Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lho2IJWLfp23OPBGWCg0ekyGkR8.cer
File: lho2IJWLfp23OPBGWCg0ekyGkR8.cer (raw, json)
Hash identifier: Cn1M7NCNF8WXjUZvP2MdNDQf3x6V/nWxjjN2tnGXixo=
Subject key identifier: 96:1A:36:20:95:8B:7E:9D:B7:38:F0:46:58:28:34:7A:4C:86:91:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01831279CE5B3750ADDB18D16705DA4ECBE3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/2/961A3620958B7E9DB738F0465828347A4C86911F.mft
caRepository: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/2
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Tue 06 Sep 2022 11:05:16 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 211244
IP: 2001:678:714::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:12:79:ce:5b:37:50:ad:db:18:d1:67:05:da:4e:cb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 6 11:05:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=961a3620958b7e9db738f0465828347a4c86911f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:d5:fc:72:8b:84:8b:d4:63:b3:7d:0b:d5:
81:b7:93:b9:c7:bf:1c:dd:5c:21:af:d1:6d:10:3e:
af:f2:29:3d:c6:0b:be:41:5b:43:58:6f:73:85:4d:
d9:29:9d:7c:4a:49:62:fe:07:0a:cb:1f:77:41:1b:
13:65:b3:10:1b:09:34:68:f5:23:f0:f6:3a:49:82:
e4:db:6c:b7:4a:ce:47:c7:7d:25:cc:22:e5:ad:fa:
fa:8c:00:af:db:fa:df:a5:24:27:dc:bf:c0:90:47:
1c:72:16:61:8d:8e:78:f9:dc:19:bf:a6:1a:5c:51:
fd:7b:fc:cf:8c:cd:c0:99:73:6d:de:df:a5:e1:75:
da:06:5b:9a:52:58:9a:ce:35:4a:92:63:00:b5:17:
ea:98:df:5c:3f:6d:d7:0c:6e:6a:09:39:e7:d2:d1:
e0:2c:d7:40:0b:4a:c2:c8:38:8f:0c:f8:6c:ad:9f:
a1:82:1e:30:0b:37:82:e1:34:d3:c4:e7:59:60:66:
2a:f7:bd:eb:8e:a2:04:54:4e:93:82:9f:d5:56:fc:
43:a0:81:93:fc:50:f1:c1:50:0e:6b:e0:dd:91:e5:
b7:65:ca:dd:dc:88:7c:3b:0a:72:28:1d:62:03:1c:
a9:d8:7b:72:47:c3:ab:bf:77:5b:c7:a5:2c:e1:d6:
ed:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1A:36:20:95:8B:7E:9D:B7:38:F0:46:58:28:34:7A:4C:86:91:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/2
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/2/961A3620958B7E9DB738F0465828347A4C86911F.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:714::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211244
Signature Algorithm: sha256WithRSAEncryption
3c:c2:9f:95:f7:8f:ce:ba:df:09:fb:1d:33:e0:01:61:67:e4:
45:b9:73:93:cd:ee:2f:84:23:29:05:83:d1:e2:f1:3a:53:4e:
0c:f1:2f:a7:e2:56:8f:ab:ed:ad:15:2c:9f:30:12:56:9f:76:
91:ef:31:c6:d0:94:da:bf:fe:ec:2f:c2:69:f5:8c:cb:b2:9b:
2d:d3:8b:d2:98:98:1b:41:b5:12:ba:e1:7f:d3:96:66:e3:1f:
26:5a:6e:f9:a9:0c:ab:e1:0f:b1:3d:3e:dd:94:0d:cd:83:09:
e2:e2:50:40:f8:48:c3:db:61:8e:f1:5d:38:e6:61:af:5d:f4:
a2:4e:6d:00:00:d9:d6:7b:76:e5:7d:cd:6e:d4:fd:75:84:d2:
47:30:be:bb:b8:68:4e:b6:c7:85:21:39:1f:cc:44:b5:df:01:
f1:d6:34:cd:b4:ac:1d:88:26:a7:fd:93:51:a8:0f:91:12:41:
c9:66:88:8f:9a:69:a1:37:3b:71:af:b0:06:a3:6a:bf:72:95:
cd:6e:b5:75:cc:1e:85:cd:e3:93:83:1b:f1:f1:80:28:6d:1b:
95:fb:79:08:62:88:a1:86:31:f0:9b:d7:41:14:5c:c1:fd:fe:
ca:84:a0:aa:75:ac:c5:cb:5d:19:c2:d8:a7:19:cd:f9:f7:ca:
9c:58:17:53
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgISAYMSec5bN1Ct2xjRZwXaTsvjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjIwOTA2MTEwNTE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjFhMzYyMDk1OGI3ZTlkYjczOGYwNDY1ODI4MzQ3YTRjODY5MTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6/V/HKLhIvUY7N9C9WBt5O5x78c
3Vwhr9FtED6v8ik9xgu+QVtDWG9zhU3ZKZ18Skli/gcKyx93QRsTZbMQGwk0aPUj
8PY6SYLk22y3Ss5Hx30lzCLlrfr6jACv2/rfpSQn3L/AkEccchZhjY54+dwZv6Ya
XFH9e/zPjM3AmXNt3t+l4XXaBluaUliazjVKkmMAtRfqmN9cP23XDG5qCTnn0tHg
LNdAC0rCyDiPDPhsrZ+hgh4wCzeC4TTTxOdZYGYq973rjqIEVE6Tgp/VVvxDoIGT
/FDxwVAOa+DdkeW3Zcrd3Ih8OwpyKB1iAxyp2HtyR8Orv3dbx6Us4dbtkwIDAQAB
o4ICgjCCAn4wHQYDVR0OBBYEFJYaNiCVi36dtzjwRlgoNHpMhpEfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggECBggrBgEFBQcBCwSB9TCB8jBCBggrBgEFBQcwBYY2cnN5
bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vYXMyMDc5NjAtcnBraS1j
YS8yMG8GCCsGAQUFBzAKhmNyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9hczIwNzk2MC1ycGtpLWNhLzIvOTYxQTM2MjA5NThCN0U5REI3MzhGMDQ2
NTgyODM0N0E0Qzg2OTExRi5tZnQwOwYIKwYBBQUHMA2GL2h0dHBzOi8vcnBraS5h
czIwNzk2MC5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBM
oEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BT
bzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAcUMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwM5LDANBgkqhkiG9w0BAQsFAAOCAQEAPMKflfeP
zrrfCfsdM+ABYWfkRblzk83uL4QjKQWD0eLxOlNODPEvp+JWj6vtrRUsnzASVp92
ke8xxtCU2r/+7C/CafWMy7KbLdOL0piYG0G1Errhf9OWZuMfJlpu+akMq+EPsT0+
3ZQNzYMJ4uJQQPhIw9thjvFdOOZhr130ok5tAADZ1nt25X3NbtT9dYTSRzC+u7ho
TrbHhSE5H8xEtd8B8dY0zbSsHYgmp/2TUagPkRJByWaIj5ppoTc7ca+wBqNqv3KV
zW61dcwehc3jk4Mb8fGAKG0blft5CGKIoYYx8JvXQRRcwf3+yoSgqnWsxctdGcLY
pxnN+ffKnFgXUw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:09 2024 by rpki-client on console-ams.rpki-client.org