Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/anomxygbDZ4j6XSzrO7XjtdnPnE.cer
File: anomxygbDZ4j6XSzrO7XjtdnPnE.cer (raw, json)
Hash identifier: 738+e2U8/LLdHdmidHd9tmceGE9SS11ljOFhExKS2zU=
Subject key identifier: 6A:7A:26:C7:28:1B:0D:9E:23:E9:74:B3:AC:EE:D7:8E:D7:67:3E:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 98BB603353
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.roa.net/rrdp/xTom/34/6A7A26C7281B0D9E23E974B3ACEED78ED7673E71.mft
caRepository: rsync://rpki.roa.net/rrdp/xTom/34
Notify URL: https://rpki.roa.net/rrdp/notification.xml
Certificate not before: Sat 01 Jan 2022 00:01:31 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.148.60.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655978672979 (0x98bb603353)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:01:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a7a26c7281b0d9e23e974b3aceed78ed7673e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:42:df:19:4a:97:41:9a:67:62:25:44:f2:
54:87:aa:8b:47:b7:b8:1b:e2:b1:c1:aa:27:49:3e:
b7:17:05:de:2d:53:b1:ce:bc:11:75:f7:b6:7e:43:
0c:df:65:1e:b6:44:3d:39:ce:5c:7f:70:3c:9c:f8:
bf:25:a0:99:6c:f3:db:ee:03:43:9c:48:02:6a:0d:
47:23:17:fe:fa:ff:e8:5c:a5:09:bc:fb:6e:a4:c6:
a4:20:dd:09:8f:d0:18:c5:93:81:66:40:78:5c:1a:
0b:71:8d:ef:ef:02:1a:90:4d:ed:53:33:ea:22:72:
98:e0:09:4a:c6:f5:91:fe:20:11:d8:3d:7e:92:84:
78:8b:8e:23:76:f3:79:88:54:18:6b:53:ca:39:5e:
40:1d:32:43:60:b6:1e:33:fd:33:b4:0d:3e:cf:05:
31:61:64:96:c2:c6:2f:c3:39:c3:64:20:69:ef:c2:
32:d9:19:f2:52:f7:7c:2b:6a:94:77:9b:99:51:2b:
bb:4f:f0:bd:18:51:b9:c6:87:f2:43:e0:22:0e:5c:
f6:09:ad:fb:5d:c8:b0:67:a7:c2:08:f1:65:31:b0:
40:5b:68:1b:d7:49:96:50:79:db:de:44:32:cf:c5:
40:b3:b9:76:bf:0a:14:a2:94:e7:45:b5:7f:69:66:
d8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7A:26:C7:28:1B:0D:9E:23:E9:74:B3:AC:EE:D7:8E:D7:67:3E:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.roa.net/rrdp/xTom/34
RPKI Manifest - URI:rsync://rpki.roa.net/rrdp/xTom/34/6A7A26C7281B0D9E23E974B3ACEED78ED7673E71.mft
RPKI Notify - URI:https://rpki.roa.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.60.0/22
Signature Algorithm: sha256WithRSAEncryption
73:51:b4:3a:21:38:12:99:c2:14:e9:26:47:45:dd:cf:62:f2:
52:76:a9:57:ac:11:e4:75:2d:88:16:2d:3a:a2:9b:4e:d3:46:
d9:bc:b6:3f:29:12:a1:6c:7e:b1:7d:39:9d:13:aa:0b:5b:78:
85:ee:2a:2e:e4:16:ff:f0:54:a5:38:ad:55:bf:18:8b:7c:ec:
94:ee:10:83:f8:06:95:be:89:03:14:59:8d:d7:b1:4c:95:67:
23:b1:78:cf:13:2a:6c:32:a1:3e:03:16:de:64:13:57:0d:fd:
5f:96:ac:3c:b5:72:ab:85:e9:80:09:19:b1:53:83:70:88:92:
01:4a:f0:e6:4f:bf:3a:25:19:a5:80:a5:53:57:d7:0a:10:58:
16:37:c4:23:ae:c0:59:80:5c:30:db:e8:3a:87:71:35:4b:7b:
f6:50:d9:d7:0d:75:83:27:22:ae:9a:7e:2d:84:49:fe:68:03:
65:a1:b5:85:f6:5f:5e:c6:9c:8f:43:f2:48:06:c3:37:b4:ff:
2d:83:4f:8b:10:f9:eb:01:ef:f2:ef:64:d0:32:81:92:14:f1:
81:f9:86:23:f6:43:b2:03:69:da:32:aa:1b:c2:00:96:69:95:
3b:10:ff:33:00:48:72:d4:11:8a:75:45:b0:d2:ac:41:ae:1f:
7a:93:0c:32
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgIGAJi7YDNTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDAwMTMxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2YTdhMjZjNzI4
MWIwZDllMjNlOTc0YjNhY2VlZDc4ZWQ3NjczZTcxMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAqJVC3xlKl0GaZ2IlRPJUh6qLR7e4G+KxwaonST63FwXe
LVOxzrwRdfe2fkMM32UetkQ9Oc5cf3A8nPi/JaCZbPPb7gNDnEgCag1HIxf++v/o
XKUJvPtupMakIN0Jj9AYxZOBZkB4XBoLcY3v7wIakE3tUzPqInKY4AlKxvWR/iAR
2D1+koR4i44jdvN5iFQYa1PKOV5AHTJDYLYeM/0ztA0+zwUxYWSWwsYvwznDZCBp
78Iy2RnyUvd8K2qUd5uZUSu7T/C9GFG5xofyQ+AiDlz2Ca37XciwZ6fCCPFlMbBA
W2gb10mWUHnb3kQyz8VAs7l2vwoUopTnRbV/aWbYxwIDAQABo4ICMzCCAi8wHQYD
VR0OBBYEFGp6JscoGw2eI+l0s6zu147XZz5xMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
gdMGCCsGAQUFBwELBIHGMIHDMC0GCCsGAQUFBzAFhiFyc3luYzovL3Jwa2kucm9h
Lm5ldC9ycmRwL3hUb20vMzQwWgYIKwYBBQUHMAqGTnJzeW5jOi8vcnBraS5yb2Eu
bmV0L3JyZHAveFRvbS8zNC82QTdBMjZDNzI4MUIwRDlFMjNFOTc0QjNBQ0VFRDc4
RUQ3NjczRTcxLm1mdDA2BggrBgEFBQcwDYYqaHR0cHM6Ly9ycGtpLnJvYS5uZXQv
cnJkcC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8v
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpu
SEMyUUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZQ8MA0GCSqGSIb3DQEBCwUAA4IBAQBz
UbQ6ITgSmcIU6SZHRd3PYvJSdqlXrBHkdS2IFi06optO00bZvLY/KRKhbH6xfTmd
E6oLW3iF7iou5Bb/8FSlOK1VvxiLfOyU7hCD+AaVvokDFFmN17FMlWcjsXjPEyps
MqE+AxbeZBNXDf1flqw8tXKrhemACRmxU4NwiJIBSvDmT786JRmlgKVTV9cKEFgW
N8QjrsBZgFww2+g6h3E1S3v2UNnXDXWDJyKumn4thEn+aANlobWF9l9expyPQ/JI
BsM3tP8tg0+LEPnrAe/y72TQMoGSFPGB+YYj9kOyA2naMqobwgCWaZU7EP8zAEhy
1BGKdUWw0qxBrh96kwwy
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:57 2024 by rpki-client on console-fra.rpki-client.org