Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ntv_aDcOdV2McnK90NAzR06pHl0.cer
File: Ntv_aDcOdV2McnK90NAzR06pHl0.cer (raw, json)
Hash identifier: 5+mK+9vANTf3vTwjt1CcHsCO7kbnxh91UTNfOS26UCI=
Subject key identifier: 36:DB:FF:68:37:0E:75:5D:8C:72:72:BD:D0:D0:33:47:4E:A9:1E:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A576969678
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/53a0bf-18d5-46f9-bb1f-ae2cf2a96e29/1/Ntv_aDcOdV2McnK90NAzR06pHl0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/53a0bf-18d5-46f9-bb1f-ae2cf2a96e29/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:02:17 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 212.102.110.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 710659184248 (0xa576969678)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:02:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36dbff68370e755d8c7272bdd0d033474ea91e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:45:0e:f7:cc:8e:d5:ed:ee:81:04:e2:61:
a4:f8:d4:56:07:fd:e1:9f:c6:33:d5:2e:59:da:fa:
06:57:05:0d:30:02:05:33:c9:7b:2c:f0:fb:7e:00:
a2:a7:8b:46:f8:19:72:3b:18:81:c3:44:a0:92:bb:
29:1c:3a:ec:08:12:54:63:01:b8:2e:e8:d4:7c:b8:
a2:de:3a:de:ef:1c:39:1d:3b:4a:c2:83:04:9b:65:
fd:60:69:bd:63:d5:4a:0d:7b:67:b4:43:bf:27:d4:
48:bd:e6:ca:f4:cc:02:55:bc:b2:6d:16:1a:54:71:
37:09:fc:d1:47:59:55:e5:91:fd:4b:1a:bf:1f:8d:
af:17:cc:fe:b4:6f:e8:55:f0:3d:b7:a9:c0:de:7f:
28:a8:b9:d2:a8:c0:e8:77:d5:39:d6:6d:7a:0c:aa:
be:20:ab:86:4d:e4:2f:5e:d6:bb:68:f2:9f:cd:18:
9c:6b:19:90:45:d0:a7:f0:69:04:d1:b7:db:dc:75:
d5:30:ff:cd:0d:cb:29:00:04:d1:13:d5:99:fc:dc:
1d:e5:0c:9a:e5:83:3a:97:09:c4:5c:e3:86:df:1b:
41:35:36:72:23:60:18:d9:41:4a:95:ec:4a:3a:b1:
9a:92:d3:7d:79:37:69:ec:56:e1:19:bb:35:9a:26:
20:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DB:FF:68:37:0E:75:5D:8C:72:72:BD:D0:D0:33:47:4E:A9:1E:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/53a0bf-18d5-46f9-bb1f-ae2cf2a96e29/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/53a0bf-18d5-46f9-bb1f-ae2cf2a96e29/1/Ntv_aDcOdV2McnK90NAzR06pHl0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.110.0/24
Signature Algorithm: sha256WithRSAEncryption
44:b1:78:c8:30:5c:75:18:02:aa:6d:27:f6:2d:f6:c4:12:2c:
f7:c1:db:90:73:e0:23:c0:fa:7b:f5:a8:6f:51:6e:78:cb:23:
fa:e4:24:58:ed:4e:82:72:37:b6:e4:99:3a:af:f1:b8:f8:8a:
bb:c5:1c:9f:75:9c:b5:48:03:12:0f:06:e2:41:a6:49:48:07:
d2:27:15:11:fb:b4:67:e2:51:7c:0c:61:6d:26:a1:23:c4:c7:
5e:01:ef:5d:4d:d2:26:f9:90:32:64:e9:d9:be:80:ae:0e:c1:
2c:e0:8b:95:e7:5d:6a:c4:73:4e:8d:d6:05:e4:3d:30:b4:a9:
8e:b1:3c:0d:34:87:50:e8:fa:3c:f5:d0:f6:4c:32:37:d3:bd:
5c:08:18:0c:3e:8f:61:54:c5:b6:eb:42:5c:20:b4:a2:85:88:
bf:0c:3a:21:4d:b9:54:f2:b8:a6:ea:35:d5:fb:7f:6f:1a:37:
b8:bf:06:19:51:fd:cb:61:b7:0d:79:9e:2b:04:fd:39:03:cd:
45:76:09:d6:93:94:0d:8c:8c:f4:2b:e6:ee:37:81:34:93:58:
c3:a1:a5:56:b2:34:66:85:d8:4d:06:b9:76:98:04:2f:ea:23:
af:3d:a0:58:4f:a3:39:c3:32:f3:a8:fb:c5:c8:cc:b3:ae:44:
02:15:9b:13
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAKV2lpZ4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTEwMjE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzNmRiZmY2ODM3
MGU3NTVkOGM3MjcyYmRkMGQwMzM0NzRlYTkxZTVkMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEApoRFDvfMjtXt7oEE4mGk+NRWB/3hn8Yz1S5Z2voGVwUN
MAIFM8l7LPD7fgCip4tG+BlyOxiBw0SgkrspHDrsCBJUYwG4LujUfLii3jre7xw5
HTtKwoMEm2X9YGm9Y9VKDXtntEO/J9RIvebK9MwCVbyybRYaVHE3CfzRR1lV5ZH9
Sxq/H42vF8z+tG/oVfA9t6nA3n8oqLnSqMDod9U51m16DKq+IKuGTeQvXta7aPKf
zRicaxmQRdCn8GkE0bfb3HXVMP/NDcspAATRE9WZ/Nwd5Qya5YM6lwnEXOOG3xtB
NTZyI2AY2UFKlexKOrGaktN9eTdp7FbhGbs1miYgHwIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFDbb/2g3DnVdjHJyvdDQM0dOqR5dMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyLzUzYTBiZi0xOGQ1LTQ2Zjkt
YmIxZi1hZTJjZjJhOTZlMjkvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvNTNhMGJmLTE4ZDUtNDZmOS1i
YjFmLWFlMmNmMmE5NmUyOS8xL050dl9hRGNPZFYyTWNuSzkwTkF6UjA2cEhsMC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA1GZuMA0GCSqGSIb3DQEBCwUAA4IBAQBEsXjIMFx1GAKqbSf2LfbE
Eiz3wduQc+AjwPp79ahvUW54yyP65CRY7U6Ccje25Jk6r/G4+Iq7xRyfdZy1SAMS
DwbiQaZJSAfSJxUR+7Rn4lF8DGFtJqEjxMdeAe9dTdIm+ZAyZOnZvoCuDsEs4IuV
511qxHNOjdYF5D0wtKmOsTwNNIdQ6Po89dD2TDI3071cCBgMPo9hVMW260JcILSi
hYi/DDohTblU8rim6jXV+39vGje4vwYZUf3LYbcNeZ4rBP05A81FdgnWk5QNjIz0
K+buN4E0k1jDoaVWsjRmhdhNBrl2mAQv6iOvPaBYT6M5wzLzqPvFyMyzrkQCFZsT
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:25 2024 by rpki-client on console-ams.rpki-client.org