Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aR-vpgGOcAb0kGctkBfhunWPeXo.cer
File: aR-vpgGOcAb0kGctkBfhunWPeXo.cer (raw, json)
Hash identifier: uNpuwYIVTL0p++lUT+IO0hgUhaEk80nV5t4DvFObn60=
Subject key identifier: 69:1F:AF:A6:01:8E:70:06:F4:90:67:2D:90:17:E1:BA:75:8F:79:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A3B4FAFF11
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/e19420-faf0-4fc5-a5f9-99c0f071136b/1/aR-vpgGOcAb0kGctkBfhunWPeXo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/e19420-faf0-4fc5-a5f9-99c0f071136b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:56:19 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.241.172.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 703116017425 (0xa3b4faff11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:56:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=691fafa6018e7006f490672d9017e1ba758f797a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:38:54:6b:de:64:8e:13:18:1c:fb:65:13:5d:
2d:83:ab:52:49:fb:f1:5f:db:ee:d7:e4:7c:35:99:
27:96:a2:60:e8:9a:7f:49:af:a1:0a:94:3e:49:f6:
55:90:3d:1b:9a:48:82:c6:85:12:0f:7e:a9:54:e3:
83:1a:d5:e5:bd:f0:e6:a3:27:03:ae:28:a1:6f:2d:
77:4b:29:fb:b4:88:fe:6c:8e:45:82:35:c3:04:65:
df:1d:2b:ef:d2:17:2c:e2:0d:a5:c5:e3:aa:ea:a4:
30:c3:71:85:ac:e0:df:70:19:98:e4:bd:a4:5b:d5:
3f:c1:7c:8a:f7:e9:b5:15:0f:24:e9:db:3c:66:ae:
7e:34:7a:2f:3c:0d:76:7a:52:e6:7b:78:ba:a1:11:
ae:90:6d:a7:e4:fe:b5:0b:3a:1f:48:97:19:ef:47:
84:fe:02:13:05:df:60:a4:9c:7a:91:90:b9:f3:45:
d3:f8:08:5d:ab:14:d0:f0:b1:eb:71:64:99:57:7f:
5f:7c:69:ed:f3:39:c5:4c:d2:b3:ff:4f:59:5a:4a:
2c:6f:bf:65:f8:80:eb:80:f7:a8:cb:4f:a7:40:c6:
7e:55:fb:fb:27:20:d6:e2:07:00:91:6f:31:9c:d7:
a2:7a:f6:e1:0e:34:fb:be:14:07:c7:00:89:8b:71:
4c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1F:AF:A6:01:8E:70:06:F4:90:67:2D:90:17:E1:BA:75:8F:79:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e19420-faf0-4fc5-a5f9-99c0f071136b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e19420-faf0-4fc5-a5f9-99c0f071136b/1/aR-vpgGOcAb0kGctkBfhunWPeXo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.172.0/22
Signature Algorithm: sha256WithRSAEncryption
46:1e:38:c9:3d:2a:90:de:41:b7:cc:59:7a:0c:cc:41:c3:4f:
41:ec:8f:40:d0:d1:36:10:5a:76:51:11:7e:5a:bc:65:2a:5e:
f9:82:ef:cc:06:d5:2c:ef:5f:a2:81:ac:4f:8d:db:d5:37:d0:
e5:12:36:1c:8d:fa:ca:59:e8:d0:14:ec:af:b6:37:4c:cb:98:
22:f6:fc:88:7f:23:3f:92:54:05:eb:e7:bf:2e:73:fb:9c:87:
17:b3:28:4f:28:df:62:62:0d:69:eb:35:d4:8f:26:bd:8a:28:
70:e8:a2:52:a6:53:d3:26:89:7e:b4:a5:51:9b:aa:25:55:08:
64:83:0a:a8:ae:26:12:b1:0f:c9:c1:5a:da:4c:e7:db:76:c1:
85:9b:80:4f:16:66:66:64:17:81:fd:29:f0:62:a6:e7:dc:0f:
cc:d1:d0:5d:4e:7a:f3:f5:e2:87:da:11:75:27:f8:fc:fb:9e:
0b:78:cc:b1:ad:bd:dd:38:af:c5:49:39:40:40:c3:d7:70:6d:
55:de:e5:9a:82:dd:f2:b0:ca:27:c7:83:ed:8b:85:1b:b8:a7:
89:0b:37:e3:3c:4f:c4:33:bd:7a:cf:ed:bd:7c:1d:5d:18:88:
be:ee:0e:90:9b:1e:1a:1d:4c:e0:12:80:74:54:3c:4a:d7:a8:
50:eb:53:bd
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAKO0+v8RMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDk1NjE5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2OTFmYWZhNjAx
OGU3MDA2ZjQ5MDY3MmQ5MDE3ZTFiYTc1OGY3OTdhMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAtjhUa95kjhMYHPtlE10tg6tSSfvxX9vu1+R8NZknlqJg
6Jp/Sa+hCpQ+SfZVkD0bmkiCxoUSD36pVOODGtXlvfDmoycDriihby13Syn7tIj+
bI5FgjXDBGXfHSvv0hcs4g2lxeOq6qQww3GFrODfcBmY5L2kW9U/wXyK9+m1FQ8k
6ds8Zq5+NHovPA12elLme3i6oRGukG2n5P61CzofSJcZ70eE/gITBd9gpJx6kZC5
80XT+AhdqxTQ8LHrcWSZV39ffGnt8znFTNKz/09ZWkosb79l+IDrgPeoy0+nQMZ+
Vfv7JyDW4gcAkW8xnNeievbhDjT7vhQHxwCJi3FMDQIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFGkfr6YBjnAG9JBnLZAX4bp1j3l6MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyL2UxOTQyMC1mYWYwLTRmYzUt
YTVmOS05OWMwZjA3MTEzNmIvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvZTE5NDIwLWZhZjAtNGZjNS1h
NWY5LTk5YzBmMDcxMTM2Yi8xL2FSLXZwZ0dPY0FiMGtHY3RrQmZodW5XUGVYby5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCufGsMA0GCSqGSIb3DQEBCwUAA4IBAQBGHjjJPSqQ3kG3zFl6DMxB
w09B7I9A0NE2EFp2URF+WrxlKl75gu/MBtUs71+igaxPjdvVN9DlEjYcjfrKWejQ
FOyvtjdMy5gi9vyIfyM/klQF6+e/LnP7nIcXsyhPKN9iYg1p6zXUjya9iihw6KJS
plPTJol+tKVRm6olVQhkgwqoriYSsQ/JwVraTOfbdsGFm4BPFmZmZBeB/SnwYqbn
3A/M0dBdTnrz9eKH2hF1J/j8+54LeMyxrb3dOK/FSTlAQMPXcG1V3uWagt3ysMon
x4Pti4UbuKeJCzfjPE/EM716z+29fB1dGIi+7g6Qmx4aHUzgEoB0VDxK16hQ61O9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:07 2024 by rpki-client on console-fra.rpki-client.org