Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6BjhYb2TMAFTk5OEgIQmcdo74A.cer
File: a6BjhYb2TMAFTk5OEgIQmcdo74A.cer (raw, json)
Hash identifier: opS5UKs/Hi16IWx04mBQ0eH3dTXMjIiE/a01zrjoTF0=
Subject key identifier: 6B:A0:63:85:86:F6:4C:C0:05:4E:4E:4E:12:02:10:99:C7:68:EF:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AA84C4AE92
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/1fa9af-cc8c-402f-a1f6-4262f66adda8/1/a6BjhYb2TMAFTk5OEgIQmcdo74A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/1fa9af-cc8c-402f-a1f6-4262f66adda8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:56:23 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 44876
IP: 93.95.24.0/21
IP: 195.82.138.0/23
IP: 2001:7f8:4f::/48
IP: 2a00:1150::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 732371922578 (0xaa84c4ae92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ba0638586f64cc0054e4e4e12021099c768ef80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f5:74:cf:f6:12:e4:0f:d1:62:e9:bb:65:9e:
1a:e6:b9:c8:77:30:18:61:7d:e6:22:fc:aa:49:81:
cb:da:55:f7:ec:e3:cc:dd:33:9a:42:2b:cc:dd:91:
f9:85:14:b1:48:e8:a3:7d:3b:cd:0b:d0:ad:da:57:
8a:8a:d1:aa:ff:60:51:5f:e7:20:17:74:19:bb:c1:
e0:52:52:9e:a5:e6:2e:de:54:bd:2d:fe:00:12:d3:
25:1c:aa:10:85:77:ac:ff:fd:7e:23:b3:89:40:9d:
f2:c8:2d:f6:ac:23:4f:81:c6:d8:22:59:9b:a4:61:
05:a1:51:b9:ca:9d:e5:ca:ae:33:b4:9f:3c:17:af:
6a:b5:e9:03:1f:8c:3a:fb:fc:87:ef:66:08:d5:94:
b7:3d:27:84:29:7d:90:c2:85:61:de:75:06:d3:67:
08:6d:f8:6f:52:52:42:43:9f:f5:2c:e3:0f:0d:23:
89:5b:45:10:04:3c:f5:89:7b:96:7b:4d:8c:f0:a3:
df:be:c9:28:86:ad:8d:6d:41:16:c4:ad:0a:5f:c3:
bb:f2:08:85:ec:fc:5f:08:40:03:29:ad:b8:90:5c:
a4:69:70:5c:c3:ae:45:29:52:17:4e:f2:28:69:36:
a6:fe:cd:58:05:9b:89:77:b4:a2:e8:a2:f6:81:8f:
63:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A0:63:85:86:F6:4C:C0:05:4E:4E:4E:12:02:10:99:C7:68:EF:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fa9af-cc8c-402f-a1f6-4262f66adda8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fa9af-cc8c-402f-a1f6-4262f66adda8/1/a6BjhYb2TMAFTk5OEgIQmcdo74A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.24.0/21
195.82.138.0/23
IPv6:
2001:7f8:4f::/48
2a00:1150::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44876
Signature Algorithm: sha256WithRSAEncryption
29:56:de:01:1e:1d:93:26:eb:b3:fb:66:b1:39:4e:7d:db:41:
29:29:d8:21:cf:ee:e6:7f:44:7f:3c:e4:36:34:46:43:2c:2c:
2b:46:ed:4a:88:eb:53:19:aa:7f:5d:21:d7:b6:0b:82:9e:96:
e2:56:53:5a:6f:6f:4f:ca:1c:e9:51:d6:a1:b1:10:b4:d0:de:
a4:b7:7b:7b:df:65:d7:be:fd:c7:7f:19:6d:f4:1d:50:d2:ca:
98:0b:1d:58:4c:35:43:1b:40:e4:13:3f:34:d3:d7:9a:77:a5:
81:70:72:d4:17:12:a6:82:79:fd:c6:80:55:ac:73:11:bb:89:
05:7f:7b:13:85:6f:40:61:73:29:4f:99:39:fa:ac:58:86:8f:
0f:d8:8a:34:03:34:39:a6:5b:7c:71:02:a0:20:b8:45:b2:57:
b5:2d:62:c1:19:bc:ed:fe:c1:72:b5:57:22:fa:fc:55:d3:36:
9f:59:ff:bf:83:26:9b:aa:33:38:d7:47:0b:5c:03:a3:11:b0:
65:bc:0a:7d:54:f1:74:ac:f4:79:81:6a:ea:fb:0c:ca:0d:83:
bd:e1:1f:52:22:fc:8c:cf:11:bb:85:50:43:ae:d9:51:57:2a:
9d:d5:5c:91:d9:13:a6:a6:5c:e4:20:ac:55:d2:73:26:ab:ba:
87:70:b9:30
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIGAKqExK6SMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTU1NjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2YmEwNjM4NTg2
ZjY0Y2MwMDU0ZTRlNGUxMjAyMTA5OWM3NjhlZjgwMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAyvV0z/YS5A/RYum7ZZ4a5rnIdzAYYX3mIvyqSYHL2lX3
7OPM3TOaQivM3ZH5hRSxSOijfTvNC9Ct2leKitGq/2BRX+cgF3QZu8HgUlKepeYu
3lS9Lf4AEtMlHKoQhXes//1+I7OJQJ3yyC32rCNPgcbYIlmbpGEFoVG5yp3lyq4z
tJ88F69qtekDH4w6+/yH72YI1ZS3PSeEKX2QwoVh3nUG02cIbfhvUlJCQ5/1LOMP
DSOJW0UQBDz1iXuWe02M8KPfvskohq2NbUEWxK0KX8O78giF7PxfCEADKa24kFyk
aXBcw65FKVIXTvIoaTam/s1YBZuJd7Si6KL2gY9jXwIDAQABo4ICvjCCArowHQYD
VR0OBBYEFGugY4WG9kzABU5OThICEJnHaO+AMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxLzFmYTlhZi1jYzhjLTQwMmYt
YTFmNi00MjYyZjY2YWRkYTgvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvMWZhOWFmLWNjOGMtNDAyZi1h
MWY2LTQyNjJmNjZhZGRhOC8xL2E2QmpoWWIyVE1BRlRrNU9FZ0lRbWNkbzc0QS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAS
BAIAATAMAwQDXV8YAwQBw1KKMBYEAgACMBADBwAgAQf4AE8DBQAqABFQMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwCvTDANBgkqhkiG9w0BAQsFAAOCAQEAKVbeAR4d
kybrs/tmsTlOfdtBKSnYIc/u5n9EfzzkNjRGQywsK0btSojrUxmqf10h17YLgp6W
4lZTWm9vT8oc6VHWobEQtNDepLd7e99l1779x38ZbfQdUNLKmAsdWEw1QxtA5BM/
NNPXmnelgXBy1BcSpoJ5/caAVaxzEbuJBX97E4VvQGFzKU+ZOfqsWIaPD9iKNAM0
OaZbfHECoCC4RbJXtS1iwRm87f7BcrVXIvr8VdM2n1n/v4Mmm6ozONdHC1wDoxGw
ZbwKfVTxdKz0eYFq6vsMyg2DveEfUiL8jM8Ru4VQQ67ZUVcqndVckdkTpqZc5CCs
VdJzJqu6h3C5MA==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:54 2025 by rpki-client