Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZZN4pJ4J-1LJ-g4g7oWreERsJyQ.cer
File: ZZN4pJ4J-1LJ-g4g7oWreERsJyQ.cer (raw, json)
Hash identifier: Ciszu/VJI5oqfqUFn3DO7yYzGqsOc81vKXL9VztIqrc=
Subject key identifier: 65:93:78:A4:9E:09:FB:52:C9:FA:0E:20:EE:85:AB:78:44:6C:27:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B2398B984F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/04086f-6326-465d-83df-47a40c928754/1/ZZN4pJ4J-1LJ-g4g7oWreERsJyQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/04086f-6326-465d-83df-47a40c928754/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 25 May 2022 06:27:42 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 203566
IP: 2a0e:d380::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 765469628495 (0xb2398b984f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 25 06:27:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=659378a49e09fb52c9fa0e20ee85ab78446c2724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c6:95:47:1d:29:13:f7:36:4d:03:11:9b:c2:
9c:3b:b3:66:4f:2a:b4:0b:e9:e4:a8:46:af:b1:41:
a7:f1:a9:74:d9:da:0a:63:e7:73:ff:8c:3a:78:5d:
a8:b1:08:63:ea:e4:82:df:fe:e1:38:1d:58:0f:e7:
2b:0c:9d:cd:6c:3c:51:ac:43:d8:0a:c6:9d:28:14:
6d:8f:dd:0f:bc:82:fa:09:db:f5:5e:e3:5d:a5:03:
d2:08:df:3b:24:7a:df:73:03:3c:d5:c9:78:58:c5:
4f:9f:c8:a5:ef:14:24:58:24:77:7b:7e:04:5c:65:
18:64:2c:67:cf:4d:fc:7c:5e:83:b2:c8:9b:58:3b:
d0:04:a4:7e:27:54:37:9d:11:be:ea:b6:b1:19:a0:
7f:63:f2:76:eb:cb:cf:a0:dc:26:64:a4:2b:26:72:
13:c3:fc:ae:a8:01:11:4c:93:f7:de:8d:5f:a1:9c:
49:0b:eb:5a:68:46:d7:f3:c5:8c:c5:5c:7f:c0:50:
39:1d:d4:c5:15:15:c2:36:9b:df:9e:4c:1c:00:d9:
38:a3:0e:fe:3d:76:29:5b:41:62:68:84:ae:38:95:
a6:a9:26:af:c9:c9:c1:d3:55:31:7c:60:15:89:43:
1a:34:b5:b7:07:81:8f:0e:ee:93:53:80:7b:5c:e7:
da:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:93:78:A4:9E:09:FB:52:C9:FA:0E:20:EE:85:AB:78:44:6C:27:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/04086f-6326-465d-83df-47a40c928754/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/04086f-6326-465d-83df-47a40c928754/1/ZZN4pJ4J-1LJ-g4g7oWreERsJyQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203566
Signature Algorithm: sha256WithRSAEncryption
13:1e:56:f0:32:bc:12:a0:96:2b:56:a7:dc:5b:73:42:7d:d3:
7e:8f:5d:d5:54:39:b5:01:51:e8:e1:d6:66:d4:8f:c9:1d:9f:
c9:a6:a5:a4:f9:8a:b9:19:7f:98:04:43:ba:d0:6b:75:ab:de:
9d:95:46:32:cd:f0:1a:22:9c:a6:7b:3a:39:0d:76:8a:bc:0d:
2a:2f:d6:25:1e:44:8b:41:7b:15:0d:84:43:06:20:b5:d2:f3:
df:8c:d2:c5:aa:1b:a3:20:b7:f1:bf:87:f4:38:4f:a2:ae:dc:
8c:0b:e1:29:c7:3f:d0:44:24:cc:3f:f1:75:6a:bb:3b:22:d7:
0b:6a:d1:c7:01:f4:40:ee:73:79:72:65:1f:d0:02:b4:33:b3:
aa:40:60:62:21:65:6c:d2:0a:de:ba:0d:8e:b8:4a:96:f4:55:
74:43:7f:28:b5:26:31:b0:87:f9:cf:a5:fa:06:1d:83:51:9e:
27:68:f0:89:6f:90:78:af:88:af:1b:bf:8b:83:4a:78:8e:7f:
9b:95:79:76:00:9c:e9:bd:73:96:24:d2:6b:19:60:45:9f:c3:
25:fa:85:ff:2f:54:4a:7a:26:e3:f9:95:c8:7a:a4:66:87:59:
b1:54:1c:77:ef:90:ee:94:d8:04:23:b4:16:03:82:0d:91:22:
53:08:cf:87
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIGALI5i5hPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
NTI1MDYyNzQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2NTkzNzhhNDll
MDlmYjUyYzlmYTBlMjBlZTg1YWI3ODQ0NmMyNzI0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAxMaVRx0pE/c2TQMRm8KcO7NmTyq0C+nkqEavsUGn8al0
2doKY+dz/4w6eF2osQhj6uSC3/7hOB1YD+crDJ3NbDxRrEPYCsadKBRtj90PvIL6
Cdv1XuNdpQPSCN87JHrfcwM81cl4WMVPn8il7xQkWCR3e34EXGUYZCxnz038fF6D
ssibWDvQBKR+J1Q3nRG+6raxGaB/Y/J268vPoNwmZKQrJnITw/yuqAERTJP33o1f
oZxJC+taaEbX88WMxVx/wFA5HdTFFRXCNpvfnkwcANk4ow7+PXYpW0FiaISuOJWm
qSavycnB01UxfGAViUMaNLW3B4GPDu6TU4B7XOfaQQIDAQABo4ICoTCCAp0wHQYD
VR0OBBYEFGWTeKSeCftSyfoOIO6Fq3hEbCckMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxLzA0MDg2Zi02MzI2LTQ2NWQt
ODNkZi00N2E0MGM5Mjg3NTQvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvMDQwODZmLTYzMjYtNDY1ZC04
M2RmLTQ3YTQwYzkyODc1NC8xL1paTjRwSjRKLTFMSi1nNGc3b1dyZUVSc0p5US5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUDKg7TgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDGy4wDQYJKoZI
hvcNAQELBQADggEBABMeVvAyvBKglitWp9xbc0J9036PXdVUObUBUejh1mbUj8kd
n8mmpaT5irkZf5gEQ7rQa3Wr3p2VRjLN8BoinKZ7OjkNdoq8DSov1iUeRItBexUN
hEMGILXS89+M0sWqG6Mgt/G/h/Q4T6Ku3IwL4SnHP9BEJMw/8XVquzsi1wtq0ccB
9EDuc3lyZR/QArQzs6pAYGIhZWzSCt66DY64Spb0VXRDfyi1JjGwh/nPpfoGHYNR
nido8IlvkHiviK8bv4uDSniOf5uVeXYAnOm9c5Yk0msZYEWfwyX6hf8vVEp6JuP5
lch6pGaHWbFUHHfvkO6U2AQjtBYDgg2RIlMIz4c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:17 2024 by rpki-client on console-ams.rpki-client.org