Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SmWrJAu9K7QNC9vuKxWqWoHvbVQ.cer
File: SmWrJAu9K7QNC9vuKxWqWoHvbVQ.cer (raw, json)
Hash identifier: g4LHZhVlK8lr9sEYQZ6UPWW2oZ86LjWent20rrY7m/0=
Subject key identifier: 4A:65:AB:24:0B:BD:2B:B4:0D:0B:DB:EE:2B:15:AA:5A:81:EF:6D:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9A01208725
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/5e6f9c-d8c6-4414-b3bf-7d76eba99cbf/1/SmWrJAu9K7QNC9vuKxWqWoHvbVQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/5e6f9c-d8c6-4414-b3bf-7d76eba99cbf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:51:02 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 210777
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661443872549 (0x9a01208725)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:51:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a65ab240bbd2bb40d0bdbee2b15aa5a81ef6d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:95:d9:4b:b0:7b:9c:0c:c3:dd:48:fb:f7:e5:
fc:f6:67:ce:1e:d4:ff:ba:05:89:5f:e0:a2:69:a6:
80:b5:d8:d4:b9:db:6d:1f:5d:f6:22:ce:d2:64:c4:
f4:0f:c1:05:15:c4:b9:d4:ea:51:91:a0:a6:96:f4:
65:93:e4:c9:78:fa:d3:03:b3:b0:79:3f:55:0d:a6:
e1:f9:c4:af:31:b6:a8:3f:26:a6:b3:88:80:a6:6d:
7b:62:34:3c:43:c0:29:70:82:69:f2:a4:6a:c4:06:
61:ef:81:a4:24:ec:f0:79:a7:7b:57:21:d0:23:0c:
25:59:e4:7b:6e:6a:81:5d:17:84:d7:9c:e9:dc:36:
c8:fa:aa:90:2b:84:0f:be:a9:f6:72:64:77:b9:29:
90:99:9f:34:15:1e:f4:1e:94:3e:44:b1:9e:16:d4:
9a:43:ef:fc:94:b3:66:ad:66:21:12:88:a6:81:f9:
e0:00:88:5e:7f:41:ce:14:03:16:9d:0a:92:2b:70:
72:72:0a:8d:d8:75:a8:09:55:3f:cc:95:8e:b3:86:
94:3d:6f:25:69:9e:5a:03:cc:6e:48:10:70:e2:d6:
58:02:80:e1:92:46:ca:54:c0:eb:ea:47:8c:e8:88:
31:41:d4:0a:98:e4:2a:47:b5:8c:fe:12:7b:ab:b3:
c3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:65:AB:24:0B:BD:2B:B4:0D:0B:DB:EE:2B:15:AA:5A:81:EF:6D:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5e6f9c-d8c6-4414-b3bf-7d76eba99cbf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5e6f9c-d8c6-4414-b3bf-7d76eba99cbf/1/SmWrJAu9K7QNC9vuKxWqWoHvbVQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210777
Signature Algorithm: sha256WithRSAEncryption
34:58:c8:1a:ed:47:c7:41:06:9d:e4:bd:ae:f7:c1:ad:79:84:
ae:9c:2d:a2:ab:e0:0d:51:05:7e:3d:4f:df:87:46:f0:d0:9a:
b5:75:41:79:9d:63:36:9f:0a:9d:02:8a:d3:7e:74:d6:48:98:
15:38:22:6e:1c:89:f4:32:a6:0b:d8:47:23:24:ba:d2:dd:67:
95:8a:bb:e8:89:bc:72:cd:6f:fc:e4:a8:bf:8d:8d:2c:ec:2e:
86:39:2d:43:36:58:e9:9e:fa:f1:52:2e:56:7d:4f:0d:7a:bf:
f3:22:ef:88:d8:7b:64:dd:38:26:19:98:3e:ad:16:bd:ad:46:
59:d8:57:57:16:a5:ae:5d:1a:1a:12:ab:99:3e:44:9a:70:6e:
66:08:98:91:34:b5:cc:ed:8d:6b:a1:3c:a7:85:fa:2a:80:32:
78:e4:4a:b9:a9:2e:41:bd:ba:9c:03:86:47:b7:9c:93:5a:ed:
07:69:39:e2:3c:64:a9:36:95:fd:d4:a7:07:1c:d3:e4:fa:d8:
4e:d6:d4:5f:f3:a7:62:8f:fc:85:a2:00:cb:37:77:a7:98:9f:
5d:df:cd:79:c0:7d:3c:f7:22:15:a2:40:a2:e2:25:62:87:8b:
58:25:56:19:96:fa:25:d1:04:3c:e5:50:1b:63:ae:dd:86:82:
1f:30:af:f9
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIGAJoBIIclMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDE1MTAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0YTY1YWIyNDBi
YmQyYmI0MGQwYmRiZWUyYjE1YWE1YTgxZWY2ZDU0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAmJXZS7B7nAzD3Uj79+X89mfOHtT/ugWJX+CiaaaAtdjU
udttH132Is7SZMT0D8EFFcS51OpRkaCmlvRlk+TJePrTA7OweT9VDabh+cSvMbao
Pyams4iApm17YjQ8Q8ApcIJp8qRqxAZh74GkJOzwead7VyHQIwwlWeR7bmqBXReE
15zp3DbI+qqQK4QPvqn2cmR3uSmQmZ80FR70HpQ+RLGeFtSaQ+/8lLNmrWYhEoim
gfngAIhef0HOFAMWnQqSK3BycgqN2HWoCVU/zJWOs4aUPW8laZ5aA8xuSBBw4tZY
AoDhkkbKVMDr6keM6IgxQdQKmOQqR7WM/hJ7q7PDiQIDAQABo4ICfzCCAnswHQYD
VR0OBBYEFEplqyQLvSu0DQvb7isVqlqB721UMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzLzVlNmY5Yy1kOGM2LTQ0MTQt
YjNiZi03ZDc2ZWJhOTljYmYvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvNWU2ZjljLWQ4YzYtNDQxNC1i
M2JmLTdkNzZlYmE5OWNiZi8xL1NtV3JKQXU5SzdRTkM5dnVLeFdxV29IdmJWUS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwM3WTANBgkqhkiG9w0BAQsFAAOCAQEANFjIGu1Hx0EGneS9rvfBrXmErpwt
oqvgDVEFfj1P34dG8NCatXVBeZ1jNp8KnQKK03501kiYFTgibhyJ9DKmC9hHIyS6
0t1nlYq76Im8cs1v/OSov42NLOwuhjktQzZY6Z768VIuVn1PDXq/8yLviNh7ZN04
JhmYPq0Wva1GWdhXVxalrl0aGhKrmT5EmnBuZgiYkTS1zO2Na6E8p4X6KoAyeORK
uakuQb26nAOGR7eck1rtB2k54jxkqTaV/dSnBxzT5PrYTtbUX/OnYo/8haIAyzd3
p5ifXd/NecB9PPciFaJAouIlYoeLWCVWGZb6JdEEPOVQG2Ou3YaCHzCv+Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:59 2024 by rpki-client on console-ams.rpki-client.org