Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g4N7aDDDz5ZoUuMd2aV9GUZvd48.cer
File: g4N7aDDDz5ZoUuMd2aV9GUZvd48.cer (raw, json)
Hash identifier: IUok3qqc5pHPc8CN47yK+PufiBe2FJkBdZ+3H+HXhFo=
Subject key identifier: 83:83:7B:68:30:C3:CF:96:68:52:E3:1D:D9:A5:7D:19:46:6F:77:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A009806741
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/88d623-936d-4b31-baaf-07954f0b72dd/1/g4N7aDDDz5ZoUuMd2aV9GUZvd48.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/88d623-936d-4b31-baaf-07954f0b72dd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 06:53:52 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.223.252.0/23
IP: 193.227.236.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 687354177345 (0xa009806741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:53:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83837b6830c3cf966852e31dd9a57d19466f778f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:38:3f:b5:6a:5d:62:6e:6c:b0:0c:64:c2:e6:
4f:cf:c3:79:9c:44:5b:d6:5d:9f:26:9b:c4:57:34:
ab:f0:b1:b3:4b:da:32:2d:67:9f:8c:01:42:47:fb:
35:7f:59:ea:45:1f:83:0a:aa:4a:87:2d:f5:82:ff:
36:3a:fa:bb:40:53:7f:5c:8f:48:04:f5:e2:a5:dd:
03:ec:1f:d1:30:99:6a:15:66:26:56:0e:31:92:de:
0d:88:8b:b1:c2:51:63:46:a4:b5:00:e4:f1:4c:7b:
b1:7c:e3:53:94:7a:f8:c3:fe:14:14:6c:b9:df:9f:
7b:bb:96:c0:15:dd:f3:ca:67:a8:8e:2c:b2:66:b0:
a5:c5:ae:46:23:3f:18:77:58:c1:59:a4:49:12:52:
8b:a1:8f:d2:b1:24:44:0d:42:2d:19:ba:cc:9f:b8:
7a:b5:1f:9f:f9:7e:e4:6f:70:b4:c6:e8:06:55:b4:
72:29:24:2f:7c:83:07:71:c3:bd:7e:67:e1:6b:e2:
32:9b:6b:52:11:18:fe:bc:0f:39:d0:1e:f1:2e:ae:
4a:b2:b9:af:ca:c8:4a:54:51:44:5b:20:d6:5c:ea:
3e:c8:34:d5:39:f6:7a:fa:e1:40:2b:3c:79:ed:94:
e0:db:cb:0e:c9:dd:b4:70:7a:24:b6:07:93:0d:4b:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:83:7B:68:30:C3:CF:96:68:52:E3:1D:D9:A5:7D:19:46:6F:77:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/88d623-936d-4b31-baaf-07954f0b72dd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/88d623-936d-4b31-baaf-07954f0b72dd/1/g4N7aDDDz5ZoUuMd2aV9GUZvd48.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.223.252.0/23
193.227.236.0/23
Signature Algorithm: sha256WithRSAEncryption
38:52:53:b6:1a:9b:71:a7:18:c8:4f:66:88:a2:d0:fc:97:65:
7b:b8:b1:e9:ca:7a:8e:95:f1:50:ab:bb:d2:52:3c:de:56:a8:
b8:f0:ce:58:5b:85:73:54:d0:c8:49:e6:01:cf:24:b8:9c:27:
54:29:59:2b:0a:d8:95:43:92:1b:f2:bd:4f:7b:3e:43:7b:a4:
2d:ef:c5:4a:67:c4:f2:83:e9:e8:56:33:5c:7d:0a:82:0e:0d:
0e:06:11:c4:54:da:39:0c:61:cd:82:68:ce:b1:eb:34:12:64:
0a:3d:b8:c9:d3:bd:74:fb:4c:5b:fd:55:b8:7f:fb:ff:86:1a:
25:69:95:c4:2f:9c:16:d7:d7:ae:8d:8a:69:8a:c3:42:0d:69:
f5:28:80:1d:fb:0f:ef:1d:68:71:35:3b:cf:8d:6c:fe:c9:62:
7d:13:9a:8a:55:94:44:00:8e:ae:5c:11:91:db:bf:b9:0e:89:
e5:10:3b:ec:03:8e:42:fd:6b:9c:dd:7b:b9:c0:cc:92:91:5b:
5f:58:70:1f:96:b9:f8:2b:36:28:31:03:81:05:35:30:75:22:
8b:2b:74:83:11:d0:c2:37:a7:8e:c5:5b:90:39:35:f6:0d:8e:
2b:2e:d1:f5:62:86:fa:9b:9d:ce:4d:d4:e9:5f:bc:2d:4b:c8:
f0:8b:0b:d7
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIGAKAJgGdBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDY1MzUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4MzgzN2I2ODMw
YzNjZjk2Njg1MmUzMWRkOWE1N2QxOTQ2NmY3NzhmMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAoDg/tWpdYm5ssAxkwuZPz8N5nERb1l2fJpvEVzSr8LGz
S9oyLWefjAFCR/s1f1nqRR+DCqpKhy31gv82Ovq7QFN/XI9IBPXipd0D7B/RMJlq
FWYmVg4xkt4NiIuxwlFjRqS1AOTxTHuxfONTlHr4w/4UFGy53597u5bAFd3zymeo
jiyyZrClxa5GIz8Yd1jBWaRJElKLoY/SsSREDUItGbrMn7h6tR+f+X7kb3C0xugG
VbRyKSQvfIMHccO9fmfha+Iym2tSERj+vA850B7xLq5KsrmvyshKVFFEWyDWXOo+
yDTVOfZ6+uFAKzx57ZTg28sOyd20cHoktgeTDUucYwIDAQABo4ICijCCAoYwHQYD
VR0OBBYEFIODe2gww8+WaFLjHdmlfRlGb3ePMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjLzg4ZDYyMy05MzZkLTRiMzEt
YmFhZi0wNzk1NGYwYjcyZGQvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvODhkNjIzLTkzNmQtNGIzMS1i
YWFmLTA3OTU0ZjBiNzJkZC8xL2c0TjdhREREejVab1V1TWQyYVY5R1VadmQ0OC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQBwd/8AwQBwePsMA0GCSqGSIb3DQEBCwUAA4IBAQA4UlO2GptxpxjI
T2aIotD8l2V7uLHpynqOlfFQq7vSUjzeVqi48M5YW4VzVNDISeYBzyS4nCdUKVkr
CtiVQ5Ib8r1Pez5De6Qt78VKZ8Tyg+noVjNcfQqCDg0OBhHEVNo5DGHNgmjOses0
EmQKPbjJ0710+0xb/VW4f/v/hholaZXEL5wW19eujYppisNCDWn1KIAd+w/vHWhx
NTvPjWz+yWJ9E5qKVZREAI6uXBGR27+5DonlEDvsA45C/Wuc3Xu5wMySkVtfWHAf
lrn4KzYoMQOBBTUwdSKLK3SDEdDCN6eOxVuQOTX2DY4rLtH1Yob6m53OTdTpX7wt
S8jwiwvX
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:21 2024 by rpki-client on console-fra.rpki-client.org