Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lyzT_vNxJ-hq5rxz7VfA3I8WRQw.cer
File: lyzT_vNxJ-hq5rxz7VfA3I8WRQw.cer (raw, json)
Hash identifier: i/AjKQVeVqtV0XLwi0VUF148Fak4CMX+FyS9cHpWSXs=
Subject key identifier: 97:2C:D3:FE:F3:71:27:E8:6A:E6:BC:73:ED:57:C0:DC:8F:16:45:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9EF2407E2E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/4f598d-7dde-4a09-ae74-01feac372de7/1/lyzT_vNxJ-hq5rxz7VfA3I8WRQw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/4f598d-7dde-4a09-ae74-01feac372de7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:54:01 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.156.148.0/22
IP: 2a0f:2780::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 682669145646 (0x9ef2407e2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:54:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=972cd3fef37127e86ae6bc73ed57c0dc8f16450c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:61:71:65:af:ba:32:e2:53:f2:a3:4a:59:15:
8c:a9:3a:c4:28:8b:ce:b2:6e:e9:2a:23:5f:0c:38:
3c:db:42:c6:55:e1:de:be:01:8b:df:9d:a0:07:ef:
21:19:97:2f:c4:6d:64:9e:b0:b1:2f:95:9d:ed:54:
7e:9e:8e:e2:16:02:e1:4c:05:ec:53:4c:8f:3d:f7:
71:7a:26:b0:80:40:c8:f1:b1:71:dc:8a:d2:2d:7d:
9a:fe:c3:7e:2a:f5:77:30:03:fc:2b:67:cc:5c:4f:
43:2c:24:1f:9a:b5:3e:7e:3b:01:f9:76:4c:bd:5d:
7f:8c:d7:64:b6:aa:bc:eb:2b:e5:09:ea:bb:d7:c2:
1a:7d:33:1a:73:64:04:0b:e7:af:96:30:56:d4:95:
94:67:52:da:bc:ea:cb:05:31:e2:b6:aa:fa:fc:62:
33:45:bc:98:eb:01:79:8e:5b:b3:48:cb:4e:d1:db:
cb:6e:3c:83:af:5d:bf:88:ed:f8:57:5b:9e:2f:66:
dd:b5:67:78:d0:25:36:6d:cc:e1:72:f9:a4:b7:27:
ae:52:49:d3:23:ca:bd:3d:6e:00:be:e1:6c:66:a0:
31:4c:8a:78:cf:b4:6e:84:f8:53:0f:ee:b7:26:9b:
3e:ce:0c:b0:40:00:37:9a:f2:30:cf:b5:99:ed:94:
2d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2C:D3:FE:F3:71:27:E8:6A:E6:BC:73:ED:57:C0:DC:8F:16:45:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f598d-7dde-4a09-ae74-01feac372de7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f598d-7dde-4a09-ae74-01feac372de7/1/lyzT_vNxJ-hq5rxz7VfA3I8WRQw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.148.0/22
IPv6:
2a0f:2780::/29
Signature Algorithm: sha256WithRSAEncryption
2f:73:db:5b:ea:bf:f1:48:a8:ac:b6:ea:5a:14:54:f0:07:e4:
d8:eb:3a:df:d9:24:c5:58:4d:ff:42:74:c0:f9:aa:c0:f4:f4:
81:3f:35:d0:ac:21:94:cb:54:03:85:58:51:e0:f2:ec:92:ff:
8b:44:4a:39:34:ce:92:dd:99:48:bf:30:96:f2:53:a5:1f:ca:
64:bd:e7:28:35:40:f2:98:7b:ca:08:cb:42:c7:36:ac:f3:07:
c8:70:cc:5a:65:60:58:be:55:08:b3:2f:72:bc:5a:3d:c8:46:
7e:49:06:31:2d:fa:5b:64:d1:68:40:be:84:d1:47:e2:01:d3:
14:a3:9f:5e:3f:d6:3d:7f:38:ed:3e:d2:2c:a7:d0:9e:82:1f:
a9:ea:af:0a:71:ad:0f:32:1b:05:8f:94:ff:ea:df:85:48:1d:
71:bf:88:37:52:ac:72:d2:d0:73:32:6f:88:22:ae:b0:c2:61:
0d:2d:1d:df:e8:ba:57:55:91:03:fc:cb:93:89:37:6c:43:b0:
c3:46:e7:47:66:6d:c9:8e:79:37:32:d2:1b:de:48:52:33:be:
f2:22:70:7e:d9:f0:56:ad:7c:1e:46:2d:85:d3:ff:ec:4d:e4:
07:47:d2:d1:ea:15:a0:60:e6:e1:0a:51:3c:20:de:13:fd:50:
86:ff:6e:b5
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIGAJ7yQH4uMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDU1NDAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5NzJjZDNmZWYz
NzEyN2U4NmFlNmJjNzNlZDU3YzBkYzhmMTY0NTBjMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAx2FxZa+6MuJT8qNKWRWMqTrEKIvOsm7pKiNfDDg820LG
VeHevgGL352gB+8hGZcvxG1knrCxL5Wd7VR+no7iFgLhTAXsU0yPPfdxeiawgEDI
8bFx3IrSLX2a/sN+KvV3MAP8K2fMXE9DLCQfmrU+fjsB+XZMvV1/jNdktqq86yvl
Ceq718IafTMac2QEC+evljBW1JWUZ1LavOrLBTHitqr6/GIzRbyY6wF5jluzSMtO
0dvLbjyDr12/iO34V1ueL2bdtWd40CU2bczhcvmktyeuUknTI8q9PW4AvuFsZqAx
TIp4z7RuhPhTD+63Jps+zgywQAA3mvIwz7WZ7ZQtNwIDAQABo4ICkzCCAo8wHQYD
VR0OBBYEFJcs0/7zcSfoaua8c+1XwNyPFkUMMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxLzRmNTk4ZC03ZGRlLTRhMDkt
YWU3NC0wMWZlYWMzNzJkZTcvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvNGY1OThkLTdkZGUtNGEwOS1h
ZTc0LTAxZmVhYzM3MmRlNy8xL2x5elRfdk54Si1ocTVyeHo3VmZBM0k4V1JRdy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCLZyUMA0EAgACMAcDBQMqDyeAMA0GCSqGSIb3DQEBCwUAA4IBAQAv
c9tb6r/xSKistupaFFTwB+TY6zrf2STFWE3/QnTA+arA9PSBPzXQrCGUy1QDhVhR
4PLskv+LREo5NM6S3ZlIvzCW8lOlH8pkvecoNUDymHvKCMtCxzas8wfIcMxaZWBY
vlUIsy9yvFo9yEZ+SQYxLfpbZNFoQL6E0UfiAdMUo59eP9Y9fzjtPtIsp9Cegh+p
6q8Kca0PMhsFj5T/6t+FSB1xv4g3Uqxy0tBzMm+IIq6wwmENLR3f6LpXVZED/MuT
iTdsQ7DDRudHZm3Jjnk3MtIb3khSM77yInB+2fBWrXweRi2F0//sTeQHR9LR6hWg
YObhClE8IN4T/VCG/261
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:12 2024 by rpki-client on console-fra.rpki-client.org