Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jd4attTkH4d28vbQSVvGqwqc6BM.cer
File: jd4attTkH4d28vbQSVvGqwqc6BM.cer (raw, json)
Hash identifier: VPM+Oeaspst9P3dUOmDqMhFDTLB4AF8kB9zxDxa8L6I=
Subject key identifier: 8D:DE:1A:B6:D4:E4:1F:87:76:F2:F6:D0:49:5B:C6:AB:0A:9C:E8:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9CDF4C25BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/e5060f-647d-4762-8528-8dd91307cd2e/1/jd4attTkH4d28vbQSVvGqwqc6BM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/e5060f-647d-4762-8528-8dd91307cd2e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:56:00 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 199861
IP: 2a00:d660::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673761207742 (0x9cdf4c25be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:56:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8dde1ab6d4e41f8776f2f6d0495bc6ab0a9ce813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:2e:10:25:5e:f3:7c:2c:e9:36:73:c5:49:
d9:29:35:76:e6:52:7e:e0:b5:e6:a2:97:45:6c:e4:
1b:45:8a:9c:3c:8e:c8:3e:7d:10:20:db:f5:07:a8:
d7:5e:8a:ab:5b:98:b3:c1:c5:00:61:ee:7a:de:f4:
87:5a:18:65:28:25:c8:4a:ad:f3:b4:70:6f:ab:19:
76:d1:ae:31:ed:6e:d1:ca:19:4f:e8:55:5f:35:c4:
4a:dd:ce:a8:76:f5:86:db:7d:9e:03:69:ef:65:63:
b8:3d:c8:98:6b:2e:66:cb:9d:0d:1c:74:7e:4e:32:
9f:6f:61:ad:8e:16:f4:36:5d:2b:4c:ae:8a:2b:37:
bc:12:a7:8b:99:b3:ff:40:52:cc:86:63:95:d0:c2:
b1:c1:31:bc:83:e4:b5:03:f4:f5:0b:8f:b7:aa:39:
b6:fc:07:f3:e0:30:ea:f1:2e:e4:a9:5e:2f:59:cd:
27:77:a8:bb:01:a5:29:0e:18:ab:ac:57:6a:55:7a:
d6:fe:9e:7b:32:ff:1f:6a:4f:2b:93:a5:2a:f4:68:
ae:8b:af:7b:28:a6:03:f6:b7:d7:15:71:7f:a2:ac:
29:bf:9e:03:bb:f6:b2:82:e9:10:1a:c6:0d:ae:05:
02:c0:63:22:f3:d0:31:b3:b7:1a:9c:de:cb:59:71:
4b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DE:1A:B6:D4:E4:1F:87:76:F2:F6:D0:49:5B:C6:AB:0A:9C:E8:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e5060f-647d-4762-8528-8dd91307cd2e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e5060f-647d-4762-8528-8dd91307cd2e/1/jd4attTkH4d28vbQSVvGqwqc6BM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:d660::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199861
Signature Algorithm: sha256WithRSAEncryption
af:82:02:75:b8:63:3e:e7:c7:cd:fa:61:43:a9:4d:a9:48:67:
f2:dd:38:04:8b:4d:10:9b:18:cb:62:90:c9:03:67:98:8f:6e:
8b:bf:9b:25:76:bf:07:a4:96:dd:bf:76:d6:bd:df:e2:ec:a3:
bd:bc:9e:cd:30:09:9c:50:d3:74:f0:75:71:41:30:34:6e:72:
1a:e7:ef:ea:ac:9a:e4:9a:03:c2:c6:99:ed:c7:f1:8e:cf:87:
27:6e:fd:59:db:07:23:b0:f5:7c:95:a2:47:df:41:d1:a4:10:
fa:7a:78:ab:16:65:f6:1a:f8:97:e3:c0:29:ec:3b:68:0d:33:
3a:b5:bb:fa:0a:54:5c:93:fd:4a:64:73:b7:15:51:24:77:c3:
9d:69:f7:dc:aa:ff:ee:df:cc:b9:88:e2:51:79:a3:09:2a:f3:
cd:93:dc:82:7a:5b:6e:22:89:40:29:d5:56:1c:ad:d1:49:fc:
4e:f3:fe:64:2b:80:fd:1b:29:e4:09:a3:0b:eb:1b:af:fd:65:
b2:09:c9:cb:6d:5c:d6:61:47:3c:d7:2e:6e:09:5d:24:6d:b8:
30:84:66:36:f4:6e:df:c8:90:aa:ba:ff:e9:37:6f:fc:c3:bd:
79:f1:1c:a7:18:68:5d:18:5a:20:bc:80:56:5d:be:3d:45:58:
3a:d0:2a:bb
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIGAJzfTCW+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDM1NjAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4ZGRlMWFiNmQ0
ZTQxZjg3NzZmMmY2ZDA0OTViYzZhYjBhOWNlODEzMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAyD8uECVe83ws6TZzxUnZKTV25lJ+4LXmopdFbOQbRYqc
PI7IPn0QINv1B6jXXoqrW5izwcUAYe563vSHWhhlKCXISq3ztHBvqxl20a4x7W7R
yhlP6FVfNcRK3c6odvWG232eA2nvZWO4PciYay5my50NHHR+TjKfb2Gtjhb0Nl0r
TK6KKze8EqeLmbP/QFLMhmOV0MKxwTG8g+S1A/T1C4+3qjm2/Afz4DDq8S7kqV4v
Wc0nd6i7AaUpDhirrFdqVXrW/p57Mv8fak8rk6Uq9Giui697KKYD9rfXFXF/oqwp
v54Du/aygukQGsYNrgUCwGMi89Axs7canN7LWXFLwwIDAQABo4ICoTCCAp0wHQYD
VR0OBBYEFI3eGrbU5B+HdvL20ElbxqsKnOgTMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlL2U1MDYwZi02NDdkLTQ3NjIt
ODUyOC04ZGQ5MTMwN2NkMmUvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvZTUwNjBmLTY0N2QtNDc2Mi04
NTI4LThkZDkxMzA3Y2QyZS8xL2pkNGF0dFRrSDRkMjh2YlFTVnZHcXdxYzZCTS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUDKgDWYDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDDLUwDQYJKoZI
hvcNAQELBQADggEBAK+CAnW4Yz7nx836YUOpTalIZ/LdOASLTRCbGMtikMkDZ5iP
bou/myV2vweklt2/dta93+Lso728ns0wCZxQ03TwdXFBMDRuchrn7+qsmuSaA8LG
me3H8Y7Phydu/VnbByOw9XyVokffQdGkEPp6eKsWZfYa+JfjwCnsO2gNMzq1u/oK
VFyT/Upkc7cVUSR3w51p99yq/+7fzLmI4lF5owkq882T3IJ6W24iiUAp1VYcrdFJ
/E7z/mQrgP0bKeQJowvrG6/9ZbIJycttXNZhRzzXLm4JXSRtuDCEZjb0bt/IkKq6
/+k3b/zDvXnxHKcYaF0YWiC8gFZdvj1FWDrQKrs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:51 2024 by rpki-client on console-fra.rpki-client.org