Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eryjzAqkEZQL6TE08btClEiMibE.cer
File: eryjzAqkEZQL6TE08btClEiMibE.cer (raw, json)
Hash identifier: CnrR1kUSGxrQ8IJdCh4v678PkazXshkbzA29/Crp19I=
Subject key identifier: 7A:BC:A3:CC:0A:A4:11:94:0B:E9:31:34:F1:BB:42:94:48:8C:89:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: ACA637F5A1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/c8bd33-f2c6-4381-83e4-059e0d7da369/1/eryjzAqkEZQL6TE08btClEiMibE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/c8bd33-f2c6-4381-83e4-059e0d7da369/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 28 Jan 2022 12:56:47 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 195.191.196.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 741523060129 (0xaca637f5a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 28 12:56:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7abca3cc0aa411940be93134f1bb4294488c89b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:08:bc:a1:c0:dd:a5:6c:06:a4:d9:1a:9c:
dc:4f:9e:af:01:06:b2:c9:74:de:54:15:b5:15:52:
5f:86:c2:d3:17:06:03:53:14:aa:71:06:d9:6a:ca:
1e:cb:44:5a:53:1e:23:6f:56:e2:09:43:3c:99:81:
a9:6d:75:71:a3:7d:5f:a8:c4:ff:97:de:68:6f:5b:
72:99:63:4d:d0:75:0d:2d:98:d0:e9:a5:87:fc:4a:
bb:50:67:96:28:02:42:27:43:c5:b0:b1:92:d0:5d:
ac:ce:9b:c2:85:3d:63:2b:10:5a:19:7e:f5:33:b3:
e1:c2:2c:77:59:fb:03:e0:68:ff:a4:86:78:9d:bb:
fc:df:04:cb:58:6a:90:dc:0d:b4:3f:28:18:8e:99:
e1:ab:4f:e0:62:10:21:db:c8:ec:fd:94:76:28:f8:
cd:9f:6c:07:73:1c:d1:fc:b2:0d:00:b5:2a:57:9d:
dc:06:0a:d5:3b:52:53:8e:68:8a:b9:c7:5c:54:86:
2e:45:9b:ac:ac:3d:f7:2e:2e:9e:29:d5:76:7b:a5:
41:23:4d:ef:b5:31:e1:21:e6:7f:50:fd:a8:a8:76:
90:c8:b0:7f:51:f3:cb:59:b7:06:47:cb:8b:46:d9:
10:fb:9a:75:9b:5b:f3:74:97:82:47:76:44:98:0d:
60:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BC:A3:CC:0A:A4:11:94:0B:E9:31:34:F1:BB:42:94:48:8C:89:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c8bd33-f2c6-4381-83e4-059e0d7da369/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c8bd33-f2c6-4381-83e4-059e0d7da369/1/eryjzAqkEZQL6TE08btClEiMibE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.196.0/23
Signature Algorithm: sha256WithRSAEncryption
50:f2:a0:b8:6c:05:8c:71:d9:eb:05:04:0b:b0:e8:23:e3:1d:
d3:07:36:a2:16:77:18:ab:9e:9f:e5:9c:7d:f6:aa:50:6e:38:
45:93:1a:88:6e:c3:16:8b:30:68:4d:46:78:dd:ba:1b:ca:aa:
a1:29:fe:bc:af:19:47:df:40:46:fe:93:ec:66:35:45:ba:28:
90:f3:1d:69:a2:38:22:ad:05:a5:b4:49:5d:31:ae:10:6a:5d:
aa:56:27:a2:ee:5f:26:7d:ce:d6:07:7f:b3:b6:5b:41:87:44:
7e:dd:3b:28:96:dc:e2:53:d7:0f:5a:1d:17:a1:1a:8e:f2:ce:
6c:2d:3d:d9:e1:7e:c4:9b:86:2d:43:b3:b2:17:45:12:97:af:
fd:d1:30:9a:c8:86:49:a5:4b:e5:3b:8e:66:52:4c:16:99:5b:
4f:d5:d6:96:e1:18:88:b5:52:7e:d7:fe:0f:e1:1d:e1:86:cd:
43:e0:16:97:a5:c7:0e:95:03:15:5b:29:4e:3c:54:f4:37:e0:
2c:0a:e5:bf:0b:52:00:ff:bd:90:a7:30:e9:4f:c0:c6:fd:8c:
c1:f7:28:90:2c:ec:af:b1:ec:0a:c3:25:1b:46:25:f7:b0:f3:
a1:1f:a9:94:ad:cd:6b:26:71:92:87:b4:21:ff:59:67:15:b6:
ad:fd:75:81
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAKymN/WhMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTI4MTI1NjQ3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3YWJjYTNjYzBh
YTQxMTk0MGJlOTMxMzRmMWJiNDI5NDQ4OGM4OWIxMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAtoYIvKHA3aVsBqTZGpzcT56vAQayyXTeVBW1FVJfhsLT
FwYDUxSqcQbZasoey0RaUx4jb1biCUM8mYGpbXVxo31fqMT/l95ob1tymWNN0HUN
LZjQ6aWH/Eq7UGeWKAJCJ0PFsLGS0F2szpvChT1jKxBaGX71M7Phwix3WfsD4Gj/
pIZ4nbv83wTLWGqQ3A20PygYjpnhq0/gYhAh28js/ZR2KPjNn2wHcxzR/LINALUq
V53cBgrVO1JTjmiKucdcVIYuRZusrD33Li6eKdV2e6VBI03vtTHhIeZ/UP2oqHaQ
yLB/UfPLWbcGR8uLRtkQ+5p1m1vzdJeCR3ZEmA1g3wIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFHq8o8wKpBGUC+kxNPG7QpRIjImxMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxL2M4YmQzMy1mMmM2LTQzODEt
ODNlNC0wNTllMGQ3ZGEzNjkvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvYzhiZDMzLWYyYzYtNDM4MS04
M2U0LTA1OWUwZDdkYTM2OS8xL2VyeWp6QXFrRVpRTDZURTA4YnRDbEVpTWliRS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBw7/EMA0GCSqGSIb3DQEBCwUAA4IBAQBQ8qC4bAWMcdnrBQQLsOgj
4x3TBzaiFncYq56f5Zx99qpQbjhFkxqIbsMWizBoTUZ43bobyqqhKf68rxlH30BG
/pPsZjVFuiiQ8x1pojgirQWltEldMa4Qal2qViei7l8mfc7WB3+ztltBh0R+3Tso
ltziU9cPWh0XoRqO8s5sLT3Z4X7Em4YtQ7OyF0USl6/90TCayIZJpUvlO45mUkwW
mVtP1daW4RiItVJ+1/4P4R3hhs1D4BaXpccOlQMVWylOPFT0N+AsCuW/C1IA/72Q
pzDpT8DG/YzB9yiQLOyvsewKwyUbRiX3sPOhH6mUrc1rJnGSh7Qh/1lnFbat/XWB
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:04 2024 by rpki-client on console-fra.rpki-client.org