Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hl8mJ6k0tSBMf3rrpYjIqOPtZwM.cer
File: hl8mJ6k0tSBMf3rrpYjIqOPtZwM.cer (raw, json)
Hash identifier: l19dCuMf+OzPmQI1M0Bd3fZmQ8skTMt86+L+UTO1zE0=
Subject key identifier: 86:5F:26:27:A9:34:B5:20:4C:7F:7A:EB:A5:88:C8:A8:E3:ED:67:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A8353AA33B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/4747b6-e3d8-461a-9613-e4a2e5251296/1/hl8mJ6k0tSBMf3rrpYjIqOPtZwM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/4747b6-e3d8-461a-9613-e4a2e5251296/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:56:08 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 195.128.232.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722447541051 (0xa8353aa33b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:56:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=865f2627a934b5204c7f7aeba588c8a8e3ed6703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:80:fc:d5:7e:31:ff:12:37:c6:f6:b4:30:
b6:44:d6:34:d0:85:b9:fe:4c:a5:be:05:6c:90:19:
4b:e3:6b:b3:aa:b5:dc:f9:3f:7f:19:fe:fb:85:98:
b5:3e:df:54:40:e5:7b:b9:af:f5:fc:bf:b3:12:cc:
93:da:79:8a:88:3c:d5:79:02:ad:67:93:be:b5:49:
cc:d3:d5:63:93:4d:88:2c:c7:87:72:a9:94:bd:c1:
78:4d:2b:80:46:da:7e:ca:34:8e:2e:95:af:4e:90:
9e:2f:90:66:e7:8a:73:cf:c5:bc:95:d0:dd:4f:2c:
97:85:97:28:5b:43:09:6b:63:85:d1:1e:c4:aa:23:
d5:07:5b:df:62:8a:a7:9a:b6:5d:4a:ce:31:c3:fb:
a3:18:d4:34:e8:55:b2:21:81:0b:ad:f5:20:34:61:
a7:10:ae:82:9e:a5:36:6b:dd:6c:1c:03:30:4b:3a:
37:9a:47:43:32:71:6a:3d:1d:05:e7:8d:d0:1b:a2:
11:5c:69:0a:f1:6f:6a:14:65:dc:c0:de:bc:69:0f:
59:e4:8e:35:11:0a:73:73:43:ba:e0:38:91:0e:88:
73:e8:c2:e7:f5:aa:49:9f:11:c7:a1:99:f1:c7:eb:
24:c1:e8:28:1c:bc:73:e9:55:c3:d7:d7:4c:36:e6:
95:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5F:26:27:A9:34:B5:20:4C:7F:7A:EB:A5:88:C8:A8:E3:ED:67:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4747b6-e3d8-461a-9613-e4a2e5251296/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4747b6-e3d8-461a-9613-e4a2e5251296/1/hl8mJ6k0tSBMf3rrpYjIqOPtZwM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.232.0/23
Signature Algorithm: sha256WithRSAEncryption
82:59:1c:20:49:cd:07:fc:b0:eb:82:91:c2:41:08:01:1a:44:
6d:e2:95:b7:12:a7:bf:16:26:34:13:13:8c:63:e7:18:be:77:
df:4a:d4:7f:81:52:8e:34:0d:0d:db:f7:38:0e:e1:97:71:90:
3f:fc:96:81:94:c0:45:0f:83:92:97:81:bc:64:a5:86:61:2d:
0e:46:d9:2d:78:c9:17:af:72:10:3e:31:97:0d:e1:03:dc:00:
cb:a7:25:41:fb:54:b8:95:3e:98:73:85:ce:36:c7:f6:b7:a9:
b8:ab:09:1e:d0:68:c7:97:75:ab:74:3d:77:3f:dd:d8:75:29:
a0:ef:29:1d:b3:c6:ff:7d:55:04:5c:4a:ea:80:cd:fa:80:8c:
48:4c:cd:3a:dd:a1:56:59:2c:7b:c1:20:31:97:4c:3d:1f:78:
d6:cb:24:b4:34:a1:ce:2c:a8:12:c1:a7:98:26:17:30:75:2c:
66:6a:72:d8:ad:f8:b0:4d:df:5f:07:7e:ad:1b:b7:73:e0:42:
ab:78:ad:61:09:d8:6b:8c:a6:ff:5e:9b:d4:c9:c6:ce:ef:79:
b2:aa:88:b3:a1:a8:89:6a:98:1d:c9:ef:96:ba:fe:d9:b7:9f:
6b:9c:a2:d5:00:9e:68:f2:63:85:42:6a:4b:47:9f:39:00:dc:
d8:6b:29:f1
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAKg1OqM7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTM1NjA4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4NjVmMjYyN2E5
MzRiNTIwNGM3ZjdhZWJhNTg4YzhhOGUzZWQ2NzAzMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAri2A/NV+Mf8SN8b2tDC2RNY00IW5/kylvgVskBlL42uz
qrXc+T9/Gf77hZi1Pt9UQOV7ua/1/L+zEsyT2nmKiDzVeQKtZ5O+tUnM09Vjk02I
LMeHcqmUvcF4TSuARtp+yjSOLpWvTpCeL5Bm54pzz8W8ldDdTyyXhZcoW0MJa2OF
0R7EqiPVB1vfYoqnmrZdSs4xw/ujGNQ06FWyIYELrfUgNGGnEK6CnqU2a91sHAMw
Szo3mkdDMnFqPR0F543QG6IRXGkK8W9qFGXcwN68aQ9Z5I41EQpzc0O64DiRDohz
6MLn9apJnxHHoZnxx+skwegoHLxz6VXD19dMNuaV0QIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFIZfJiepNLUgTH9666WIyKjj7WcDMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyLzQ3NDdiNi1lM2Q4LTQ2MWEt
OTYxMy1lNGEyZTUyNTEyOTYvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvNDc0N2I2LWUzZDgtNDYxYS05
NjEzLWU0YTJlNTI1MTI5Ni8xL2hsOG1KNmswdFNCTWYzcnJwWWpJcU9QdFp3TS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBw4DoMA0GCSqGSIb3DQEBCwUAA4IBAQCCWRwgSc0H/LDrgpHCQQgB
GkRt4pW3Eqe/FiY0ExOMY+cYvnffStR/gVKONA0N2/c4DuGXcZA//JaBlMBFD4OS
l4G8ZKWGYS0ORtkteMkXr3IQPjGXDeED3ADLpyVB+1S4lT6Yc4XONsf2t6m4qwke
0GjHl3WrdD13P93YdSmg7ykds8b/fVUEXErqgM36gIxITM063aFWWSx7wSAxl0w9
H3jWyyS0NKHOLKgSwaeYJhcwdSxmanLYrfiwTd9fB36tG7dz4EKreK1hCdhrjKb/
XpvUycbO73myqoizoaiJapgdye+Wuv7Zt59rnKLVAJ5o8mOFQmpLR585ANzYaynx
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:20 2024 by rpki-client on console-ams.rpki-client.org