Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ebCheg6HSaT778NWdE3jqwQICTQ.cer
File: ebCheg6HSaT778NWdE3jqwQICTQ.cer (raw, json)
Hash identifier: fH4j/eY1awsFMxOjY1SVYG9pgtPh1gyqe5o6HsTh74I=
Subject key identifier: 79:B0:A1:7A:0E:87:49:A4:FB:EF:C3:56:74:4D:E3:AB:04:08:09:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9AE9779315
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/aece21-99e3-49af-b958-636a67917f00/1/ebCheg6HSaT778NWdE3jqwQICTQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/aece21-99e3-49af-b958-636a67917f00/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:59:43 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.158.84.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665341891349 (0x9ae9779315)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:59:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79b0a17a0e8749a4fbefc356744de3ab04080934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:f9:22:37:30:4f:df:c3:0a:82:c5:6a:43:
99:ef:cd:d8:52:92:e8:fe:f5:33:ac:1b:ec:b5:7a:
3d:c9:a4:c0:a1:9c:d2:65:3a:0f:b8:16:eb:b7:2a:
67:29:24:1c:92:cf:d1:65:10:c7:15:f7:72:ae:69:
10:1e:c7:7f:3d:ad:ae:fb:4b:3b:5f:c3:06:22:7a:
ea:0b:22:cb:31:76:f3:73:a8:bd:43:ed:42:f9:25:
4b:69:05:a5:1d:f3:bd:36:ab:ad:fc:e5:fa:bf:1a:
3b:ca:88:99:60:21:19:29:7c:5e:d5:5b:d9:1a:53:
b6:f9:62:85:e2:b6:ba:f4:fc:4d:7e:23:c5:15:26:
d0:24:97:77:f0:2e:fc:e6:b1:eb:77:c0:85:2a:13:
a8:48:b9:de:cf:45:f4:bc:77:63:c5:08:a9:55:71:
e3:8c:fd:23:9e:ad:29:d0:fa:b4:e6:28:33:db:4f:
44:c4:11:63:c0:0e:b7:f0:b6:59:c3:4d:47:26:06:
01:09:d1:97:13:60:12:68:6c:31:3c:46:08:0f:28:
65:55:e3:49:0f:4e:22:86:ea:ce:b3:d8:ae:28:bf:
b3:e5:35:db:80:80:17:0a:a2:02:dd:f4:43:68:b9:
38:7d:b8:00:23:bc:c0:6e:cd:6a:65:26:cb:22:c6:
42:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B0:A1:7A:0E:87:49:A4:FB:EF:C3:56:74:4D:E3:AB:04:08:09:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/aece21-99e3-49af-b958-636a67917f00/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/aece21-99e3-49af-b958-636a67917f00/1/ebCheg6HSaT778NWdE3jqwQICTQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.84.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:e2:69:1d:62:45:c5:98:c0:5b:10:53:41:1d:18:c6:b0:3c:
1a:f2:a9:f5:0c:85:d7:a8:e3:4a:30:c1:11:48:53:cc:7b:40:
9c:ac:9d:c5:52:6a:32:31:76:6c:a8:db:14:7c:72:9d:fc:47:
d4:a4:c4:d0:6e:fc:42:63:e3:9c:ff:a6:d6:cf:fb:62:32:97:
63:0e:58:dc:d9:85:45:5a:a6:1e:98:06:8a:c8:04:2f:39:b5:
a1:7e:22:8c:34:60:93:4b:03:59:ef:aa:31:0f:54:5f:36:78:
04:7c:61:bd:e5:8c:47:b1:ae:fa:09:fb:da:af:b5:4a:9f:f4:
6c:a7:2c:1f:73:5d:84:40:8f:19:72:a1:4e:95:4a:14:71:8d:
c2:f7:7c:da:8f:22:69:3d:8b:9b:81:66:6b:08:ba:71:ba:2c:
a1:65:f8:a9:26:94:1c:b1:a6:31:02:e0:b7:ca:15:80:d1:bd:
19:f7:d5:f8:1a:19:f6:67:c5:af:9f:42:3b:25:7e:dd:3b:8d:
d3:17:d5:10:aa:5f:b2:fb:0e:5b:bc:72:7b:2f:2e:07:c6:f7:
4f:cb:86:be:01:19:a7:b8:58:12:ed:98:74:8e:1a:f9:8a:92:
9f:bd:a3:a3:d1:64:7b:22:1a:d0:9e:69:79:fe:ba:51:f7:7b:
df:b5:b3:8e
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAJrpd5MVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDE1OTQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3OWIwYTE3YTBl
ODc0OWE0ZmJlZmMzNTY3NDRkZTNhYjA0MDgwOTM0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAlzn5IjcwT9/DCoLFakOZ783YUpLo/vUzrBvstXo9yaTA
oZzSZToPuBbrtypnKSQcks/RZRDHFfdyrmkQHsd/Pa2u+0s7X8MGInrqCyLLMXbz
c6i9Q+1C+SVLaQWlHfO9Nqut/OX6vxo7yoiZYCEZKXxe1VvZGlO2+WKF4ra69PxN
fiPFFSbQJJd38C785rHrd8CFKhOoSLnez0X0vHdjxQipVXHjjP0jnq0p0Pq05igz
209ExBFjwA638LZZw01HJgYBCdGXE2ASaGwxPEYIDyhlVeNJD04ihurOs9iuKL+z
5TXbgIAXCqIC3fRDaLk4fbgAI7zAbs1qZSbLIsZCewIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFHmwoXoOh0mk++/DVnRN46sECAk0MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhL2FlY2UyMS05OWUzLTQ5YWYt
Yjk1OC02MzZhNjc5MTdmMDAvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvYWVjZTIxLTk5ZTMtNDlhZi1i
OTU4LTYzNmE2NzkxN2YwMC8xL2ViQ2hlZzZIU2FUNzc4TldkRTNqcXdRSUNUUS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCLZ5UMA0GCSqGSIb3DQEBCwUAA4IBAQCc4mkdYkXFmMBbEFNBHRjG
sDwa8qn1DIXXqONKMMERSFPMe0CcrJ3FUmoyMXZsqNsUfHKd/EfUpMTQbvxCY+Oc
/6bWz/tiMpdjDljc2YVFWqYemAaKyAQvObWhfiKMNGCTSwNZ76oxD1RfNngEfGG9
5YxHsa76Cfvar7VKn/Rspywfc12EQI8ZcqFOlUoUcY3C93zajyJpPYubgWZrCLpx
uiyhZfipJpQcsaYxAuC3yhWA0b0Z99X4Ghn2Z8Wvn0I7JX7dO43TF9UQql+y+w5b
vHJ7Ly4HxvdPy4a+ARmnuFgS7Zh0jhr5ipKfvaOj0WR7IhrQnml5/rpR93vftbOO
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:02 2024 by rpki-client on console-ams.rpki-client.org