Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NFdZWlqH0oefQeijuA1f9CzB5mU.cer
File: NFdZWlqH0oefQeijuA1f9CzB5mU.cer (raw, json)
Hash identifier: ycnYPmNVlkWOFviNhMYiEihfS1Fo9IPUZI555MBHjBE=
Subject key identifier: 34:57:59:5A:5A:87:D2:87:9F:41:E8:A3:B8:0D:5F:F4:2C:C1:E6:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9E82A51A83
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/bc26f6-bb0f-4b48-9980-5801c572304b/1/NFdZWlqH0oefQeijuA1f9CzB5mU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/bc26f6-bb0f-4b48-9980-5801c572304b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:03:52 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 195.95.148.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680796691075 (0x9e82a51a83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:03:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3457595a5a87d2879f41e8a3b80d5ff42cc1e665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d9:97:2b:41:56:22:3f:3d:5f:cd:00:96:57:
41:a8:a3:0b:19:81:c5:d6:a9:c1:24:de:b4:36:98:
6e:7c:dd:70:35:af:14:7e:17:54:80:f4:34:29:fe:
9f:36:ae:e2:df:8f:87:c4:71:55:60:6e:11:5a:05:
0f:31:1a:11:b5:f6:ce:02:d3:bb:d6:c1:10:11:dd:
fa:ef:30:ae:8f:df:58:e7:c5:e9:50:c8:e7:f0:87:
ae:3b:51:89:ac:1e:54:05:3b:e5:d7:9d:e1:af:72:
b2:0d:1f:22:9a:b8:79:ac:b9:4d:82:de:9c:b0:e8:
ef:80:61:46:c6:76:54:b5:e7:37:33:4f:a2:98:77:
bc:95:b5:66:80:3d:32:02:2e:78:78:ac:c5:2a:0c:
cd:80:3a:14:1c:92:f0:fc:a8:3c:cb:02:c1:b5:ed:
3c:1a:d6:d0:f7:54:f8:2c:2c:c2:94:1d:b9:a0:83:
60:24:c1:83:ca:60:70:57:13:58:fe:bc:15:14:cb:
d2:f8:35:c5:3d:b1:9d:34:9f:e3:c2:dd:66:2e:24:
3c:4f:8b:cc:d0:ec:4c:45:ff:db:12:af:a1:91:81:
68:b8:d7:61:8d:aa:96:1d:41:4a:4e:b7:fd:4e:37:
ae:f0:c8:78:1b:46:6d:a5:25:7a:17:ad:8e:d3:43:
2b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:57:59:5A:5A:87:D2:87:9F:41:E8:A3:B8:0D:5F:F4:2C:C1:E6:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/bc26f6-bb0f-4b48-9980-5801c572304b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/bc26f6-bb0f-4b48-9980-5801c572304b/1/NFdZWlqH0oefQeijuA1f9CzB5mU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.148.0/24
Signature Algorithm: sha256WithRSAEncryption
52:29:60:72:00:bb:8e:f8:c6:bf:51:9b:88:b3:97:50:0b:29:
fb:da:2a:4f:07:7f:5d:7c:75:5e:09:65:23:44:c5:78:21:ff:
8e:3d:b7:03:9d:21:80:77:46:5b:81:7a:cc:fc:50:ed:46:7f:
36:4d:b6:fb:3c:10:41:be:57:eb:4e:bb:62:46:6a:62:06:9a:
21:0b:7e:49:37:48:5a:ea:7d:de:d0:7e:c8:7d:bd:94:b8:a4:
da:79:66:12:fe:b8:cb:ac:04:be:b4:55:e5:f1:a1:35:2b:75:
11:ca:c6:a0:0a:10:c4:65:1e:6c:01:5e:ce:f4:91:66:6b:71:
33:fe:f0:84:5a:c2:55:c0:6d:12:d6:33:90:83:d5:32:0f:ad:
4c:a6:6b:9f:94:40:ae:49:f1:a6:c8:23:0d:fe:66:c7:d5:8a:
48:fc:22:2d:35:e2:8b:1e:83:f0:d4:c3:0f:bf:f2:e6:ca:c1:
60:0b:2b:df:1b:16:ec:00:8c:68:1f:5f:2a:91:f4:c1:3f:af:
38:72:8b:41:7f:34:59:6e:1e:96:d5:65:36:20:22:51:bb:93:
0c:be:b9:68:0c:87:41:21:63:87:67:1b:61:7c:65:40:af:81:
df:34:58:15:21:bf:20:b6:7f:31:38:8c:f4:65:7e:e1:fe:7d:
67:95:c8:43
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAJ6CpRqDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDUwMzUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzNDU3NTk1YTVh
ODdkMjg3OWY0MWU4YTNiODBkNWZmNDJjYzFlNjY1MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA79mXK0FWIj89X80AlldBqKMLGYHF1qnBJN60NphufN1w
Na8UfhdUgPQ0Kf6fNq7i34+HxHFVYG4RWgUPMRoRtfbOAtO71sEQEd367zCuj99Y
58XpUMjn8IeuO1GJrB5UBTvl153hr3KyDR8imrh5rLlNgt6csOjvgGFGxnZUtec3
M0+imHe8lbVmgD0yAi54eKzFKgzNgDoUHJLw/Kg8ywLBte08GtbQ91T4LCzClB25
oINgJMGDymBwVxNY/rwVFMvS+DXFPbGdNJ/jwt1mLiQ8T4vM0OxMRf/bEq+hkYFo
uNdhjaqWHUFKTrf9Tjeu8Mh4G0ZtpSV6F62O00MrQwIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFDRXWVpah9KHn0Hoo7gNX/QsweZlMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyL2JjMjZmNi1iYjBmLTRiNDgt
OTk4MC01ODAxYzU3MjMwNGIvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvYmMyNmY2LWJiMGYtNGI0OC05
OTgwLTU4MDFjNTcyMzA0Yi8xL05GZFpXbHFIMG9lZlFlaWp1QTFmOUN6QjVtVS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAw1+UMA0GCSqGSIb3DQEBCwUAA4IBAQBSKWByALuO+Ma/UZuIs5dQ
Cyn72ipPB39dfHVeCWUjRMV4If+OPbcDnSGAd0ZbgXrM/FDtRn82Tbb7PBBBvlfr
TrtiRmpiBpohC35JN0ha6n3e0H7Ifb2UuKTaeWYS/rjLrAS+tFXl8aE1K3URysag
ChDEZR5sAV7O9JFma3Ez/vCEWsJVwG0S1jOQg9UyD61MpmuflECuSfGmyCMN/mbH
1YpI/CItNeKLHoPw1MMPv/LmysFgCyvfGxbsAIxoH18qkfTBP684cotBfzRZbh6W
1WU2ICJRu5MMvrloDIdBIWOHZxthfGVAr4HfNFgVIb8gtn8xOIz0ZX7h/n1nlchD
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:12 2024 by rpki-client on console-ams.rpki-client.org