Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NxseyTN8mkXNUZxOiWZepYNGvy4.cer
File: NxseyTN8mkXNUZxOiWZepYNGvy4.cer (raw, json)
Hash identifier: zknpuz7DHjw/RjVXN7ZHVvHvmrFeZYvsXcWC7u89a1k=
Subject key identifier: 37:1B:1E:C9:33:7C:9A:45:CD:51:9C:4E:89:66:5E:A5:83:46:BF:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9BD28DCA2E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/af7171-5f7a-42c4-a418-23774fa4b1af/1/NxseyTN8mkXNUZxOiWZepYNGvy4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/af7171-5f7a-42c4-a418-23774fa4b1af/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:57:21 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 204083
IP: 185.115.56.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669252438574 (0x9bd28dca2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:57:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=371b1ec9337c9a45cd519c4e89665ea58346bf2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:47:7e:86:7e:03:39:8a:20:2f:20:d2:3b:ee:
ed:c9:18:9f:1d:aa:30:6d:da:ce:29:f0:c4:43:50:
bb:5f:20:84:8a:92:ef:ec:c9:08:89:13:8a:54:d8:
b1:fb:3f:80:ce:c6:cc:d3:c0:d0:b1:52:29:de:59:
25:b4:5f:6b:1e:5d:6b:0d:81:31:06:52:79:53:8d:
37:3e:f3:1d:5c:32:5c:1a:c8:b9:25:04:59:29:29:
4f:f2:bd:c5:d1:44:4e:a4:ca:57:ec:71:74:46:ce:
d9:b2:d6:cd:7d:79:7e:39:9c:cf:89:50:9d:ea:62:
e3:cc:5f:91:e6:36:f6:52:ea:3f:13:12:2a:12:f1:
ce:71:be:95:02:fb:64:21:31:de:42:f2:f3:ba:86:
2e:a4:32:39:ff:c1:f6:dd:d4:b7:1b:18:d5:69:97:
37:71:b7:b4:ac:29:42:2b:be:c8:bf:13:d7:a4:60:
5e:73:74:09:9c:51:3a:a2:f3:1b:6d:20:6b:28:83:
74:d5:ff:f4:f7:57:66:84:1a:80:5b:ea:8f:11:a8:
1d:e5:ab:85:77:fc:54:75:83:2b:18:fb:86:af:01:
28:d0:83:7a:11:65:47:ea:d1:60:16:61:be:cb:d8:
ed:b9:79:c4:3a:f3:02:7a:73:3a:0a:82:87:e4:12:
54:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1B:1E:C9:33:7C:9A:45:CD:51:9C:4E:89:66:5E:A5:83:46:BF:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/af7171-5f7a-42c4-a418-23774fa4b1af/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/af7171-5f7a-42c4-a418-23774fa4b1af/1/NxseyTN8mkXNUZxOiWZepYNGvy4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.56.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204083
Signature Algorithm: sha256WithRSAEncryption
6b:85:4c:7d:97:15:b9:b6:cc:75:31:15:32:ae:14:ab:2b:0d:
93:09:56:b8:52:91:10:89:aa:54:d8:30:34:8c:4a:f5:92:92:
74:a2:e7:d2:5e:d0:fa:f5:e7:cc:5f:7f:b4:d3:43:28:38:e3:
e1:03:39:fa:1f:4c:a0:48:ac:ae:d5:b3:3f:d6:30:b4:f5:61:
0c:95:bf:6c:9d:f9:b3:09:d6:2f:fd:25:43:a2:29:43:bd:1b:
17:05:84:4f:d5:45:be:b9:78:ce:02:5b:68:a4:23:c8:9f:08:
ee:62:f4:95:3a:b2:99:49:d4:5f:c5:5d:71:0c:d8:5c:df:f6:
1b:34:14:45:6c:d7:f2:46:fc:6b:7d:a7:2f:8f:c2:a8:97:19:
25:ad:7c:14:5e:d1:d9:e0:08:81:91:cb:cf:84:d1:ab:00:04:
a7:67:de:90:73:1d:a7:23:41:4c:83:e7:6b:5e:34:94:50:a1:
f0:6e:5d:54:a4:85:f3:15:65:6c:22:ec:1f:67:4c:f6:66:55:
e5:1a:46:ce:bd:90:5f:2d:81:22:16:7d:e3:c6:20:98:46:b3:
56:92:bc:43:ba:76:18:62:bd:d6:86:aa:f5:f4:af:4f:5f:d9:
52:a4:20:05:c6:20:80:46:64:88:7b:72:b9:63:a0:64:5b:1d:
84:41:24:8b
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgIGAJvSjcouMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDI1NzIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzNzFiMWVjOTMz
N2M5YTQ1Y2Q1MTljNGU4OTY2NWVhNTgzNDZiZjJlMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAxkd+hn4DOYogLyDSO+7tyRifHaowbdrOKfDEQ1C7XyCE
ipLv7MkIiROKVNix+z+AzsbM08DQsVIp3lkltF9rHl1rDYExBlJ5U403PvMdXDJc
Gsi5JQRZKSlP8r3F0UROpMpX7HF0Rs7ZstbNfXl+OZzPiVCd6mLjzF+R5jb2Uuo/
ExIqEvHOcb6VAvtkITHeQvLzuoYupDI5/8H23dS3GxjVaZc3cbe0rClCK77IvxPX
pGBec3QJnFE6ovMbbSBrKIN01f/091dmhBqAW+qPEagd5auFd/xUdYMrGPuGrwEo
0IN6EWVH6tFgFmG+y9jtuXnEOvMCenM6CoKH5BJUmwIDAQABo4ICoDCCApwwHQYD
VR0OBBYEFDcbHskzfJpFzVGcTolmXqWDRr8uMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0L2FmNzE3MS01ZjdhLTQyYzQt
YTQxOC0yMzc3NGZhNGIxYWYvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvYWY3MTcxLTVmN2EtNDJjNC1h
NDE4LTIzNzc0ZmE0YjFhZi8xL054c2V5VE44bWtYTlVaeE9pV1plcFlOR3Z5NC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCuXM4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMdMzANBgkqhkiG
9w0BAQsFAAOCAQEAa4VMfZcVubbMdTEVMq4UqysNkwlWuFKREImqVNgwNIxK9ZKS
dKLn0l7Q+vXnzF9/tNNDKDjj4QM5+h9MoEisrtWzP9YwtPVhDJW/bJ35swnWL/0l
Q6IpQ70bFwWET9VFvrl4zgJbaKQjyJ8I7mL0lTqymUnUX8VdcQzYXN/2GzQURWzX
8kb8a32nL4/CqJcZJa18FF7R2eAIgZHLz4TRqwAEp2fekHMdpyNBTIPna140lFCh
8G5dVKSF8xVlbCLsH2dM9mZV5RpGzr2QXy2BIhZ948YgmEazVpK8Q7p2GGK91oaq
9fSvT1/ZUqQgBcYggEZkiHtyuWOgZFsdhEEkiw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:42 2024 by rpki-client on console-fra.rpki-client.org