Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_tp2vBjQLiDBkDtzHaG_CEJqPKQ.cer
File: _tp2vBjQLiDBkDtzHaG_CEJqPKQ.cer (raw, json)
Hash identifier: 3SWi/CjWrzBCfS02KoLqj7lEiBHX73bji36+MvYINgs=
Subject key identifier: FE:DA:76:BC:18:D0:2E:20:C1:90:3B:73:1D:A1:BF:08:42:6A:3C:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 997341C94C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/10900e-42ce-4ce0-8e4f-aa1fe574c6a4/1/_tp2vBjQLiDBkDtzHaG_CEJqPKQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/10900e-42ce-4ce0-8e4f-aa1fe574c6a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:57:06 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 213273
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 659063687500 (0x997341c94c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:57:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=feda76bc18d02e20c1903b731da1bf08426a3ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:06:13:27:d6:1f:f0:05:3c:57:2d:22:f4:c0:
a9:39:51:e7:9c:72:bc:f9:fa:20:15:f5:95:b6:79:
e4:04:3f:40:6c:08:fa:3a:80:11:f1:8c:49:d9:94:
9e:fd:09:24:1d:f5:92:de:cb:5f:84:ba:23:93:a6:
68:4e:20:d5:2b:2a:b4:de:79:68:8d:5d:e6:b4:a5:
e2:c4:d9:dc:b1:51:aa:3b:e6:6a:42:53:1b:46:c3:
65:a9:22:fa:3e:e1:59:b9:58:07:c8:16:56:a3:2d:
59:24:05:50:9e:07:71:90:80:5f:6d:87:03:d3:85:
07:22:46:27:57:da:3e:c5:af:88:12:4f:bd:9c:05:
7c:72:00:2f:4c:60:1b:0e:d2:46:b5:1d:fd:3c:69:
cf:10:f4:40:d0:6c:38:05:ad:fa:31:c7:68:7e:a0:
9c:32:15:6c:ea:4f:da:89:01:6f:8b:3b:7a:74:68:
68:5e:d7:f8:51:8d:97:ea:5e:3c:68:dd:1e:6f:77:
25:b8:d9:cf:7d:06:fb:c0:9f:12:7f:e9:69:84:a2:
81:f7:87:7e:b3:a9:0e:db:4f:03:a6:22:c2:e6:b3:
43:c0:93:f8:8f:34:0d:7c:cc:b4:dc:7f:b5:64:b0:
1c:06:74:74:04:03:ac:0c:20:94:2a:85:21:af:dc:
07:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DA:76:BC:18:D0:2E:20:C1:90:3B:73:1D:A1:BF:08:42:6A:3C:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/10900e-42ce-4ce0-8e4f-aa1fe574c6a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/10900e-42ce-4ce0-8e4f-aa1fe574c6a4/1/_tp2vBjQLiDBkDtzHaG_CEJqPKQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213273
Signature Algorithm: sha256WithRSAEncryption
07:01:f5:96:f9:1f:60:b6:1d:ea:e5:86:f3:21:bf:3a:50:d7:
65:3e:00:f1:c7:57:87:96:a9:2a:fa:03:4e:37:cc:7c:6f:e6:
4e:b2:af:75:9c:4c:e3:77:d1:cb:a9:59:3d:46:0b:37:65:9d:
2f:46:8a:d4:25:db:08:0d:dd:30:b3:07:b4:8b:ef:01:b1:76:
11:54:0e:6e:16:02:0e:e7:de:d1:5f:da:35:04:8c:a4:a2:03:
1f:7c:49:29:ad:b5:3c:cd:2f:04:c0:18:12:fa:51:3b:b7:f9:
93:91:2d:3d:e0:a7:61:12:59:56:bd:41:cb:66:eb:0a:97:79:
86:d7:47:f6:c3:e2:77:bd:b5:36:57:c0:14:61:57:8b:95:f9:
81:fa:c9:27:c9:a6:bf:8f:97:e7:91:38:42:7c:f5:72:04:f1:
3a:40:8a:d7:8b:8b:56:3f:53:60:f7:2f:f3:c8:42:e9:79:23:
11:ea:80:66:16:2d:41:d9:cb:35:0b:0e:d9:af:05:e1:95:d1:
aa:72:09:85:8c:b8:b5:2a:99:64:ff:a4:fb:18:49:f0:e3:77:
93:f6:c2:ed:04:68:48:e2:7a:a2:50:38:4f:7b:19:46:32:3a:
e3:39:c2:2a:2a:bc:9a:ed:8d:23:89:79:79:32:f0:3c:b9:ec:
3b:cf:ad:61
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIGAJlzQclMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDA1NzA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmZWRhNzZiYzE4
ZDAyZTIwYzE5MDNiNzMxZGExYmYwODQyNmEzY2E0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEApQYTJ9Yf8AU8Vy0i9MCpOVHnnHK8+fogFfWVtnnkBD9A
bAj6OoAR8YxJ2ZSe/QkkHfWS3stfhLojk6ZoTiDVKyq03nlojV3mtKXixNncsVGq
O+ZqQlMbRsNlqSL6PuFZuVgHyBZWoy1ZJAVQngdxkIBfbYcD04UHIkYnV9o+xa+I
Ek+9nAV8cgAvTGAbDtJGtR39PGnPEPRA0Gw4Ba36McdofqCcMhVs6k/aiQFvizt6
dGhoXtf4UY2X6l48aN0eb3cluNnPfQb7wJ8Sf+lphKKB94d+s6kO208DpiLC5rND
wJP4jzQNfMy03H+1ZLAcBnR0BAOsDCCUKoUhr9wHZQIDAQABo4ICfzCCAnswHQYD
VR0OBBYEFP7adrwY0C4gwZA7cx2hvwhCajykMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkLzEwOTAwZS00MmNlLTRjZTAt
OGU0Zi1hYTFmZTU3NGM2YTQvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvMTA5MDBlLTQyY2UtNGNlMC04
ZTRmLWFhMWZlNTc0YzZhNC8xL190cDJ2QmpRTGlEQmtEdHpIYUdfQ0VKcVBLUS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwNBGTANBgkqhkiG9w0BAQsFAAOCAQEABwH1lvkfYLYd6uWG8yG/OlDXZT4A
8cdXh5apKvoDTjfMfG/mTrKvdZxM43fRy6lZPUYLN2WdL0aK1CXbCA3dMLMHtIvv
AbF2EVQObhYCDufe0V/aNQSMpKIDH3xJKa21PM0vBMAYEvpRO7f5k5EtPeCnYRJZ
Vr1By2brCpd5htdH9sPid721NlfAFGFXi5X5gfrJJ8mmv4+X55E4Qnz1cgTxOkCK
14uLVj9TYPcv88hC6XkjEeqAZhYtQdnLNQsO2a8F4ZXRqnIJhYy4tSqZZP+k+xhJ
8ON3k/bC7QRoSOJ6olA4T3sZRjI64znCKiq8mu2NI4l5eTLwPLnsO8+tYQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:40 2024 by rpki-client on console-ams.rpki-client.org