Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xa4VaWE6neyqDDiolbXMVHncRkA.cer
File: Xa4VaWE6neyqDDiolbXMVHncRkA.cer (raw, json)
Hash identifier: PhuVV98BtKmrBcYith1o1In9FBktux0ixb6v0/xfmx0=
Subject key identifier: 5D:AE:15:69:61:3A:9D:EC:AA:0C:38:A8:95:B5:CC:54:79:DC:46:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AAA9F40597
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/7ddcaa-4d3b-4bda-99a5-7659d205911a/1/Xa4VaWE6neyqDDiolbXMVHncRkA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/7ddcaa-4d3b-4bda-99a5-7659d205911a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:58:24 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 43219
IP: 91.194.74.0/23
IP: 95.131.248.0/21
IP: 185.194.88.0/22
IP: 2a01:530::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 732995782039 (0xaaa9f40597)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:58:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5dae1569613a9decaa0c38a895b5cc5479dc4640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c3:56:5c:b2:e9:6b:a5:09:fc:b9:1f:26:17:
06:ef:76:2e:03:57:8b:1f:68:31:3d:6a:a0:96:67:
b8:1f:b7:ab:ad:ab:cd:97:fb:9a:b0:70:9c:db:ac:
b4:dd:36:9a:ba:6b:d4:c7:9c:c1:df:59:ad:8d:24:
88:8d:99:30:e1:7b:28:02:a0:16:32:2b:21:d7:00:
f3:57:67:f8:bb:e4:9b:3c:0c:90:0d:6c:e2:2f:43:
50:d3:4e:02:1b:67:d7:24:65:8a:74:85:9a:26:97:
6d:99:67:c2:48:9c:06:be:39:78:bd:1d:87:f4:b0:
62:9b:13:e0:f4:ee:0e:53:e1:a7:e7:ec:88:c6:fe:
ea:b9:da:f1:9b:7f:3d:e5:64:69:31:b4:9b:13:0c:
6c:b0:fd:68:06:a5:96:95:e3:e0:46:b3:dd:1b:23:
3f:36:f4:7d:3c:77:e8:62:7e:64:1f:c4:96:00:ea:
51:8b:b9:d9:0f:65:2b:a3:61:85:f8:0d:c3:24:a2:
10:eb:1d:49:ff:69:1b:28:18:b6:08:81:c8:bb:1b:
14:4c:fe:dd:c7:c4:64:93:02:3f:df:81:26:26:0d:
98:fd:a7:d1:e7:7a:bf:b2:9f:10:8c:d5:4e:cb:f5:
fd:90:c4:98:fa:12:96:f1:a6:40:ee:7d:f7:92:be:
be:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AE:15:69:61:3A:9D:EC:AA:0C:38:A8:95:B5:CC:54:79:DC:46:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7ddcaa-4d3b-4bda-99a5-7659d205911a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7ddcaa-4d3b-4bda-99a5-7659d205911a/1/Xa4VaWE6neyqDDiolbXMVHncRkA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.74.0/23
95.131.248.0/21
185.194.88.0/22
IPv6:
2a01:530::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43219
Signature Algorithm: sha256WithRSAEncryption
30:bf:92:e8:c6:b2:f1:86:d6:7f:23:a2:18:77:a8:70:2f:4a:
09:95:cf:73:04:3f:c6:2c:98:90:dd:88:42:05:7e:6f:c4:34:
95:38:c4:a8:15:de:d3:f7:53:09:43:33:0e:99:14:4b:a3:b2:
09:90:84:6f:c3:4d:f6:59:87:9a:ab:12:d8:af:e0:f5:7b:ed:
3a:d0:1c:bd:ee:0c:95:16:9e:70:b8:98:84:03:98:eb:31:48:
b8:f8:50:42:73:57:b0:40:ae:64:0c:93:ab:2b:32:96:a1:cc:
cb:ad:58:80:e0:cf:6a:f8:a2:5a:14:86:1c:dc:8c:98:9e:68:
89:33:f8:f5:67:76:0a:16:4c:42:6f:5e:cb:ab:0a:82:8a:ac:
e5:2f:27:f6:37:c5:d2:13:fc:36:7a:04:08:60:a8:b4:1c:3f:
b9:0d:e6:9d:fc:e5:42:53:b2:42:52:68:1d:38:09:95:36:25:
c3:a6:44:8d:d0:ef:df:1a:11:28:05:bc:df:4a:a4:5f:9c:d9:
0f:d0:b9:26:4e:de:f4:e6:8a:ba:59:b3:fc:24:47:c6:dc:88:
95:99:17:e4:29:3f:05:25:fe:fa:e2:17:5f:ec:f3:c3:53:75:
97:6d:f1:95:37:53:9c:24:da:70:b9:5f:36:01:0a:eb:8d:52:
cf:f6:0c:a1
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgIGAKqp9AWXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTU1ODI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1ZGFlMTU2OTYx
M2E5ZGVjYWEwYzM4YTg5NWI1Y2M1NDc5ZGM0NjQwMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAp8NWXLLpa6UJ/LkfJhcG73YuA1eLH2gxPWqglme4H7er
ravNl/uasHCc26y03TaaumvUx5zB31mtjSSIjZkw4XsoAqAWMish1wDzV2f4u+Sb
PAyQDWziL0NQ004CG2fXJGWKdIWaJpdtmWfCSJwGvjl4vR2H9LBimxPg9O4OU+Gn
5+yIxv7qudrxm3895WRpMbSbEwxssP1oBqWWlePgRrPdGyM/NvR9PHfoYn5kH8SW
AOpRi7nZD2Uro2GF+A3DJKIQ6x1J/2kbKBi2CIHIuxsUTP7dx8RkkwI/34EmJg2Y
/afR53q/sp8QjNVOy/X9kMSY+hKW8aZA7n33kr6+2wIDAQABo4ICuzCCArcwHQYD
VR0OBBYEFF2uFWlhOp3sqgw4qJW1zFR53EZAMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4LzdkZGNhYS00ZDNiLTRiZGEt
OTlhNS03NjU5ZDIwNTkxMWEvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvN2RkY2FhLTRkM2ItNGJkYS05
OWE1LTc2NTlkMjA1OTExYS8xL1hhNFZhV0U2bmV5cUREaW9sYlhNVkhuY1JrQS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAY
BAIAATASAwQBW8JKAwQDX4P4AwQCucJYMA0EAgACMAcDBQMqAQUwMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCo0zANBgkqhkiG9w0BAQsFAAOCAQEAML+S6May8YbW
fyOiGHeocC9KCZXPcwQ/xiyYkN2IQgV+b8Q0lTjEqBXe0/dTCUMzDpkUS6OyCZCE
b8NN9lmHmqsS2K/g9XvtOtAcve4MlRaecLiYhAOY6zFIuPhQQnNXsECuZAyTqysy
lqHMy61YgODPaviiWhSGHNyMmJ5oiTP49Wd2ChZMQm9ey6sKgoqs5S8n9jfF0hP8
NnoECGCotBw/uQ3mnfzlQlOyQlJoHTgJlTYlw6ZEjdDv3xoRKAW830qkX5zZD9C5
Jk7e9OaKulmz/CRHxtyIlZkX5Ck/BSX++uIXX+zzw1N1l23xlTdTnCTacLlfNgEK
641Sz/YMoQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:58 2024 by rpki-client on console-fra.rpki-client.org