Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VmnM3gFYJ2M6Ef2ZoBIodQxemlM.cer
File: VmnM3gFYJ2M6Ef2ZoBIodQxemlM.cer (raw, json)
Hash identifier: KTaVAtB8+4dETh2csTeDfU1bQUPkfc+d5Y9+KPGS1iI=
Subject key identifier: 56:69:CC:DE:01:58:27:63:3A:11:FD:99:A0:12:28:75:0C:5E:9A:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AA699665AE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/c990b3-41cb-439b-836a-fb0eebf5d397/1/VmnM3gFYJ2M6Ef2ZoBIodQxemlM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/c990b3-41cb-439b-836a-fb0eebf5d397/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:55:29 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 210097
IP: 81.22.40.0/22
IP: 2a0d:2840::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 731915904430 (0xaa699665ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:55:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5669ccde015827633a11fd99a01228750c5e9a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:66:53:84:8e:1d:49:00:43:33:27:ab:c7:26:
2a:cd:7b:6a:86:03:cd:31:af:7a:5a:23:6f:1d:70:
dd:6d:f8:1b:c8:91:0d:67:99:7b:3d:20:8a:a4:23:
33:9b:38:08:e0:1c:f0:30:6c:44:ab:32:fd:b2:2a:
18:51:43:19:d1:79:98:c6:a8:78:de:06:d9:95:28:
61:13:7b:d1:70:1c:e5:11:80:4e:1b:c2:a6:47:86:
f7:20:7d:b9:a0:ac:0a:7e:75:70:ca:56:ec:e2:39:
70:18:1a:68:b3:39:83:39:d2:64:74:70:d9:db:38:
ba:18:5e:f2:bf:3e:39:9c:29:5f:db:61:44:f4:f7:
77:96:18:d0:87:89:df:7e:0e:b2:ba:2c:92:84:f0:
11:59:26:f8:c2:fb:93:f1:3b:4c:82:b0:c8:91:d0:
de:61:15:0a:6a:41:2b:4a:c5:27:60:8e:dc:88:22:
59:fc:3d:67:4f:93:68:bc:52:af:14:5a:eb:a6:fe:
67:55:c2:02:de:06:f1:72:c5:db:7e:44:95:24:1b:
e5:e3:50:df:aa:7f:ba:ca:c1:79:27:94:b0:36:c6:
bf:95:da:9a:65:0e:90:6f:aa:a2:f9:4e:44:c4:04:
ec:53:05:bc:20:cf:ea:a5:8e:78:6d:28:9f:98:0c:
07:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:69:CC:DE:01:58:27:63:3A:11:FD:99:A0:12:28:75:0C:5E:9A:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c990b3-41cb-439b-836a-fb0eebf5d397/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c990b3-41cb-439b-836a-fb0eebf5d397/1/VmnM3gFYJ2M6Ef2ZoBIodQxemlM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.40.0/22
IPv6:
2a0d:2840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210097
Signature Algorithm: sha256WithRSAEncryption
73:62:99:00:0c:e9:26:4d:18:5f:20:ba:7c:24:e1:9e:a8:15:
6e:3f:e5:95:a5:95:e8:88:30:65:3f:62:45:4d:f1:57:4f:48:
36:51:43:2a:29:ef:f9:cd:2a:14:d7:fb:30:bd:8d:6a:6b:57:
f5:e1:6e:82:fb:33:75:69:97:de:d4:f5:a8:d9:75:37:0b:ff:
c2:84:ec:dd:72:df:7c:3c:40:15:a9:2e:9a:1a:a9:5c:87:d6:
c3:08:52:0a:62:b3:ca:e4:a7:f1:3a:67:83:86:97:f2:3e:cb:
7e:4a:9f:26:03:ce:25:69:fa:e6:0a:fb:0e:ca:d0:3a:79:e1:
44:16:03:11:24:4d:f1:f9:19:99:93:a2:17:79:e8:a0:50:69:
aa:52:ea:91:0e:70:35:34:d4:d7:ee:08:ab:bd:bb:08:7e:70:
4e:d9:37:b1:75:6a:70:b7:b3:51:54:0f:65:ae:17:5d:7f:90:
c8:22:9c:8d:dc:74:6a:cb:d1:9b:1c:87:94:dd:42:44:0b:5f:
bf:ba:55:4c:c3:2b:22:9d:f3:cd:7c:10:8a:51:95:3d:38:71:
20:e3:67:00:60:23:64:41:c1:61:c4:20:6a:ab:c8:5f:d5:40:
db:5f:f2:21:c5:61:29:91:69:47:e9:a1:0a:05:ea:33:8b:2a:
3d:c5:f2:d0
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIGAKpplmWuMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTU1NTI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1NjY5Y2NkZTAx
NTgyNzYzM2ExMWZkOTlhMDEyMjg3NTBjNWU5YTUzMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA3GZThI4dSQBDMyerxyYqzXtqhgPNMa96WiNvHXDdbfgb
yJENZ5l7PSCKpCMzmzgI4BzwMGxEqzL9sioYUUMZ0XmYxqh43gbZlShhE3vRcBzl
EYBOG8KmR4b3IH25oKwKfnVwylbs4jlwGBposzmDOdJkdHDZ2zi6GF7yvz45nClf
22FE9Pd3lhjQh4nffg6yuiyShPARWSb4wvuT8TtMgrDIkdDeYRUKakErSsUnYI7c
iCJZ/D1nT5NovFKvFFrrpv5nVcIC3gbxcsXbfkSVJBvl41Dfqn+6ysF5J5SwNsa/
ldqaZQ6Qb6qi+U5ExATsUwW8IM/qpY54bSifmAwHAwIDAQABo4ICrzCCAqswHQYD
VR0OBBYEFFZpzN4BWCdjOhH9maASKHUMXppTMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyL2M5OTBiMy00MWNiLTQzOWIt
ODM2YS1mYjBlZWJmNWQzOTcvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvYzk5MGIzLTQxY2ItNDM5Yi04
MzZhLWZiMGVlYmY1ZDM5Ny8xL1Ztbk0zZ0ZZSjJNNkVmMlpvQklvZFF4ZW1sTS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCURYoMA0EAgACMAcDBQMqDShAMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwM0sTANBgkqhkiG9w0BAQsFAAOCAQEAc2KZAAzpJk0YXyC6fCThnqgVbj/l
laWV6IgwZT9iRU3xV09INlFDKinv+c0qFNf7ML2NamtX9eFugvszdWmX3tT1qNl1
Nwv/woTs3XLffDxAFakumhqpXIfWwwhSCmKzyuSn8Tpng4aX8j7LfkqfJgPOJWn6
5gr7DsrQOnnhRBYDESRN8fkZmZOiF3nooFBpqlLqkQ5wNTTU1+4Iq727CH5wTtk3
sXVqcLezUVQPZa4XXX+QyCKcjdx0asvRmxyHlN1CRAtfv7pVTMMrIp3zzXwQilGV
PThxIONnAGAjZEHBYcQgaqvIX9VA21/yIcVhKZFpR+mhCgXqM4sqPcXy0A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:32 2024 by rpki-client on console-fra.rpki-client.org