Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bvClh6yzMGJeIRWOxAtxCvDiFno.cer
File: bvClh6yzMGJeIRWOxAtxCvDiFno.cer (raw, json)
Hash identifier: sTplCK4wO2nZ5K0u8MtpLDCPZWAoTPwMz2sMiG0nahY=
Subject key identifier: 6E:F0:A5:87:AC:B3:30:62:5E:21:15:8E:C4:0B:71:0A:F0:E2:16:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AEEE54191B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/bvClh6yzMGJeIRWOxAtxCvDiFno.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 22 Mar 2022 10:41:23 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 2a10:a9c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 751322798363 (0xaeee54191b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 22 10:41:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ef0a587acb330625e21158ec40b710af0e2167a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:09:2e:e0:6b:7a:3e:db:a3:c2:01:92:e5:
1d:76:8d:a8:cc:5e:76:d0:c5:65:f1:b9:c5:f9:f8:
06:3b:bd:67:84:78:e2:81:de:8a:1a:e3:51:91:9b:
62:ea:c8:f1:ee:cc:93:4e:0f:f7:f8:d3:2e:33:31:
d8:04:f3:46:8a:38:25:45:e6:2e:4f:b6:50:5d:cb:
28:22:ac:8e:1b:b9:07:7a:f5:c2:ca:bf:ee:24:04:
b4:8f:cb:c0:22:fa:55:11:0a:7c:f7:7d:1a:ba:b7:
13:08:00:d1:51:3b:26:17:5e:0d:e5:2a:02:65:46:
30:36:8c:12:96:16:8a:76:5b:c6:78:93:57:5d:6a:
d1:36:4d:80:f0:d4:f9:c7:b8:60:c0:d0:6c:8f:11:
b0:11:6e:2a:5b:1a:c7:98:ba:ce:40:7e:03:67:55:
d7:d1:72:e3:06:c8:83:07:d8:fe:96:78:15:7f:f7:
09:cd:15:bf:df:2b:b0:13:2f:4b:db:21:f7:33:a0:
bf:c5:17:6f:01:fd:62:6a:e0:2a:ff:d7:94:10:b1:
02:aa:d5:e7:77:fa:46:18:00:42:e3:15:f5:87:bf:
d1:e8:73:53:79:f9:42:9e:18:59:cf:eb:f0:cb:c0:
e9:df:cf:20:88:0e:55:ac:68:69:3b:43:be:41:c5:
de:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F0:A5:87:AC:B3:30:62:5E:21:15:8E:C4:0B:71:0A:F0:E2:16:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/bvClh6yzMGJeIRWOxAtxCvDiFno.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:a9c0::/29
Signature Algorithm: sha256WithRSAEncryption
4d:49:a0:44:09:f6:ed:10:04:6b:bf:a3:d3:18:d6:2c:30:44:
80:d4:5c:ae:a9:6c:c6:fd:26:fa:e5:cd:77:0a:8b:e4:a8:2e:
80:f5:e4:f5:71:da:a9:f3:80:63:e3:cf:ed:eb:5b:f3:79:43:
95:fd:0d:dd:c7:03:e2:29:5e:3e:ee:20:fd:af:98:2f:f8:4d:
04:fb:d2:f7:4c:7c:61:e0:0c:a8:70:ee:7a:92:82:8b:fe:80:
a5:9c:76:3e:09:a0:ee:bb:f4:81:c2:6d:7b:2c:b0:44:ae:4a:
6b:d0:67:fc:64:7f:c5:b5:57:f2:02:5f:d7:30:0b:c5:e6:44:
02:cc:c3:f3:b0:c4:f4:98:22:d6:28:4c:5c:06:a0:23:4b:38:
87:27:f6:9c:b7:f5:f7:57:5a:13:54:36:09:da:e9:22:33:4e:
b0:16:48:03:a5:8c:bd:27:1b:9a:bf:5b:97:0e:b7:26:bf:30:
e2:c3:32:ee:78:05:4a:78:58:71:19:94:8a:98:8d:50:ab:96:
ed:66:55:57:4c:60:f6:16:02:64:e3:e7:55:09:8e:59:a4:b0:
25:c0:9f:7d:95:d1:ad:d0:ab:ec:2c:1f:fc:13:d1:a1:c3:0e:
a1:f0:b1:3c:23:70:9a:95:99:3e:4d:91:4c:17:7f:2f:33:9c:
ec:83:bc:f4
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIGAK7uVBkbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MzIyMTA0MTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2ZWYwYTU4N2Fj
YjMzMDYyNWUyMTE1OGVjNDBiNzEwYWYwZTIxNjdhMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAuUoJLuBrej7bo8IBkuUddo2ozF520MVl8bnF+fgGO71n
hHjigd6KGuNRkZti6sjx7syTTg/3+NMuMzHYBPNGijglReYuT7ZQXcsoIqyOG7kH
evXCyr/uJAS0j8vAIvpVEQp8930aurcTCADRUTsmF14N5SoCZUYwNowSlhaKdlvG
eJNXXWrRNk2A8NT5x7hgwNBsjxGwEW4qWxrHmLrOQH4DZ1XX0XLjBsiDB9j+lngV
f/cJzRW/3yuwEy9L2yH3M6C/xRdvAf1iauAq/9eUELECqtXnd/pGGABC4xX1h7/R
6HNTeflCnhhZz+vwy8Dp388giA5VrGhpO0O+QcXerwIDAQABo4IChTCCAoEwHQYD
VR0OBBYEFG7wpYesszBiXiEVjsQLcQrw4hZ6MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlL2I0Nzk1OC0wM2QzLTQyMDEt
OGRiOC1lYmZhNTMxM2IzZjIvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvYjQ3OTU4LTAzZDMtNDIwMS04
ZGI4LWViZmE1MzEzYjNmMi8xL2J2Q2xoNnl6TUdKZUlSV094QXR4Q3ZEaUZuby5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUDKhCpwDANBgkqhkiG9w0BAQsFAAOCAQEATUmgRAn27RAEa7+j0xjW
LDBEgNRcrqlsxv0m+uXNdwqL5KgugPXk9XHaqfOAY+PP7etb83lDlf0N3ccD4ile
Pu4g/a+YL/hNBPvS90x8YeAMqHDuepKCi/6ApZx2Pgmg7rv0gcJteyywRK5Ka9Bn
/GR/xbVX8gJf1zALxeZEAszD87DE9Jgi1ihMXAagI0s4hyf2nLf191daE1Q2Cdrp
IjNOsBZIA6WMvScbmr9blw63Jr8w4sMy7ngFSnhYcRmUipiNUKuW7WZVV0xg9hYC
ZOPnVQmOWaSwJcCffZXRrdCr7Cwf/BPRocMOofCxPCNwmpWZPk2RTBd/LzOc7IO8
9A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:59 2024 by rpki-client on console-ams.rpki-client.org