Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aS8uySA4HY_e2m2do0vU1O5xZ8A.cer
File: aS8uySA4HY_e2m2do0vU1O5xZ8A.cer (raw, json)
Hash identifier: 5McvWDAOiu3dohjVb/tEz2s6MRrHrVE5ZTCyofx7ayU=
Subject key identifier: 69:2F:2E:C9:20:38:1D:8F:DE:DA:6D:9D:A3:4B:D4:D4:EE:71:67:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9ED6335142
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/81f2a2-ad1b-4c91-b5fe-4cca4a4d9b2e/1/aS8uySA4HY_e2m2do0vU1O5xZ8A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/81f2a2-ad1b-4c91-b5fe-4cca4a4d9b2e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:53:01 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 83.171.244.0/22
IP: 2a09:4900::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 682198520130 (0x9ed6335142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:53:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=692f2ec920381d8fdeda6d9da34bd4d4ee7167c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:8d:7f:43:c9:12:5e:f5:2a:45:f4:46:dc:
de:df:72:15:93:05:8f:8c:3a:37:12:e3:96:87:4a:
18:9c:10:69:92:45:74:12:fe:8d:87:af:38:94:6e:
b7:f7:28:69:67:51:29:9f:e5:75:e0:02:a3:82:cb:
18:72:85:0c:92:3f:b1:d1:b3:e8:ec:31:bc:54:0e:
e9:74:ea:8a:38:e9:e6:02:74:08:ba:35:0a:bf:4b:
57:77:9a:e7:98:d6:11:f7:4a:0c:0c:1e:88:92:a2:
73:7f:99:7b:5c:40:f8:ce:4f:cd:7e:be:50:4a:ef:
72:7e:dd:e2:e0:25:8f:7d:0a:88:0b:16:4c:39:8d:
b7:18:85:8b:49:d3:a3:2c:1e:03:81:ba:90:64:e9:
da:8c:8b:fb:5c:ba:d9:79:d9:47:02:76:2a:5f:3a:
3f:4d:6f:86:0e:c4:5a:89:43:2a:30:31:07:05:39:
0a:4a:20:f3:91:78:fb:ec:b8:03:34:68:71:7e:4a:
72:0d:ba:39:c6:96:af:a5:ea:51:6a:fa:02:03:54:
ed:5e:e3:f3:e0:84:d3:94:fc:c7:1e:5b:61:18:74:
55:a3:c5:76:51:18:8d:25:53:e6:ad:f9:fd:30:1d:
98:55:09:85:e3:e1:71:5d:ba:82:ec:d6:ff:5b:28:
1a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2F:2E:C9:20:38:1D:8F:DE:DA:6D:9D:A3:4B:D4:D4:EE:71:67:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/81f2a2-ad1b-4c91-b5fe-4cca4a4d9b2e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/81f2a2-ad1b-4c91-b5fe-4cca4a4d9b2e/1/aS8uySA4HY_e2m2do0vU1O5xZ8A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.244.0/22
IPv6:
2a09:4900::/29
Signature Algorithm: sha256WithRSAEncryption
9e:76:9a:4c:4f:9a:18:e0:e2:04:94:a3:b7:bd:34:5c:e7:f5:
e0:86:75:6b:67:84:47:a5:3d:70:b8:e4:ab:e4:4e:8c:c9:b8:
5d:de:21:d7:95:c3:66:86:9a:1a:e8:06:ee:b1:43:6d:93:2c:
3e:5a:47:fe:c1:75:1c:7e:d8:18:fb:52:20:e8:bc:25:f3:d0:
23:f6:0f:d9:2a:68:86:6d:13:7c:62:fc:18:a1:47:9b:be:17:
e8:84:3f:8d:5c:53:e6:c6:0f:41:25:4f:e6:fb:80:85:b6:db:
40:6d:60:65:35:b9:b7:7d:62:c3:cd:ad:03:54:1a:12:4c:4a:
ef:39:a2:8f:20:5c:00:d2:e7:a5:a1:08:1b:0d:78:0e:a8:3a:
91:b8:cb:14:b6:20:8c:db:63:68:72:bf:ae:21:03:00:72:71:
0f:3a:ba:86:af:89:41:cb:4a:de:53:d3:5c:e1:05:4c:03:9b:
e7:3a:b2:a7:e5:63:86:03:ab:15:6f:19:4e:d4:d6:6e:40:ca:
82:b5:4c:7b:76:f0:88:f0:a9:30:0f:43:18:85:75:87:27:3a:
d8:c8:e0:ba:4f:83:88:e0:e3:e7:40:95:3d:0f:63:49:9b:f0:
63:32:30:5e:7d:8b:a6:9e:a7:3c:95:5f:03:d9:9c:c6:13:86:
e6:4d:f6:a3
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIGAJ7WM1FCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDU1MzAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2OTJmMmVjOTIw
MzgxZDhmZGVkYTZkOWRhMzRiZDRkNGVlNzE2N2MwMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAtaKNf0PJEl71KkX0Rtze33IVkwWPjDo3EuOWh0oYnBBp
kkV0Ev6Nh684lG639yhpZ1Epn+V14AKjgssYcoUMkj+x0bPo7DG8VA7pdOqKOOnm
AnQIujUKv0tXd5rnmNYR90oMDB6IkqJzf5l7XED4zk/Nfr5QSu9yft3i4CWPfQqI
CxZMOY23GIWLSdOjLB4DgbqQZOnajIv7XLrZedlHAnYqXzo/TW+GDsRaiUMqMDEH
BTkKSiDzkXj77LgDNGhxfkpyDbo5xpavpepRavoCA1TtXuPz4ITTlPzHHlthGHRV
o8V2URiNJVPmrfn9MB2YVQmF4+FxXbqC7Nb/WygaMwIDAQABo4ICkzCCAo8wHQYD
VR0OBBYEFGkvLskgOB2P3tptnaNL1NTucWfAMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1LzgxZjJhMi1hZDFiLTRjOTEt
YjVmZS00Y2NhNGE0ZDliMmUvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvODFmMmEyLWFkMWItNGM5MS1i
NWZlLTRjY2E0YTRkOWIyZS8xL2FTOHV5U0E0SFlfZTJtMmRvMHZVMU81eFo4QS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCU6v0MA0EAgACMAcDBQMqCUkAMA0GCSqGSIb3DQEBCwUAA4IBAQCe
dppMT5oY4OIElKO3vTRc5/XghnVrZ4RHpT1wuOSr5E6Mybhd3iHXlcNmhpoa6Abu
sUNtkyw+Wkf+wXUcftgY+1Ig6Lwl89Aj9g/ZKmiGbRN8YvwYoUebvhfohD+NXFPm
xg9BJU/m+4CFtttAbWBlNbm3fWLDza0DVBoSTErvOaKPIFwA0ueloQgbDXgOqDqR
uMsUtiCM22Nocr+uIQMAcnEPOrqGr4lBy0reU9Nc4QVMA5vnOrKn5WOGA6sVbxlO
1NZuQMqCtUx7dvCI8KkwD0MYhXWHJzrYyOC6T4OI4OPnQJU9D2NJm/BjMjBefYum
nqc8lV8D2ZzGE4bmTfaj
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:34 2024 by rpki-client on console-ams.rpki-client.org