Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iAhDTIKiXIhARFrocNiHyi_yNHU.cer
File: iAhDTIKiXIhARFrocNiHyi_yNHU.cer (raw, json)
Hash identifier: 5MHDId+2wh65K90BviZIzRgr+U59zUZyhonCwtLWc58=
Subject key identifier: 88:08:43:4C:82:A2:5C:88:40:44:5A:E8:70:D8:87:CA:2F:F2:34:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A807139F1A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/aac361-5a22-4993-908c-699f4ac0f31c/1/iAhDTIKiXIhARFrocNiHyi_yNHU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/aac361-5a22-4993-908c-699f4ac0f31c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:07:35 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.142.252.0/22
IP: 2a0e:e440::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 721673232154 (0xa807139f1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:07:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8808434c82a25c8840445ae870d887ca2ff23475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:1f:f1:f1:d4:a7:c5:7b:6c:43:70:d7:be:
e4:75:f1:50:2b:89:7f:84:2e:c3:78:0e:01:25:c8:
d3:c7:63:9f:aa:d2:f0:5e:ce:ec:5e:ed:cf:20:89:
5f:54:95:73:70:02:7e:52:4b:d4:c6:bf:7a:15:da:
67:60:16:dc:98:26:4d:b7:86:73:d6:bb:7b:49:5c:
2e:15:9a:b9:b8:84:46:a0:2e:47:73:8e:09:68:8d:
79:2d:b9:b1:b1:c4:17:73:62:b8:2e:d0:41:37:64:
3b:31:5d:4d:f1:e6:91:cd:a9:48:3e:5e:45:02:f6:
e4:1b:c3:bb:9e:ef:7a:ab:9f:1e:90:aa:63:e9:c0:
3a:ab:ce:ec:68:d6:fb:74:ea:1e:71:a4:08:28:dd:
48:f5:0c:9d:e2:f7:c5:4d:fb:11:aa:fb:77:34:ec:
a5:49:92:60:b1:57:bc:86:c6:cd:fe:45:79:1b:c7:
e3:17:05:f3:d3:92:e3:36:66:2f:21:23:ef:83:f9:
29:59:96:57:62:50:a7:c6:b2:10:6c:cb:05:fe:c4:
db:e2:bd:5a:84:e1:43:07:79:c6:e6:dc:5c:98:13:
8b:8f:bc:4d:f8:e8:ce:80:85:72:d4:96:5f:18:90:
4a:fc:2f:c8:cc:16:11:cf:ab:48:5d:6f:46:3b:7d:
0b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:08:43:4C:82:A2:5C:88:40:44:5A:E8:70:D8:87:CA:2F:F2:34:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aac361-5a22-4993-908c-699f4ac0f31c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aac361-5a22-4993-908c-699f4ac0f31c/1/iAhDTIKiXIhARFrocNiHyi_yNHU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.252.0/22
IPv6:
2a0e:e440::/29
Signature Algorithm: sha256WithRSAEncryption
81:11:60:7b:aa:34:7b:ec:63:b3:d5:ea:a6:7a:a9:7f:29:46:
57:fc:b9:6c:c9:7a:53:7f:57:03:30:d0:53:bf:e1:ea:4b:51:
28:46:8c:7d:f2:c0:88:5d:4d:76:b0:d3:18:62:6f:96:bc:ee:
5b:50:84:43:cf:c4:82:d2:6c:55:f8:c5:a5:a5:1d:7a:90:6b:
7a:56:06:67:53:03:43:e6:aa:ad:c8:f5:7a:93:65:c2:4f:8a:
26:91:02:b2:46:68:1c:90:f1:b9:fd:e1:5a:cf:bc:6b:be:db:
b8:1d:85:c0:17:f1:7b:65:8e:da:f4:cd:23:bc:d6:4e:2f:8f:
50:cb:0b:15:64:04:5d:19:c2:23:be:19:91:d9:35:29:0d:39:
eb:16:25:09:48:5f:a3:1d:e0:71:2b:28:f0:1e:c6:e5:d3:95:
81:11:24:cc:5b:47:9d:56:26:d1:5a:b1:80:2a:09:f2:c3:b2:
20:aa:20:83:8a:ac:cc:ef:36:ce:70:68:19:ec:c9:8e:f3:33:
de:1d:22:11:2d:74:aa:3b:d3:a8:dd:5b:56:47:b6:83:d3:f2:
2a:0d:40:36:65:44:49:33:08:98:6e:f4:0d:5a:9f:b4:8f:51:
b6:e0:28:fb:05:eb:52:b3:09:5f:81:34:67:d2:8b:31:5e:5f:
45:19:1d:f6
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIGAKgHE58aMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTMwNzM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4ODA4NDM0Yzgy
YTI1Yzg4NDA0NDVhZTg3MGQ4ODdjYTJmZjIzNDc1MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAuzEf8fHUp8V7bENw177kdfFQK4l/hC7DeA4BJcjTx2Of
qtLwXs7sXu3PIIlfVJVzcAJ+UkvUxr96FdpnYBbcmCZNt4Zz1rt7SVwuFZq5uIRG
oC5Hc44JaI15LbmxscQXc2K4LtBBN2Q7MV1N8eaRzalIPl5FAvbkG8O7nu96q58e
kKpj6cA6q87saNb7dOoecaQIKN1I9Qyd4vfFTfsRqvt3NOylSZJgsVe8hsbN/kV5
G8fjFwXz05LjNmYvISPvg/kpWZZXYlCnxrIQbMsF/sTb4r1ahOFDB3nG5txcmBOL
j7xN+OjOgIVy1JZfGJBK/C/IzBYRz6tIXW9GO30L1QIDAQABo4ICkzCCAo8wHQYD
VR0OBBYEFIgIQ0yColyIQERa6HDYh8ov8jR1MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlL2FhYzM2MS01YTIyLTQ5OTMt
OTA4Yy02OTlmNGFjMGYzMWMvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvYWFjMzYxLTVhMjItNDk5My05
MDhjLTY5OWY0YWMwZjMxYy8xL2lBaERUSUtpWEloQVJGcm9jTmlIeWlfeU5IVS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCLY78MA0EAgACMAcDBQMqDuRAMA0GCSqGSIb3DQEBCwUAA4IBAQCB
EWB7qjR77GOz1eqmeql/KUZX/LlsyXpTf1cDMNBTv+HqS1EoRox98sCIXU12sNMY
Ym+WvO5bUIRDz8SC0mxV+MWlpR16kGt6VgZnUwND5qqtyPV6k2XCT4omkQKyRmgc
kPG5/eFaz7xrvtu4HYXAF/F7ZY7a9M0jvNZOL49QywsVZARdGcIjvhmR2TUpDTnr
FiUJSF+jHeBxKyjwHsbl05WBESTMW0edVibRWrGAKgnyw7IgqiCDiqzM7zbOcGgZ
7MmO8zPeHSIRLXSqO9Oo3VtWR7aD0/IqDUA2ZURJMwiYbvQNWp+0j1G24Cj7BetS
swlfgTRn0osxXl9FGR32
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:39 2024 by rpki-client on console-fra.rpki-client.org