Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z89xSJahJXvXzrEcK78Q4n39N4I.cer
File: Z89xSJahJXvXzrEcK78Q4n39N4I.cer (raw, json)
Hash identifier: C23E3cbxBqt79ugUTPszpMvO0IcexdiSvPRyVqRTKsA=
Subject key identifier: 67:CF:71:48:96:A1:25:7B:D7:CE:B1:1C:2B:BF:10:E2:7D:FD:37:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A8AA04093B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/289081-1925-4eb2-aee3-c0de6ed8b303/1/Z89xSJahJXvXzrEcK78Q4n39N4I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/289081-1925-4eb2-aee3-c0de6ed8b303/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:02:25 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.164.4.0/22
IP: 2a0a:7c00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 724406896955 (0xa8aa04093b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:02:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67cf714896a1257bd7ceb11c2bbf10e27dfd3782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:8a:df:62:b1:d7:37:93:12:4c:00:79:bf:
82:ff:a5:b0:77:c2:cd:8a:14:60:4a:90:f1:f0:a6:
30:0b:b0:48:0a:5f:28:85:98:aa:55:21:62:b6:ae:
bb:b3:ea:a1:9e:c8:a1:d7:69:53:45:25:73:ad:f5:
02:88:50:c8:53:cb:d6:88:6c:0e:f7:cb:1c:55:90:
01:01:0c:12:19:7d:99:61:02:24:7c:3c:f9:bd:de:
2e:0f:c5:71:0f:a1:fd:b1:c8:9e:f9:49:ec:57:91:
0e:fd:2c:d9:c8:6e:1e:00:24:3a:1d:c5:10:d1:1d:
1b:e0:b1:bf:14:da:a1:a3:c9:dc:ee:00:8b:07:9b:
86:72:2e:22:0a:b4:5b:bb:03:83:c2:cd:8e:72:0f:
2e:3b:7b:e0:fe:0b:ce:6d:04:04:fc:ef:6e:83:22:
77:c6:dd:0e:41:22:0e:f8:58:44:b6:c0:12:19:27:
e9:bb:3d:48:9f:1d:6e:26:42:8d:4f:e3:f0:71:45:
a5:f1:a0:2a:73:d2:9e:5e:95:0b:d6:09:cf:e7:94:
9e:19:7d:f8:df:89:e4:30:79:4c:c1:94:92:8e:df:
e7:b9:d3:3f:ea:94:ce:3f:55:d2:a0:30:40:a2:54:
ed:d9:75:6c:46:13:99:0d:22:21:14:6f:62:0a:74:
f1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CF:71:48:96:A1:25:7B:D7:CE:B1:1C:2B:BF:10:E2:7D:FD:37:82
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/289081-1925-4eb2-aee3-c0de6ed8b303/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/289081-1925-4eb2-aee3-c0de6ed8b303/1/Z89xSJahJXvXzrEcK78Q4n39N4I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.4.0/22
IPv6:
2a0a:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
43:5e:6b:5e:a5:be:58:ac:8f:08:22:5e:6c:25:10:66:3c:0d:
76:a5:28:88:52:cf:b4:63:cb:97:2d:f7:70:84:c0:15:81:3a:
2a:c8:7d:cc:cb:12:45:a9:6e:ac:7f:ac:07:14:43:df:70:d7:
b9:2d:b1:54:e4:76:64:08:e4:00:3c:d5:0a:8f:7b:16:29:a3:
ed:f8:40:4c:ee:e7:35:da:ad:ec:60:57:f8:4d:84:4e:c4:99:
d2:c7:3c:81:ba:c3:e2:93:fb:0e:9f:4f:8c:23:c8:ce:68:cf:
8e:36:24:39:81:81:97:a8:e1:d7:a6:4a:34:6b:14:37:cc:f0:
de:4a:a4:bf:85:b4:12:ce:46:e3:96:ce:3e:7a:f9:ba:3b:26:
7a:08:c4:16:04:31:fc:7d:9d:77:e9:b3:5d:29:cf:70:a5:1f:
37:20:41:0b:81:cf:3b:4b:84:93:f4:a6:4c:9e:eb:92:1e:3e:
19:ab:2c:47:d3:8c:b8:19:2f:cd:1f:d9:d2:12:93:4f:58:bb:
87:2a:3c:b4:bd:6b:67:40:e4:67:42:d0:d1:80:bc:a5:a8:08:
d3:ef:fd:eb:aa:83:1c:22:af:a3:ee:5a:7e:0d:ba:e0:86:61:
9d:f5:51:26:c1:65:08:0b:16:b9:1e:05:ab:7d:67:46:c3:ad:
96:10:1e:88
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIGAKiqBAk7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTQwMjI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2N2NmNzE0ODk2
YTEyNTdiZDdjZWIxMWMyYmJmMTBlMjdkZmQzNzgyMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAr/mK32Kx1zeTEkwAeb+C/6Wwd8LNihRgSpDx8KYwC7BI
Cl8ohZiqVSFitq67s+qhnsih12lTRSVzrfUCiFDIU8vWiGwO98scVZABAQwSGX2Z
YQIkfDz5vd4uD8VxD6H9scie+UnsV5EO/SzZyG4eACQ6HcUQ0R0b4LG/FNqho8nc
7gCLB5uGci4iCrRbuwODws2Ocg8uO3vg/gvObQQE/O9ugyJ3xt0OQSIO+FhEtsAS
GSfpuz1Inx1uJkKNT+PwcUWl8aAqc9KeXpUL1gnP55SeGX3434nkMHlMwZSSjt/n
udM/6pTOP1XSoDBAolTt2XVsRhOZDSIhFG9iCnTxjwIDAQABo4ICkzCCAo8wHQYD
VR0OBBYEFGfPcUiWoSV7186xHCu/EOJ9/TeCMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFmLzI4OTA4MS0xOTI1LTRlYjIt
YWVlMy1jMGRlNmVkOGIzMDMvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYvMjg5MDgxLTE5MjUtNGViMi1h
ZWUzLWMwZGU2ZWQ4YjMwMy8xL1o4OXhTSmFoSlh2WHpyRWNLNzhRNG4zOU40SS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCuaQEMA0EAgACMAcDBQMqCnwAMA0GCSqGSIb3DQEBCwUAA4IBAQBD
Xmtepb5YrI8IIl5sJRBmPA12pSiIUs+0Y8uXLfdwhMAVgToqyH3MyxJFqW6sf6wH
FEPfcNe5LbFU5HZkCOQAPNUKj3sWKaPt+EBM7uc12q3sYFf4TYROxJnSxzyBusPi
k/sOn0+MI8jOaM+ONiQ5gYGXqOHXpko0axQ3zPDeSqS/hbQSzkbjls4+evm6OyZ6
CMQWBDH8fZ136bNdKc9wpR83IEELgc87S4ST9KZMnuuSHj4ZqyxH04y4GS/NH9nS
EpNPWLuHKjy0vWtnQORnQtDRgLylqAjT7/3rqoMcIq+j7lp+DbrghmGd9VEmwWUI
Cxa5HgWrfWdGw62WEB6I
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:20 2024 by rpki-client on console-fra.rpki-client.org