Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_f22-tBpnO-g86MG6jxbqcMRUhk.cer
File: _f22-tBpnO-g86MG6jxbqcMRUhk.cer (raw, json)
Hash identifier: RQUSRPqReyhTwLh3xEv/T4hnPFBf9jrjtUXHKbpWy/E=
Subject key identifier: FD:FD:B6:FA:D0:69:9C:EF:A0:F3:A3:06:EA:3C:5B:A9:C3:11:52:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 990A921929
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/e3a4a1-6d2c-471f-a54a-baffda6a6616/1/_f22-tBpnO-g86MG6jxbqcMRUhk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/e3a4a1-6d2c-471f-a54a-baffda6a6616/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:52:55 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 60905
IP: 45.90.128.0/22
IP: 128.0.48.0/22
IP: 2a10:7bc0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657307343145 (0x990a921929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:52:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdfdb6fad0699cefa0f3a306ea3c5ba9c3115219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f3:c8:20:53:d5:b1:bc:7d:be:74:1f:ef:f2:
b5:e6:b4:c8:4d:88:86:2a:b9:28:ad:cf:f8:72:49:
4d:75:e7:99:1b:8c:5b:d7:29:40:bc:a5:0e:21:6c:
eb:56:3c:b5:d3:9d:67:0c:b5:1a:16:ef:6d:6f:fc:
5b:41:cb:82:2d:6d:98:e6:bf:f7:78:9e:a8:f7:46:
53:04:78:07:18:d1:b3:59:34:26:c1:41:e7:c5:30:
e7:9b:06:f5:e7:9d:11:c2:52:e9:eb:9a:f4:c2:d4:
a5:ac:15:6d:d3:06:f0:75:de:34:ac:42:84:63:72:
13:99:9a:26:1a:de:f6:f8:eb:4d:49:f5:4a:45:60:
d6:00:56:dd:be:ff:89:92:a6:01:e5:30:b6:88:84:
2a:59:56:77:51:d2:be:b2:37:cf:04:c6:9a:bd:8b:
47:db:f7:50:d4:b7:66:a6:5f:5f:19:1c:1a:1a:ff:
00:ed:4d:21:0a:ce:1d:f2:01:5f:c3:ae:9f:f0:c7:
f3:4c:de:67:64:4b:d4:a6:7f:04:0b:46:4c:39:42:
83:07:f4:86:f0:6f:fa:41:52:51:5e:24:c3:81:ea:
84:3f:fd:31:20:84:5a:14:13:66:2e:a8:2f:29:fd:
73:a8:cc:7f:14:08:3e:21:f6:1f:c2:f7:8d:cf:ee:
0e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FD:B6:FA:D0:69:9C:EF:A0:F3:A3:06:EA:3C:5B:A9:C3:11:52:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e3a4a1-6d2c-471f-a54a-baffda6a6616/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e3a4a1-6d2c-471f-a54a-baffda6a6616/1/_f22-tBpnO-g86MG6jxbqcMRUhk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.128.0/22
128.0.48.0/22
IPv6:
2a10:7bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60905
Signature Algorithm: sha256WithRSAEncryption
7a:bd:a6:db:de:1d:47:c7:08:72:73:6b:e6:e2:35:dd:56:23:
55:15:6c:5f:83:78:38:76:46:6e:19:4c:92:10:bd:a0:e6:e4:
80:1c:8c:00:8e:cb:ea:5c:48:95:b2:f8:29:b2:c8:a7:ad:e7:
00:b3:2c:62:5d:2c:f8:0c:a1:e1:b7:5e:2d:fa:b4:8f:1a:ed:
37:a1:d4:11:b0:ce:2f:84:63:18:41:fb:0c:f1:9c:72:3f:2f:
09:b8:d9:cd:ad:50:0e:6a:9d:e3:c5:0d:7e:2e:b8:f4:82:70:
1a:5c:ce:4c:d3:87:74:06:54:73:ff:21:af:e4:d9:6d:23:72:
35:a7:f0:e6:13:96:a7:7c:48:0e:b2:88:0c:ef:33:22:74:a4:
55:7f:04:33:a7:38:04:1c:1f:c9:74:eb:45:ea:25:67:3c:fe:
e9:59:54:b1:b8:b5:e2:fa:41:9d:bf:e5:ef:7e:44:c5:fa:59:
dc:22:6f:ea:47:19:0f:81:21:56:21:32:88:bd:65:7d:06:e4:
ce:c4:ec:77:ec:1e:0d:29:b6:ce:90:ba:11:47:c3:d6:b9:76:
ad:54:06:d9:e7:24:a4:1d:09:0f:96:7c:a2:9b:bb:c8:9f:16:
59:bb:e2:0c:57:bc:36:7b:fa:a0:89:72:18:9f:9a:d2:a9:36:
b7:c7:5a:30
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIGAJkKkhkpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDA1MjU1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmZGZkYjZmYWQw
Njk5Y2VmYTBmM2EzMDZlYTNjNWJhOWMzMTE1MjE5MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAwfPIIFPVsbx9vnQf7/K15rTITYiGKrkorc/4cklNdeeZ
G4xb1ylAvKUOIWzrVjy1051nDLUaFu9tb/xbQcuCLW2Y5r/3eJ6o90ZTBHgHGNGz
WTQmwUHnxTDnmwb1550RwlLp65r0wtSlrBVt0wbwdd40rEKEY3ITmZomGt72+OtN
SfVKRWDWAFbdvv+JkqYB5TC2iIQqWVZ3UdK+sjfPBMaavYtH2/dQ1Ldmpl9fGRwa
Gv8A7U0hCs4d8gFfw66f8MfzTN5nZEvUpn8EC0ZMOUKDB/SG8G/6QVJRXiTDgeqE
P/0xIIRaFBNmLqgvKf1zqMx/FAg+IfYfwveNz+4O5wIDAQABo4ICtTCCArEwHQYD
VR0OBBYEFP39tvrQaZzvoPOjBuo8W6nDEVIZMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjL2UzYTRhMS02ZDJjLTQ3MWYt
YTU0YS1iYWZmZGE2YTY2MTYvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvZTNhNGExLTZkMmMtNDcxZi1h
NTRhLWJhZmZkYTZhNjYxNi8xL19mMjItdEJwbk8tZzg2TUc2anhicWNNUlVoay5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQCLVqAAwQCgAAwMA0EAgACMAcDBQMqEHvAMBoGCCsGAQUFBwEIAQH/
BAswCaAHMAUCAwDt6TANBgkqhkiG9w0BAQsFAAOCAQEAer2m294dR8cIcnNr5uI1
3VYjVRVsX4N4OHZGbhlMkhC9oObkgByMAI7L6lxIlbL4KbLIp63nALMsYl0s+Ayh
4bdeLfq0jxrtN6HUEbDOL4RjGEH7DPGccj8vCbjZza1QDmqd48UNfi649IJwGlzO
TNOHdAZUc/8hr+TZbSNyNafw5hOWp3xIDrKIDO8zInSkVX8EM6c4BBwfyXTrReol
Zzz+6VlUsbi14vpBnb/l735ExfpZ3CJv6kcZD4EhViEyiL1lfQbkzsTsd+weDSm2
zpC6EUfD1rl2rVQG2eckpB0JD5Z8opu7yJ8WWbviDFe8Nnv6oIlyGJ+a0qk2t8da
MA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:40 2024 by rpki-client on console-fra.rpki-client.org