Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W6Gr998eAmZGqe8Kceh2lSG8n4E.cer
File: W6Gr998eAmZGqe8Kceh2lSG8n4E.cer (raw, json)
Hash identifier: Q3nwVuh2PPU3eQXnhTZ5xeTYmw4XECp2svHU6JFNclI=
Subject key identifier: 5B:A1:AB:F7:DF:1E:02:66:46:A9:EF:0A:71:E8:76:95:21:BC:9F:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9985A89E7B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/aba05f-83f9-46c3-841f-26e754b42e07/1/W6Gr998eAmZGqe8Kceh2lSG8n4E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/aba05f-83f9-46c3-841f-26e754b42e07/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:57:44 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.14.164.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 659372416635 (0x9985a89e7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:57:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ba1abf7df1e026646a9ef0a71e8769521bc9f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:fb:79:2c:6f:50:22:bf:75:69:e3:1e:37:
01:49:59:e5:af:a6:50:24:42:72:b9:70:15:ca:82:
7d:be:18:9a:25:2c:5c:bc:cd:6d:77:b9:4f:4c:07:
8f:bb:42:6f:0b:00:2d:da:9d:1d:ce:57:62:4a:9a:
a0:0f:d1:ab:09:2e:c6:32:b6:de:24:e4:32:0f:94:
7c:81:a0:b3:c3:47:f1:21:ae:40:27:7f:a8:8d:60:
a9:a6:38:b4:48:e6:d2:82:e7:c0:c5:19:7c:ca:b2:
dc:6f:79:2b:76:40:56:6e:43:6e:ac:8f:7a:34:5e:
ef:c1:1d:1b:68:8e:49:8e:d3:97:75:bf:70:8e:1a:
31:5d:d4:38:3c:5c:f4:82:23:11:40:97:4e:7c:44:
b4:53:a7:0b:4c:ac:ee:16:a7:a9:18:ed:19:88:4a:
a0:05:63:4e:d7:68:d6:90:6f:6c:14:39:ae:bd:1e:
59:82:cb:b1:cc:6c:e8:81:e2:76:77:f2:b8:e0:2d:
b4:b5:bf:02:e9:81:07:cd:ff:13:ef:f2:f4:dc:91:
09:d8:de:35:02:58:d3:68:0d:f3:14:14:ae:4e:18:
ea:a8:4a:ca:3e:73:8f:85:8a:02:c3:bf:0a:8b:ef:
89:5d:63:d2:47:cf:11:18:00:15:cb:2a:9f:45:44:
32:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A1:AB:F7:DF:1E:02:66:46:A9:EF:0A:71:E8:76:95:21:BC:9F:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/aba05f-83f9-46c3-841f-26e754b42e07/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/aba05f-83f9-46c3-841f-26e754b42e07/1/W6Gr998eAmZGqe8Kceh2lSG8n4E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.164.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:bc:39:96:d8:29:34:c6:21:47:25:cd:db:24:c3:56:7e:33:
5d:bc:fa:49:77:c2:b2:3d:44:a8:b0:6b:cb:ec:e9:fe:71:be:
1d:a8:62:da:13:ad:fb:01:7d:a0:ad:d0:76:c5:b2:f7:1a:b4:
ad:1c:0d:e9:b9:ac:fc:d0:5b:49:a8:52:1d:5d:fc:74:0b:77:
f3:1a:74:16:98:ca:de:bf:d9:59:06:d6:c8:a3:9a:6c:56:38:
26:5a:46:2b:c1:59:7e:9b:fa:99:21:0e:39:ac:a4:26:9f:80:
bc:f9:01:87:68:bb:53:9a:28:94:bf:15:aa:48:ac:77:df:d9:
16:57:57:a6:c4:9f:df:27:75:b0:b3:b8:44:ab:b8:57:f5:58:
ea:5d:11:2c:a9:18:81:07:23:4b:b4:4a:2a:c5:82:5b:bd:f3:
73:ce:0b:b4:d4:c5:8e:67:a5:f0:da:f8:b0:0a:d6:20:34:34:
d5:73:82:cb:26:9a:c2:bf:cd:07:50:8b:0a:40:aa:79:db:4d:
a7:e6:c6:2a:78:ef:49:8a:ed:b9:a1:b7:c2:b5:63:ae:0e:81:
74:bc:33:1f:93:3b:28:d1:a3:05:f2:5e:f8:3c:54:16:2a:fa:
cd:02:73:04:b2:84:4e:78:ac:46:6f:3a:4d:a5:75:71:6c:00:
bf:bb:63:74
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAJmFqJ57MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDA1NzQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1YmExYWJmN2Rm
MWUwMjY2NDZhOWVmMGE3MWU4NzY5NTIxYmM5ZjgxMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAozr7eSxvUCK/dWnjHjcBSVnlr6ZQJEJyuXAVyoJ9vhia
JSxcvM1td7lPTAePu0JvCwAt2p0dzldiSpqgD9GrCS7GMrbeJOQyD5R8gaCzw0fx
Ia5AJ3+ojWCppji0SObSgufAxRl8yrLcb3krdkBWbkNurI96NF7vwR0baI5JjtOX
db9wjhoxXdQ4PFz0giMRQJdOfES0U6cLTKzuFqepGO0ZiEqgBWNO12jWkG9sFDmu
vR5ZgsuxzGzogeJ2d/K44C20tb8C6YEHzf8T7/L03JEJ2N41AljTaA3zFBSuThjq
qErKPnOPhYoCw78Ki++JXWPSR88RGAAVyyqfRUQyZQIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFFuhq/ffHgJmRqnvCnHodpUhvJ+BMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2L2FiYTA1Zi04M2Y5LTQ2YzMt
ODQxZi0yNmU3NTRiNDJlMDcvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvYWJhMDVmLTgzZjktNDZjMy04
NDFmLTI2ZTc1NGI0MmUwNy8xL1c2R3I5OThlQW1aR3FlOEtjZWgybFNHOG40RS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCLQ6kMA0GCSqGSIb3DQEBCwUAA4IBAQCmvDmW2Ck0xiFHJc3bJMNW
fjNdvPpJd8KyPUSosGvL7On+cb4dqGLaE637AX2grdB2xbL3GrStHA3puaz80FtJ
qFIdXfx0C3fzGnQWmMrev9lZBtbIo5psVjgmWkYrwVl+m/qZIQ45rKQmn4C8+QGH
aLtTmiiUvxWqSKx339kWV1emxJ/fJ3Wws7hEq7hX9VjqXREsqRiBByNLtEoqxYJb
vfNzzgu01MWOZ6Xw2viwCtYgNDTVc4LLJprCv80HUIsKQKp5202n5sYqeO9Jiu25
obfCtWOuDoF0vDMfkzso0aMF8l74PFQWKvrNAnMEsoROeKxGbzpNpXVxbAC/u2N0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:36 2024 by rpki-client on console-fra.rpki-client.org