Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n5Gu3lTCCmmlzlc8dvEuNOm0oXQ.cer
File: n5Gu3lTCCmmlzlc8dvEuNOm0oXQ.cer (raw, json)
Hash identifier: xxfBg4viy9AURf9JXK6wSlU4RTJNjAtZ4USXkhRyCVE=
Subject key identifier: 9F:91:AE:DE:54:C2:0A:69:A5:CE:57:3C:76:F1:2E:34:E9:B4:A1:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A95E6653F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/232c0a-2739-48ff-a373-13da45d1577e/1/n5Gu3lTCCmmlzlc8dvEuNOm0oXQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/232c0a-2739-48ff-a373-13da45d1577e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:56:44 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 15767
IP: 195.35.122.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 727433237494 (0xa95e6653f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:56:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f91aede54c20a69a5ce573c76f12e34e9b4a174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b4:16:63:6f:68:ce:96:27:66:19:3b:84:17:
3c:41:48:cf:bd:0d:5c:24:c2:c4:72:1e:65:51:cd:
07:f1:53:f5:c9:91:14:86:36:93:e5:d5:8e:25:32:
ee:bc:e5:63:53:4e:7d:8f:b8:40:bb:36:0a:a7:72:
05:ab:e2:6a:17:ff:68:cc:2a:38:f1:c6:13:98:d6:
1f:34:f6:3d:50:88:65:72:01:78:d8:81:2b:bb:0c:
0d:56:30:19:15:af:5e:be:b3:48:b8:4d:33:26:41:
57:d1:6a:14:7b:cf:c4:2a:b3:29:2a:cf:cb:db:e6:
1a:05:27:b2:58:b2:7c:01:a9:c9:9a:07:61:f2:d0:
d7:07:84:5a:cc:e4:79:20:f8:b0:22:3e:e2:6d:4c:
c6:49:f6:6a:8f:57:a0:91:9d:55:52:cf:b9:3c:7c:
31:88:6a:f7:22:b7:20:e4:fb:a3:f1:d2:48:29:c8:
a9:c2:7a:d4:74:80:aa:6f:3c:bf:62:74:41:33:49:
03:2e:32:b5:03:c4:aa:d8:6d:7f:79:bd:ac:9d:03:
f0:37:7a:f9:be:f8:8f:dc:25:e5:82:98:21:76:03:
d1:19:d1:3b:33:59:07:33:6a:c0:ef:5c:3e:de:3c:
f6:b2:6e:de:30:90:d9:6c:16:87:f1:68:b7:a2:d4:
97:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:91:AE:DE:54:C2:0A:69:A5:CE:57:3C:76:F1:2E:34:E9:B4:A1:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/232c0a-2739-48ff-a373-13da45d1577e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/232c0a-2739-48ff-a373-13da45d1577e/1/n5Gu3lTCCmmlzlc8dvEuNOm0oXQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.122.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15767
Signature Algorithm: sha256WithRSAEncryption
7f:e0:7b:a5:b3:a6:c7:6f:7d:8c:4e:d3:e8:f5:be:d8:cb:8f:
2e:d9:85:df:cf:a9:c0:ce:e1:40:f1:29:15:fb:f4:e1:23:27:
ff:4a:7c:ff:bd:a8:b6:09:01:cb:35:4c:d8:27:6e:90:6b:18:
11:a4:32:a9:64:08:99:4a:45:4d:e2:1a:28:86:07:6d:9b:5c:
6d:cb:ca:72:e6:d5:38:8a:23:64:06:15:ed:18:ea:6d:55:60:
cb:76:e8:b4:a7:b9:0e:a9:13:f5:e7:73:e5:46:a9:fc:73:f6:
00:20:b5:2a:6d:87:03:8e:54:5e:e4:c5:61:81:00:53:22:2a:
22:dd:ca:9b:f5:29:62:48:d3:27:32:62:d5:ce:a4:25:48:12:
19:a4:a3:43:55:3d:47:53:c0:d0:02:e5:0a:3e:11:0c:3f:1f:
d0:74:8d:ce:b4:84:bd:83:65:1a:31:3c:0f:c1:6b:6c:dd:18:
a9:d5:7f:e0:5f:91:16:34:73:8f:93:a3:4c:40:df:52:56:b3:
c5:ca:75:d1:13:ab:1b:9c:d7:3d:17:a0:1a:bf:7d:fc:d8:99:
b4:12:fb:2c:68:68:62:b0:86:c5:97:b6:06:25:f4:23:db:0f:
6f:18:ee:14:46:36:92:09:c0:58:f0:0d:f2:b3:1c:ca:38:8f:
fc:4e:97:36
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIGAKleZlP2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTQ1NjQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5ZjkxYWVkZTU0
YzIwYTY5YTVjZTU3M2M3NmYxMmUzNGU5YjRhMTc0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA4bQWY29ozpYnZhk7hBc8QUjPvQ1cJMLEch5lUc0H8VP1
yZEUhjaT5dWOJTLuvOVjU059j7hAuzYKp3IFq+JqF/9ozCo48cYTmNYfNPY9UIhl
cgF42IEruwwNVjAZFa9evrNIuE0zJkFX0WoUe8/EKrMpKs/L2+YaBSeyWLJ8AanJ
mgdh8tDXB4RazOR5IPiwIj7ibUzGSfZqj1egkZ1VUs+5PHwxiGr3Ircg5Puj8dJI
KcipwnrUdICqbzy/YnRBM0kDLjK1A8Sq2G1/eb2snQPwN3r5vviP3CXlgpghdgPR
GdE7M1kHM2rA71w+3jz2sm7eMJDZbBaH8Wi3otSXRQIDAQABo4ICnzCCApswHQYD
VR0OBBYEFJ+Rrt5Uwgpppc5XPHbxLjTptKF0MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3LzIzMmMwYS0yNzM5LTQ4ZmYt
YTM3My0xM2RhNDVkMTU3N2UvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvMjMyYzBhLTI3MzktNDhmZi1h
MzczLTEzZGE0NWQxNTc3ZS8xL241R3UzbFRDQ21tbHpsYzhkdkV1Tk9tMG9YUS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAwyN6MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAj2XMA0GCSqGSIb3
DQEBCwUAA4IBAQB/4Huls6bHb32MTtPo9b7Yy48u2YXfz6nAzuFA8SkV+/ThIyf/
Snz/vai2CQHLNUzYJ26QaxgRpDKpZAiZSkVN4hoohgdtm1xty8py5tU4iiNkBhXt
GOptVWDLdui0p7kOqRP153PlRqn8c/YAILUqbYcDjlRe5MVhgQBTIioi3cqb9Sli
SNMnMmLVzqQlSBIZpKNDVT1HU8DQAuUKPhEMPx/QdI3OtIS9g2UaMTwPwWts3Rip
1X/gX5EWNHOPk6NMQN9SVrPFynXRE6sbnNc9F6Aav3382Jm0EvssaGhisIbFl7YG
JfQj2w9vGO4URjaSCcBY8A3ysxzKOI/8Tpc2
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:28 2024 by rpki-client on console-ams.rpki-client.org