXbBp87myiSX8U/tq9JHxmBTeTNH8eudY3g=
Subject key identifier: 33:99:D9:63:AC:BA:4E:87:70:5D:11:4A:08:35:DB:4E:4F:59:00:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01839B326FF8D0DD2FF61C5CACB84A65F30B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/212b85-f9a9-4319-ae99-e5298dd21dd8/1/M5nZY6y6TodwXRFKCDXbTk9ZAHw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/212b85-f9a9-4319-ae99-e5298dd21dd8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 03 Oct 2022 00:15:17 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 209529
IP: 185.228.220.0/22
IP: 185.248.72.0/22
IP: 2a0e:70c0::/32
IP: 2a0e:a540::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9b:32:6f:f8:d0:dd:2f:f6:1c:5c:ac:b8:4a:65:f3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 3 00:15:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3399d963acba4e87705d114a0835db4e4f59007c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6b:65:fe:ea:17:cd:ee:a1:3a:39:e9:41:c8:
00:14:f0:11:99:98:ec:81:fd:3d:68:7e:25:d4:65:
97:c0:ce:62:1e:88:9c:58:6a:74:a6:c5:fa:23:04:
77:57:a8:17:8b:3e:aa:28:0a:74:00:bb:88:ba:b4:
8f:54:0f:06:67:c9:4f:a5:96:e5:c3:8e:ab:b6:b2:
68:7b:a3:08:8e:aa:95:09:f6:de:ab:b6:2d:38:f4:
ee:bd:91:a2:d6:60:24:e8:d6:39:11:ee:32:ea:4f:
4f:d4:13:f7:d7:13:58:e6:94:91:ab:60:ba:aa:5b:
94:ce:18:5c:99:7a:3c:f6:80:fb:8e:a3:fe:7b:c4:
0b:84:48:42:ab:18:83:0a:84:af:c2:c1:c1:3c:ab:
60:22:b4:9f:a4:49:97:b3:c1:cd:c0:f0:26:6f:e9:
84:c5:06:80:5b:ee:77:0a:4f:dd:dc:23:b5:32:8b:
dc:76:c9:20:ec:a2:26:5a:e2:14:f3:31:b2:c6:96:
fe:04:47:cc:e3:f9:b3:50:68:89:2d:40:37:3c:78:
19:ec:1b:6f:d2:74:c2:82:f8:36:9f:11:0a:66:04:
c3:c8:c3:8d:da:4e:b0:17:90:23:bd:9a:8a:81:cf:
0e:46:b7:f3:99:f1:fd:2d:1c:e7:7c:5a:bd:ba:25:
31:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:99:D9:63:AC:BA:4E:87:70:5D:11:4A:08:35:DB:4E:4F:59:00:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/212b85-f9a9-4319-ae99-e5298dd21dd8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/212b85-f9a9-4319-ae99-e5298dd21dd8/1/M5nZY6y6TodwXRFKCDXbTk9ZAHw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.220.0/22
185.248.72.0/22
IPv6:
2a0e:70c0::/32
2a0e:a540::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209529
Signature Algorithm: sha256WithRSAEncryption
18:95:fa:db:e2:93:6e:26:e4:63:14:a5:be:22:d4:67:41:41:
87:83:c4:42:b8:7b:98:05:59:ec:21:9a:34:d8:a7:d7:9f:56:
3f:d2:ed:86:6e:e4:49:4d:dc:37:c8:0b:72:52:b3:2e:27:c8:
d0:32:14:80:25:81:c8:cc:1b:27:50:6b:64:76:03:af:e8:0f:
21:eb:e5:4c:74:24:ae:a4:33:21:e7:2d:92:84:d5:27:31:92:
b8:e8:df:64:a1:cf:da:1d:cd:a1:af:a9:9d:00:50:92:fe:8d:
96:f6:34:74:2b:43:cb:fb:96:d9:02:45:c0:16:24:da:93:38:
b4:0d:29:70:9b:5a:cc:df:a0:75:1d:94:90:56:89:76:74:15:
b5:bc:60:89:3c:29:6e:87:f5:81:bd:b7:08:a9:d1:45:4e:db:
1b:25:12:5c:47:e3:97:06:72:77:6c:27:fa:f5:7a:ae:ba:d0:
b2:11:21:95:a3:da:88:32:96:80:52:d0:5f:ab:60:51:7d:c3:
78:19:9e:b7:88:0e:73:b3:12:55:f3:18:f2:1b:89:1c:ea:b1:
77:13:53:06:32:57:82:c1:91:2c:0d:1e:33:fc:db:0b:d9:5a:
db:17:e7:4a:b1:59:a5:44:e1:3b:3f:df:f1:d2:f0:c4:73:6a:
dc:c5:1e:9a
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgISAYObMm/40N0v9hxcrLhKZfMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjIxMDAzMDAxNTE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzk5ZDk2M2FjYmE0ZTg3NzA1ZDExNGEwODM1ZGI0ZTRmNTkwMDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Gtl/uoXze6hOjnpQcgAFPARmZjs
gf09aH4l1GWXwM5iHoicWGp0psX6IwR3V6gXiz6qKAp0ALuIurSPVA8GZ8lPpZbl
w46rtrJoe6MIjqqVCfbeq7YtOPTuvZGi1mAk6NY5Ee4y6k9P1BP31xNY5pSRq2C6
qluUzhhcmXo89oD7jqP+e8QLhEhCqxiDCoSvwsHBPKtgIrSfpEmXs8HNwPAmb+mE
xQaAW+53Ck/d3CO1Movcdskg7KImWuIU8zGyxpb+BEfM4/mzUGiJLUA3PHgZ7Btv
0nTCgvg2nxEKZgTDyMON2k6wF5AjvZqKgc8ORrfzmfH9LRznfFq9uiUxawIDAQAB
o4ICvDCCArgwHQYDVR0OBBYEFDOZ2WOsuk6HcF0RSgg1205PWQB8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhLzIxMmI4
NS1mOWE5LTQzMTktYWU5OS1lNTI5OGRkMjFkZDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvMjEyYjg1
LWY5YTktNDMxOS1hZTk5LWU1Mjk4ZGQyMWRkOC8xL001blpZNnk2VG9kd1hSRktD
RFhiVGs5WkFIdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF
BwEHAQH/BCwwKjASBAIAATAMAwQCueTcAwQCufhIMBQEAgACMA4DBQAqDnDAAwUA
Kg6lQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDMnkwDQYJKoZIhvcNAQELBQAD
ggEBABiV+tvik24m5GMUpb4i1GdBQYeDxEK4e5gFWewhmjTYp9efVj/S7YZu5ElN
3DfIC3JSsy4nyNAyFIAlgcjMGydQa2R2A6/oDyHr5Ux0JK6kMyHnLZKE1Scxkrjo
32Shz9odzaGvqZ0AUJL+jZb2NHQrQ8v7ltkCRcAWJNqTOLQNKXCbWszfoHUdlJBW
iXZ0FbW8YIk8KW6H9YG9twip0UVO2xslElxH45cGcndsJ/r1eq660LIRIZWj2ogy
loBS0F+rYFF9w3gZnreIDnOzElXzGPIbiRzqsXcTUwYyV4LBkSwNHjP82wvZWtsX
50qxWaVE4Ts/3/HS8MRzatzFHpo=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:33:03 2025 by rpki-client