Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RUXqA0yNvtMDmGfFKlsWIUIF8tU.cer
File: RUXqA0yNvtMDmGfFKlsWIUIF8tU.cer (raw, json)
Hash identifier: mWhhzNrx7rXxrDc46jcGNKe0e1jIMhniHbSkImsk6pE=
Subject key identifier: 45:45:EA:03:4C:8D:BE:D3:03:98:67:C5:2A:5B:16:21:42:05:F2:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A5C05139D1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/8e8312-4978-47a0-84f2-0407d7d179ad/1/RUXqA0yNvtMDmGfFKlsWIUIF8tU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/8e8312-4978-47a0-84f2-0407d7d179ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:53:45 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 92.119.124.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 711896152529 (0xa5c05139d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:53:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4545ea034c8dbed3039867c52a5b16214205f2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:24:2e:e1:9d:6c:bf:f2:b2:73:64:33:07:8a:
63:71:f9:22:f7:44:7d:b7:e8:d1:e6:aa:df:8f:cf:
76:1e:24:69:46:3d:e3:d2:2a:46:99:a2:aa:16:2c:
9c:d0:91:79:8e:f6:4b:ab:39:7f:78:ff:09:6e:a9:
14:3e:31:34:ed:c1:33:fd:f6:72:2e:cb:8d:dc:a4:
b4:e7:6b:bb:2f:c5:84:9b:8f:6d:81:0c:b6:40:26:
4b:58:5d:ea:93:ec:de:da:1d:1f:52:7a:64:c7:5d:
af:d7:07:a7:61:78:6f:e3:e4:8a:bf:32:d1:83:4d:
7c:d9:48:2e:2c:92:9f:f7:d1:c5:97:54:ce:30:35:
92:2e:a1:89:a7:2a:1a:e9:f8:05:04:c9:76:ab:10:
e3:da:17:11:e1:a5:5a:67:c0:48:d5:d0:d3:35:f5:
dd:d9:5c:ec:85:60:50:ed:28:15:18:cd:93:c3:f8:
68:5b:bd:6f:4c:9d:12:a8:3a:b8:f7:8e:77:e6:94:
bf:2c:d7:fe:7d:a6:50:a2:a2:8a:39:5f:70:86:b1:
51:f8:3b:5a:bb:24:7b:fa:64:0b:c1:82:11:03:6f:
cc:d9:49:b8:31:97:b2:f8:8e:0a:02:37:1d:54:45:
b3:07:76:e6:48:03:8f:2d:7f:f5:84:17:07:18:cb:
a5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:45:EA:03:4C:8D:BE:D3:03:98:67:C5:2A:5B:16:21:42:05:F2:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8e8312-4978-47a0-84f2-0407d7d179ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8e8312-4978-47a0-84f2-0407d7d179ad/1/RUXqA0yNvtMDmGfFKlsWIUIF8tU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.124.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:0c:c9:96:c7:68:4e:2f:0b:b8:5d:8e:2d:6a:d2:a6:f3:01:
ca:69:fd:c0:70:82:86:eb:53:43:d7:66:03:fd:a0:e4:e0:a2:
5b:c3:aa:53:e6:de:b8:7a:d3:9e:35:10:59:1d:31:f8:e1:43:
d7:d9:cc:14:27:86:10:91:17:07:cd:8c:91:6c:61:38:64:2b:
8d:57:5e:95:82:26:b3:db:6e:7a:06:f6:08:5f:d7:d6:50:16:
f0:f5:84:5d:f6:02:f1:28:6a:85:e6:63:c0:2c:13:9a:1c:57:
55:25:67:7b:36:52:43:ed:c2:42:fc:fd:1a:62:f0:44:8d:15:
54:91:fd:eb:42:9f:f6:05:5d:c3:6a:fa:74:23:ca:7b:bb:19:
32:7d:00:92:4d:99:3e:13:d5:b8:36:78:a5:36:1e:e7:02:dc:
be:09:ab:3b:e2:2e:3e:b4:1a:de:12:3c:f4:31:50:3c:f0:49:
ff:67:07:00:5e:f4:41:bb:02:63:a5:34:5b:96:28:b1:e6:66:
99:47:7b:5e:75:1a:a5:08:80:f8:ee:8e:9b:84:84:dc:59:2d:
f2:87:59:25:1a:12:48:19:33:ab:fc:6b:90:32:eb:bb:cb:09:
4b:02:7f:58:c2:bc:62:a3:86:0f:39:83:e3:ce:e9:00:d9:14:
6b:35:be:29
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAKXAUTnRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTE1MzQ1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0NTQ1ZWEwMzRj
OGRiZWQzMDM5ODY3YzUyYTViMTYyMTQyMDVmMmQ1MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA4iQu4Z1sv/Kyc2QzB4pjcfki90R9t+jR5qrfj892HiRp
Rj3j0ipGmaKqFiyc0JF5jvZLqzl/eP8JbqkUPjE07cEz/fZyLsuN3KS052u7L8WE
m49tgQy2QCZLWF3qk+ze2h0fUnpkx12v1wenYXhv4+SKvzLRg0182UguLJKf99HF
l1TOMDWSLqGJpyoa6fgFBMl2qxDj2hcR4aVaZ8BI1dDTNfXd2VzshWBQ7SgVGM2T
w/hoW71vTJ0SqDq494535pS/LNf+faZQoqKKOV9whrFR+DtauyR7+mQLwYIRA2/M
2Um4MZey+I4KAjcdVEWzB3bmSAOPLX/1hBcHGMulYwIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFEVF6gNMjb7TA5hnxSpbFiFCBfLVMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRlLzhlODMxMi00OTc4LTQ3YTAt
ODRmMi0wNDA3ZDdkMTc5YWQvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvOGU4MzEyLTQ5NzgtNDdhMC04
NGYyLTA0MDdkN2QxNzlhZC8xL1JVWHFBMHlOdnRNRG1HZkZLbHNXSVVJRjh0VS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCXHd8MA0GCSqGSIb3DQEBCwUAA4IBAQBPDMmWx2hOLwu4XY4tatKm
8wHKaf3AcIKG61ND12YD/aDk4KJbw6pT5t64etOeNRBZHTH44UPX2cwUJ4YQkRcH
zYyRbGE4ZCuNV16Vgiaz2256BvYIX9fWUBbw9YRd9gLxKGqF5mPALBOaHFdVJWd7
NlJD7cJC/P0aYvBEjRVUkf3rQp/2BV3Davp0I8p7uxkyfQCSTZk+E9W4NnilNh7n
Aty+Cas74i4+tBreEjz0MVA88En/ZwcAXvRBuwJjpTRbliix5maZR3tedRqlCID4
7o6bhITcWS3yh1klGhJIGTOr/GuQMuu7ywlLAn9Ywrxio4YPOYPjzukA2RRrNb4p
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-fra.rpki-client.org