Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eSJtgGqsgpeb9KwceCE1Y_gFXv4.cer
File: eSJtgGqsgpeb9KwceCE1Y_gFXv4.cer (raw, json)
Hash identifier: AuqmAs/bBPlX1VAhF66u6T7jLJbzLYeD0XUO7C8tm84=
Subject key identifier: 79:22:6D:80:6A:AC:82:97:9B:F4:AC:1C:78:21:35:63:F8:05:5E:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9E5BA810CD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0a3e1-5544-4970-bf45-0ddd44d3305d/1/eSJtgGqsgpeb9KwceCE1Y_gFXv4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0a3e1-5544-4970-bf45-0ddd44d3305d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:02:02 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 60682
IP: 193.247.194.0/23
IP: 193.247.214.0/23
IP: 2a0f:f180::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680142573773 (0x9e5ba810cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:02:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79226d806aac82979bf4ac1c78213563f8055efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b6:47:cc:78:1d:15:6b:f0:0f:3c:65:d2:cf:
e1:b1:29:07:31:a6:14:c1:1b:e9:af:ba:11:22:a5:
ce:9e:18:4c:24:b4:6e:cc:b0:cc:a2:c8:86:56:7b:
e6:52:7f:2e:3d:f8:26:90:5f:15:9a:87:c1:3a:9a:
f4:80:95:b2:bc:12:e7:37:7e:a7:3a:e0:27:73:0c:
91:cc:3e:4a:94:f3:97:24:00:ed:58:df:37:92:4b:
e5:60:04:d1:c5:89:0d:b1:e8:ff:23:e9:10:83:4f:
c5:2e:dc:19:6d:1e:91:dd:a2:39:d6:c8:86:0a:a2:
d5:d1:9d:c1:e7:1c:23:d6:35:c6:e3:74:4c:13:74:
32:2a:2c:6c:7f:48:16:5f:5c:98:9f:e7:db:38:e1:
2f:5d:44:c0:df:84:4c:51:eb:1c:ee:d0:8c:f4:c9:
32:ec:e5:8b:a5:d3:a0:8e:df:27:53:0e:a0:a7:32:
70:e8:0a:7c:f7:a8:62:42:25:60:9c:cd:2e:45:f6:
6d:99:8b:76:29:59:57:a1:1f:ee:41:9c:e0:5c:43:
54:09:92:c0:4f:e3:95:3f:d2:a1:e2:e1:ce:64:d8:
bf:1a:ad:14:9e:50:35:f9:29:30:6b:99:2e:da:f2:
b5:82:d1:f0:30:ef:df:33:a4:8d:ce:8e:9a:04:98:
ad:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:22:6D:80:6A:AC:82:97:9B:F4:AC:1C:78:21:35:63:F8:05:5E:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0a3e1-5544-4970-bf45-0ddd44d3305d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0a3e1-5544-4970-bf45-0ddd44d3305d/1/eSJtgGqsgpeb9KwceCE1Y_gFXv4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.194.0/23
193.247.214.0/23
IPv6:
2a0f:f180::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60682
Signature Algorithm: sha256WithRSAEncryption
0d:09:43:ed:71:e7:8f:a8:d7:63:64:9e:e8:c8:0e:30:b7:1a:
d6:2b:df:5b:57:60:75:60:18:7e:71:16:a2:d6:c7:1b:ea:b4:
86:bc:4d:e5:7c:db:4f:19:c2:21:dd:9a:9f:50:11:a5:81:6d:
24:ed:0a:af:6b:6d:03:1b:52:ba:64:6e:5d:9f:80:73:29:00:
d6:ad:ab:9f:1a:24:8a:c0:7f:43:e3:d0:c0:6a:54:b2:93:f0:
a6:7e:37:99:65:0e:5e:e9:27:47:9e:3e:73:60:d4:da:e3:4a:
5c:7b:ae:d4:21:70:75:e4:f4:f1:87:11:dc:ff:39:21:10:cb:
a2:fc:b6:f2:61:8a:db:ba:d2:1c:d7:17:cf:12:4e:7b:c0:97:
9a:0a:2f:41:67:a9:b2:13:31:2a:ea:11:a9:b3:69:60:7d:0b:
68:1c:30:d7:04:fb:7e:14:09:9e:6c:a6:af:c6:ec:10:32:5a:
5e:05:ec:14:ce:cf:35:06:04:5b:58:0d:73:d4:8c:91:cc:c0:
2f:d6:35:0e:e6:ef:07:e1:de:d1:ee:33:11:82:28:2c:e0:f5:
86:0d:1a:da:5d:9e:b8:55:a8:04:c2:36:55:9a:15:f5:d6:56:
73:66:46:e3:b0:be:08:92:38:c7:d9:d5:3a:08:46:a8:71:31:
d7:61:8d:c2
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIGAJ5bqBDNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDUwMjAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3OTIyNmQ4MDZh
YWM4Mjk3OWJmNGFjMWM3ODIxMzU2M2Y4MDU1ZWZlMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAy7ZHzHgdFWvwDzxl0s/hsSkHMaYUwRvpr7oRIqXOnhhM
JLRuzLDMosiGVnvmUn8uPfgmkF8VmofBOpr0gJWyvBLnN36nOuAncwyRzD5KlPOX
JADtWN83kkvlYATRxYkNsej/I+kQg0/FLtwZbR6R3aI51siGCqLV0Z3B5xwj1jXG
43RME3QyKixsf0gWX1yYn+fbOOEvXUTA34RMUesc7tCM9Mky7OWLpdOgjt8nUw6g
pzJw6Ap896hiQiVgnM0uRfZtmYt2KVlXoR/uQZzgXENUCZLAT+OVP9Kh4uHOZNi/
Gq0UnlA1+Skwa5ku2vK1gtHwMO/fM6SNzo6aBJitcQIDAQABo4ICtTCCArEwHQYD
VR0OBBYEFHkibYBqrIKXm/SsHHghNWP4BV7+MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlL2QwYTNlMS01NTQ0LTQ5NzAt
YmY0NS0wZGRkNDRkMzMwNWQvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvZDBhM2UxLTU1NDQtNDk3MC1i
ZjQ1LTBkZGQ0NGQzMzA1ZC8xL2VTSnRnR3FzZ3BlYjlLd2NlQ0UxWV9nRlh2NC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQBwffCAwQBwffWMA0EAgACMAcDBQAqD/GAMBoGCCsGAQUFBwEIAQH/
BAswCaAHMAUCAwDtCjANBgkqhkiG9w0BAQsFAAOCAQEADQlD7XHnj6jXY2Se6MgO
MLca1ivfW1dgdWAYfnEWotbHG+q0hrxN5XzbTxnCId2an1ARpYFtJO0Kr2ttAxtS
umRuXZ+AcykA1q2rnxokisB/Q+PQwGpUspPwpn43mWUOXuknR54+c2DU2uNKXHuu
1CFwdeT08YcR3P85IRDLovy28mGK27rSHNcXzxJOe8CXmgovQWepshMxKuoRqbNp
YH0LaBww1wT7fhQJnmymr8bsEDJaXgXsFM7PNQYEW1gNc9SMkczAL9Y1DubvB+He
0e4zEYIoLOD1hg0a2l2euFWoBMI2VZoV9dZWc2ZG47C+CJI4x9nVOghGqHEx12GN
wg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:15 2024 by rpki-client on console-fra.rpki-client.org