Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SqMmlBHFaF0AkKWpHiLw4cvgl_M.cer
File: SqMmlBHFaF0AkKWpHiLw4cvgl_M.cer (raw, json)
Hash identifier: pY5gQPfMEPZ/Zc/HAMbvpBeD0gXS6uPGvKGJ6lWLy0s=
Subject key identifier: 4A:A3:26:94:11:C5:68:5D:00:90:A5:A9:1E:22:F0:E1:CB:E0:97:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018977DB90A9F6996245E431293A82B53C94
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/40a067-180f-41db-91ba-4502089c0216/1/SqMmlBHFaF0AkKWpHiLw4cvgl_M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/40a067-180f-41db-91ba-4502089c0216/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 21 Jul 2023 09:50:25 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.186.140.0/22
IP: 2a0b:7c80::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:77:db:90:a9:f6:99:62:45:e4:31:29:3a:82:b5:3c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 21 09:50:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4aa3269411c5685d0090a5a91e22f0e1cbe097f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f6:60:d4:c9:9c:cf:c3:7b:85:a9:00:a2:de:
7e:ac:e8:53:b6:a6:7d:47:85:cb:8f:84:c3:d6:54:
bf:5f:62:e2:97:bd:de:57:26:ec:e7:b2:a0:dd:c3:
df:59:8f:ee:9f:19:65:34:1f:74:2c:f8:44:4c:8f:
bf:65:4e:a7:64:4d:7d:5b:98:92:e4:fd:a4:a1:7d:
ff:77:4d:d3:e8:83:6d:d4:3c:79:fe:cf:1c:61:c6:
6f:9d:a2:4b:bd:d5:27:61:b3:63:d8:f6:c7:d0:6d:
9c:64:75:d6:f0:16:8f:6d:a1:f7:00:39:d3:f0:15:
98:0b:96:3d:95:27:4f:14:58:08:99:e3:93:74:1f:
9e:84:1c:76:e1:be:7d:37:6e:b5:e0:01:aa:eb:af:
c8:3e:55:31:70:df:bb:2f:c0:4f:b3:39:25:7d:24:
33:b9:6a:75:54:b0:9b:cd:1d:3b:cb:c6:db:ed:5b:
fc:33:80:da:fc:26:30:54:1d:26:fd:d0:af:1e:85:
22:9d:cd:d3:95:55:45:dc:b9:70:a8:3c:ec:2e:dd:
ec:37:9d:22:c6:37:42:50:2f:fa:c1:06:52:43:76:
72:f5:1e:6c:83:3c:9b:5e:08:ee:d3:50:f7:4b:4d:
56:80:5b:1d:1d:69:68:af:c9:07:23:3a:0b:95:da:
91:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A3:26:94:11:C5:68:5D:00:90:A5:A9:1E:22:F0:E1:CB:E0:97:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/40a067-180f-41db-91ba-4502089c0216/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/40a067-180f-41db-91ba-4502089c0216/1/SqMmlBHFaF0AkKWpHiLw4cvgl_M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.140.0/22
IPv6:
2a0b:7c80::/29
Signature Algorithm: sha256WithRSAEncryption
a6:55:c3:2f:10:12:8d:e3:54:35:a8:79:e3:f4:ab:88:8e:8b:
c4:b1:88:76:c0:0d:be:30:29:18:a5:55:b9:d4:14:50:90:c6:
a6:07:4c:c2:cf:d7:87:b2:10:b2:50:6f:77:65:30:8a:f1:0b:
df:c4:67:f5:fc:31:4c:3c:a8:a8:fb:ad:e5:5b:73:d4:6e:4b:
58:a5:66:ee:31:84:2a:90:18:a8:5c:91:16:3f:82:66:85:be:
83:ac:3f:92:e6:63:c3:09:27:6b:34:28:5f:45:7a:08:1e:6e:
1a:59:92:e4:ba:d4:a5:72:27:16:b9:94:7a:31:8b:88:f1:ac:
2b:8e:19:80:1d:9a:02:45:40:7f:4f:50:a5:77:9c:ad:f5:e0:
30:81:96:c1:b1:a7:11:8b:24:74:b6:cb:fa:e5:7a:ce:c1:ce:
c5:25:be:ac:96:3b:f2:89:c8:a4:f4:2c:16:23:ce:fe:7d:08:
9a:fb:b6:64:2b:09:2c:13:00:0c:77:52:ea:6a:9f:2e:5a:e4:
5c:84:cb:50:7f:ca:ef:5d:b5:70:dd:eb:ce:69:3a:f0:3a:3d:
25:4d:fd:54:a7:3a:c7:42:9f:e8:9e:21:10:54:97:3c:41:12:
76:10:c2:f0:00:ad:eb:50:5c:b8:1a:73:71:d8:3f:17:a8:b2:
c4:8c:c4:11
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYl325Cp9pliReQxKTqCtTyUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNzIxMDk1MDI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWEzMjY5NDExYzU2ODVkMDA5MGE1YTkxZTIyZjBlMWNiZTA5N2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PZg1Mmcz8N7hakAot5+rOhTtqZ9
R4XLj4TD1lS/X2Lil73eVybs57Kg3cPfWY/unxllNB90LPhETI+/ZU6nZE19W5iS
5P2koX3/d03T6INt1Dx5/s8cYcZvnaJLvdUnYbNj2PbH0G2cZHXW8BaPbaH3ADnT
8BWYC5Y9lSdPFFgImeOTdB+ehBx24b59N2614AGq66/IPlUxcN+7L8BPszklfSQz
uWp1VLCbzR07y8bb7Vv8M4Da/CYwVB0m/dCvHoUinc3TlVVF3LlwqDzsLt3sN50i
xjdCUC/6wQZSQ3Zy9R5sgzybXgju01D3S01WgFsdHWlor8kHIzoLldqRzQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFEqjJpQRxWhdAJClqR4i8OHL4JfzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyLzQwYTA2
Ny0xODBmLTQxZGItOTFiYS00NTAyMDg5YzAyMTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvNDBhMDY3
LTE4MGYtNDFkYi05MWJhLTQ1MDIwODljMDIxNi8xL1NxTW1sQkhGYUYwQWtLV3BI
aUx3NGN2Z2xfTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCubqMMA0EAgACMAcDBQMqC3yAMA0GCSqGSIb3
DQEBCwUAA4IBAQCmVcMvEBKN41Q1qHnj9KuIjovEsYh2wA2+MCkYpVW51BRQkMam
B0zCz9eHshCyUG93ZTCK8QvfxGf1/DFMPKio+63lW3PUbktYpWbuMYQqkBioXJEW
P4Jmhb6DrD+S5mPDCSdrNChfRXoIHm4aWZLkutSlcicWuZR6MYuI8awrjhmAHZoC
RUB/T1Cld5yt9eAwgZbBsacRiyR0tsv65XrOwc7FJb6sljvyicik9CwWI87+fQia
+7ZkKwksEwAMd1Lqap8uWuRchMtQf8rvXbVw3evOaTrwOj0lTf1UpzrHQp/oniEQ
VJc8QRJ2EMLwAK3rUFy4GnNx2D8XqLLEjMQR
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:35:39 2025 by rpki-client