Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TQ6NK1XunzYga-rg1k7LvycwUaA.cer
File: TQ6NK1XunzYga-rg1k7LvycwUaA.cer (raw, json)
Hash identifier: IqQl4j2VR1TdYOTVEAXn8PkRIBUlcaoT01Vsy+qxaWE=
Subject key identifier: 4D:0E:8D:2B:55:EE:9F:36:20:6B:EA:E0:D6:4E:CB:BF:27:30:51:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A0840552D6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/95b4a7-5ba1-4294-bdba-63865d0679cf/1/TQ6NK1XunzYga-rg1k7LvycwUaA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/95b4a7-5ba1-4294-bdba-63865d0679cf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 06:58:34 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 209282
IP: 77.87.184.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 689409708758 (0xa0840552d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:58:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d0e8d2b55ee9f36206beae0d64ecbbf273051a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:76:6f:e8:f0:22:4d:02:d1:b4:f1:f0:06:
56:f3:68:0e:b0:c1:89:93:df:c2:92:7b:6b:a0:0e:
bb:d6:47:6c:e4:9b:6e:95:6b:8d:70:83:c5:9a:fe:
8c:c4:d1:ea:e9:b1:c2:b9:cf:22:18:02:69:4a:c8:
80:d5:e6:38:8c:43:f9:81:7a:51:6f:93:7d:f3:bf:
79:a8:29:19:b9:f8:e0:2c:e5:c4:2b:8c:39:b5:47:
e8:ee:11:40:81:12:e7:36:c2:d7:5a:0c:97:9b:5c:
45:4a:42:19:2c:d3:6b:f7:11:fe:12:1a:93:96:17:
1d:dd:ef:ea:a9:6e:65:f3:7d:fd:32:66:85:05:1e:
9c:f9:15:17:67:ab:b4:ac:af:09:76:f1:c8:88:45:
ce:f5:92:d0:99:56:83:da:95:5c:5c:92:b7:bf:ab:
ae:1e:be:e8:27:78:03:59:7e:ea:56:82:68:3c:82:
72:1a:42:b5:78:c4:72:2c:75:39:b5:e5:3f:2b:3e:
0b:2f:62:a6:e4:c9:c9:f0:96:c0:9c:16:24:97:a9:
a3:ba:88:18:37:c1:f6:d5:6a:82:6d:7b:da:d3:a8:
76:b5:cd:df:e4:da:ec:0f:7c:36:68:00:8b:31:14:
62:bb:66:f3:b1:68:09:c7:1d:ae:5c:aa:8b:1b:01:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0E:8D:2B:55:EE:9F:36:20:6B:EA:E0:D6:4E:CB:BF:27:30:51:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/95b4a7-5ba1-4294-bdba-63865d0679cf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/95b4a7-5ba1-4294-bdba-63865d0679cf/1/TQ6NK1XunzYga-rg1k7LvycwUaA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.184.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209282
Signature Algorithm: sha256WithRSAEncryption
03:d9:fe:76:f7:d1:d3:cd:25:36:07:28:2a:2f:f7:68:86:a7:
48:b3:ef:29:d5:c4:24:13:c6:59:62:eb:31:e2:7d:cf:09:27:
05:d8:a0:1b:e0:e6:99:ff:5b:33:a8:3c:f3:0c:38:58:08:b3:
f2:88:3a:8b:8c:ce:2a:97:88:30:f1:c0:2f:0b:af:00:b7:6f:
b3:54:6e:92:23:7e:36:12:4e:6f:2b:72:7a:b0:07:dc:ae:61:
85:d7:16:fc:28:97:7d:f1:3a:9e:5d:7f:0e:bd:54:f7:fe:c8:
bb:38:05:bf:b4:0a:e4:cd:1a:22:ca:f9:74:79:03:d5:2d:9c:
b2:0a:f6:c1:16:e4:74:8b:20:50:b2:e8:24:ec:43:87:b9:02:
71:47:cc:d7:ec:ee:2b:69:83:60:3e:56:e4:54:c4:ec:5a:79:
2d:f2:f6:77:22:85:d6:96:6a:01:9d:7d:05:0d:44:2c:77:64:
84:b7:1e:ad:4e:04:f6:e1:a9:84:6c:db:f4:de:b2:42:f5:f9:
5e:ce:c8:cd:73:32:81:6a:44:2e:be:bf:f8:da:00:65:a7:05:
c5:5f:a5:d9:c2:a2:b1:ba:bf:b0:39:53:fe:5b:ec:a5:6b:96:
ee:78:f6:ad:24:fe:11:7b:a5:3b:4f:3e:14:33:73:be:8e:2b:
15:32:f5:32
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgIGAKCEBVLWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDY1ODM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0ZDBlOGQyYjU1
ZWU5ZjM2MjA2YmVhZTBkNjRlY2JiZjI3MzA1MWEwMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAstt2b+jwIk0C0bTx8AZW82gOsMGJk9/CkntroA671kds
5JtulWuNcIPFmv6MxNHq6bHCuc8iGAJpSsiA1eY4jEP5gXpRb5N98795qCkZufjg
LOXEK4w5tUfo7hFAgRLnNsLXWgyXm1xFSkIZLNNr9xH+EhqTlhcd3e/qqW5l8339
MmaFBR6c+RUXZ6u0rK8JdvHIiEXO9ZLQmVaD2pVcXJK3v6uuHr7oJ3gDWX7qVoJo
PIJyGkK1eMRyLHU5teU/Kz4LL2Km5MnJ8JbAnBYkl6mjuogYN8H21WqCbXva06h2
tc3f5NrsD3w2aACLMRRiu2bzsWgJxx2uXKqLGwGtUQIDAQABo4ICoDCCApwwHQYD
VR0OBBYEFE0OjStV7p82IGvq4NZOy78nMFGgMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3Lzk1YjRhNy01YmExLTQyOTQt
YmRiYS02Mzg2NWQwNjc5Y2YvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvOTViNGE3LTViYTEtNDI5NC1i
ZGJhLTYzODY1ZDA2NzljZi8xL1RRNk5LMVh1bnpZZ2EtcmcxazdMdnljd1VhQS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQATVe4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMxgjANBgkqhkiG
9w0BAQsFAAOCAQEAA9n+dvfR080lNgcoKi/3aIanSLPvKdXEJBPGWWLrMeJ9zwkn
BdigG+Dmmf9bM6g88ww4WAiz8og6i4zOKpeIMPHALwuvALdvs1RukiN+NhJObyty
erAH3K5hhdcW/CiXffE6nl1/Dr1U9/7IuzgFv7QK5M0aIsr5dHkD1S2csgr2wRbk
dIsgULLoJOxDh7kCcUfM1+zuK2mDYD5W5FTE7Fp5LfL2dyKF1pZqAZ19BQ1ELHdk
hLcerU4E9uGphGzb9N6yQvX5Xs7IzXMygWpELr6/+NoAZacFxV+l2cKisbq/sDlT
/lvspWuW7nj2rST+EXulO08+FDNzvo4rFTL1Mg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:12 2024 by rpki-client on console-ams.rpki-client.org