Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dVHk6utgByFU6n8siPD1UYRdJzY.cer
File: dVHk6utgByFU6n8siPD1UYRdJzY.cer (raw, json)
Hash identifier: Te8EUT/USAnoN4QGRo6N7JiE23POu6cS6J0N1xhWn5Y=
Subject key identifier: 75:51:E4:EA:EB:60:07:21:54:EA:7F:2C:88:F0:F5:51:84:5D:27:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9D4DC584FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/bf8b40-ab74-4d42-8404-4cd444462781/1/dVHk6utgByFU6n8siPD1UYRdJzY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/bf8b40-ab74-4d42-8404-4cd444462781/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 04:01:41 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 209529
IP: 185.228.220.0/22
IP: 185.248.72.0/22
IP: 2a0e:70c0::/32
IP: 2a0e:a540::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675614655741 (0x9d4dc584fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:01:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7551e4eaeb60072154ea7f2c88f0f551845d2736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e3:70:26:d0:ee:a6:06:d8:8a:3a:21:de:08:
36:8a:78:78:2a:3f:a9:82:09:06:74:52:3c:4b:67:
41:7b:e5:2b:c3:0c:03:a2:9b:d0:c1:e8:a9:47:30:
af:f4:d9:8a:14:4f:d6:dd:f2:17:5a:0d:6a:91:48:
30:ff:5e:25:37:9d:a3:fd:33:a7:f9:a7:dc:a5:5e:
96:a4:3f:3b:ff:2a:6e:f7:c2:38:bd:04:c3:6b:73:
95:00:7e:e1:53:f9:10:65:b2:19:62:ae:0c:8c:ba:
71:44:f2:ad:eb:b2:04:fa:62:b1:e8:a9:fd:2e:f9:
e5:00:90:0b:91:f6:89:99:46:d9:6e:81:d8:80:58:
40:df:ca:af:90:9a:bb:db:e0:31:1d:cb:7c:2c:cf:
b2:cc:df:a1:1a:bb:24:dd:2e:36:48:b5:d6:63:b1:
ce:55:d4:48:3d:ea:49:fe:4b:28:8a:a1:04:a3:97:
c5:0e:6e:64:56:20:e4:ce:26:3e:b9:47:16:65:9e:
a1:7b:b8:7c:02:6c:b1:9b:1a:b4:c4:a9:c0:42:c4:
8e:f6:d6:89:bc:ae:50:92:2e:56:cb:bb:fc:36:8f:
54:8e:7d:c5:11:88:c9:3c:11:91:22:77:cd:3f:05:
33:4d:ba:78:97:0c:7b:3a:1e:39:e0:58:5c:8a:65:
81:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:51:E4:EA:EB:60:07:21:54:EA:7F:2C:88:F0:F5:51:84:5D:27:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bf8b40-ab74-4d42-8404-4cd444462781/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bf8b40-ab74-4d42-8404-4cd444462781/1/dVHk6utgByFU6n8siPD1UYRdJzY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.220.0/22
185.248.72.0/22
IPv6:
2a0e:70c0::/32
2a0e:a540::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209529
Signature Algorithm: sha256WithRSAEncryption
84:f3:54:89:9b:71:46:e9:ca:4f:01:ad:ce:89:98:64:cb:9d:
93:db:15:79:3c:1c:17:8d:75:2b:94:4f:10:e0:3f:99:2d:b3:
f7:73:c4:b5:c8:58:f4:40:da:d6:52:3b:85:5b:2a:f5:f7:f9:
71:f0:28:e8:85:0b:ca:25:4f:64:1a:f2:64:d9:52:98:c9:65:
94:2d:ca:ff:4b:e2:38:01:a3:24:d1:fa:41:6b:f9:15:9f:2a:
71:f0:31:71:04:3d:45:f1:9a:63:e5:3e:d3:4b:99:b3:7b:fa:
04:20:97:c9:9c:e6:5e:65:ab:00:4e:55:e7:f9:0b:c7:59:6c:
5b:99:e6:8f:64:bd:60:3c:ea:76:27:5b:c2:2a:49:a1:44:74:
40:63:16:83:e4:1d:3f:4f:ad:a5:02:77:09:ed:23:61:99:f4:
e6:58:e6:eb:99:1a:81:2a:03:79:a7:60:fa:42:dc:58:6f:5d:
2a:35:86:2b:6e:03:63:dc:80:c6:8c:42:24:d2:ab:41:b8:9f:
80:7b:bd:1e:ec:f9:22:28:fb:cd:0c:a1:fe:0e:bd:8a:11:d6:
3a:8a:a3:b4:0b:2f:f9:cf:21:60:ba:bf:be:c8:d9:a5:99:4c:
e4:08:1c:f0:90:d3:95:6e:aa:2b:cd:9c:31:b9:da:f5:b2:43:
63:33:a2:62
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgIGAJ1NxYT9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDQwMTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3NTUxZTRlYWVi
NjAwNzIxNTRlYTdmMmM4OGYwZjU1MTg0NWQyNzM2MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAyONwJtDupgbYijoh3gg2inh4Kj+pggkGdFI8S2dBe+Ur
wwwDopvQweipRzCv9NmKFE/W3fIXWg1qkUgw/14lN52j/TOn+afcpV6WpD87/ypu
98I4vQTDa3OVAH7hU/kQZbIZYq4MjLpxRPKt67IE+mKx6Kn9LvnlAJALkfaJmUbZ
boHYgFhA38qvkJq72+AxHct8LM+yzN+hGrsk3S42SLXWY7HOVdRIPepJ/ksoiqEE
o5fFDm5kViDkziY+uUcWZZ6he7h8Amyxmxq0xKnAQsSO9taJvK5Qki5Wy7v8No9U
jn3FEYjJPBGRInfNPwUzTbp4lwx7Oh454FhcimWBnQIDAQABo4ICvDCCArgwHQYD
VR0OBBYEFHVR5OrrYAchVOp/LIjw9VGEXSc2MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwL2JmOGI0MC1hYjc0LTRkNDIt
ODQwNC00Y2Q0NDQ0NjI3ODEvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvYmY4YjQwLWFiNzQtNGQ0Mi04
NDA0LTRjZDQ0NDQ2Mjc4MS8xL2RWSGs2dXRnQnlGVTZuOHNpUEQxVVlSZEp6WS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAS
BAIAATAMAwQCueTcAwQCufhIMBQEAgACMA4DBQAqDnDAAwUAKg6lQDAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMDMnkwDQYJKoZIhvcNAQELBQADggEBAITzVImbcUbp
yk8Brc6JmGTLnZPbFXk8HBeNdSuUTxDgP5kts/dzxLXIWPRA2tZSO4VbKvX3+XHw
KOiFC8olT2Qa8mTZUpjJZZQtyv9L4jgBoyTR+kFr+RWfKnHwMXEEPUXxmmPlPtNL
mbN7+gQgl8mc5l5lqwBOVef5C8dZbFuZ5o9kvWA86nYnW8IqSaFEdEBjFoPkHT9P
raUCdwntI2GZ9OZY5uuZGoEqA3mnYPpC3FhvXSo1hituA2PcgMaMQiTSq0G4n4B7
vR7s+SIo+80Mof4OvYoR1jqKo7QLL/nPIWC6v77I2aWZTOQIHPCQ05VuqivNnDG5
2vWyQ2MzomI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:21 2024 by rpki-client on console-ams.rpki-client.org