Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o2fb-qhCt4eBb0HKLcvdtMBYl1g.cer
File: o2fb-qhCt4eBb0HKLcvdtMBYl1g.cer (raw, json)
Hash identifier: nJFys98nZiEBIPmervese6FDiao8xUqDISrUiXMmTS0=
Subject key identifier: A3:67:DB:FA:A8:42:B7:87:81:6F:41:CA:2D:CB:DD:B4:C0:58:97:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A918EA4B38
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/fd60f0-bca4-4a9e-86d1-26483ecf6b04/1/o2fb-qhCt4eBb0HKLcvdtMBYl1g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/fd60f0-bca4-4a9e-86d1-26483ecf6b04/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:07:53 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 34345
IP: 193.242.117.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 726267480888 (0xa918ea4b38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:07:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a367dbfaa842b787816f41ca2dcbddb4c0589758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:18:54:9f:5e:3a:45:35:2f:4e:03:3e:57:37:
de:00:46:e9:f4:02:e0:4c:22:60:28:3b:56:e4:bf:
b1:85:2a:dd:5f:69:c7:c4:a2:d5:d3:f0:8d:1c:52:
c4:d9:52:70:8c:40:fc:b5:1e:b7:10:93:25:5f:3d:
e6:6f:3f:79:ae:d9:c2:b5:a5:91:44:82:3a:6f:fa:
de:0e:86:ef:ee:95:e7:72:66:c7:bc:e4:eb:cd:99:
ae:25:cf:aa:4d:a0:4f:9e:bc:b5:6e:96:1c:d3:3b:
df:2f:9e:c8:4c:73:53:ce:b7:cf:11:9a:ae:70:9c:
1b:84:74:a2:f8:7b:6a:19:8f:ba:5e:51:12:96:28:
c2:5c:d9:e3:23:b1:be:7b:9e:a4:17:64:93:be:1c:
3e:d9:da:10:25:96:2b:dd:c6:da:cb:4b:61:f6:3d:
54:59:8a:62:4b:03:4e:2c:39:78:7a:8a:6c:30:7a:
00:87:7e:59:95:7b:8f:9b:28:5a:bd:35:4a:bc:ea:
71:51:d0:d6:15:45:46:76:34:f6:4c:0b:ef:93:53:
37:27:9f:95:d3:c7:5d:1b:0d:26:70:31:87:60:9a:
00:47:96:4e:14:24:72:00:b8:c8:ce:ff:4b:31:55:
bf:65:63:70:15:f9:ae:e5:73:cf:15:d9:cb:8d:e5:
93:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:67:DB:FA:A8:42:B7:87:81:6F:41:CA:2D:CB:DD:B4:C0:58:97:58
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/fd60f0-bca4-4a9e-86d1-26483ecf6b04/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/fd60f0-bca4-4a9e-86d1-26483ecf6b04/1/o2fb-qhCt4eBb0HKLcvdtMBYl1g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.117.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34345
Signature Algorithm: sha256WithRSAEncryption
51:e7:f8:b2:df:f7:39:95:c9:9c:e1:26:4a:17:a3:00:5c:31:
8f:d4:12:16:cf:de:e4:67:c3:e2:3f:51:26:46:b1:14:90:a8:
10:ee:37:e9:ab:10:2e:e5:c9:6a:11:68:72:af:e3:0e:51:f2:
5a:e6:dd:e0:07:a1:36:06:f5:5a:2c:2b:5b:93:39:53:aa:af:
8f:f8:53:10:57:33:9b:c1:e7:3f:f9:f3:10:7f:c0:b5:a3:37:
db:05:dc:69:e8:cb:5a:29:ed:50:82:da:ff:55:37:2a:b2:2c:
d4:2c:9b:1c:ca:2a:97:e5:12:0e:36:85:00:ed:7c:e0:ce:a8:
b6:84:97:c9:d3:43:7a:82:fe:10:5b:ff:10:cd:b7:6e:05:db:
24:77:a9:4f:78:f0:91:ba:a7:77:5d:48:ec:62:9a:2b:29:50:
0f:e2:40:fb:0b:62:60:b6:9d:67:4b:80:87:5d:6a:e8:cb:14:
00:63:65:00:ea:e3:7e:9b:66:f3:72:a0:b3:ca:76:c1:9d:10:
e4:82:3d:ee:0b:62:fa:a4:da:03:ca:ce:5c:f3:04:d2:43:06:
c7:a1:0b:e1:0b:ce:d8:5c:74:8c:a5:5a:76:70:75:de:cf:85:
e1:df:cd:2e:02:7b:8b:fb:fc:91:18:c0:a1:c8:00:ac:6f:a7:
84:53:29:be
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgIGAKkY6ks4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTQwNzUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhMzY3ZGJmYWE4
NDJiNzg3ODE2ZjQxY2EyZGNiZGRiNGMwNTg5NzU4MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAyxhUn146RTUvTgM+VzfeAEbp9ALgTCJgKDtW5L+xhSrd
X2nHxKLV0/CNHFLE2VJwjED8tR63EJMlXz3mbz95rtnCtaWRRII6b/reDobv7pXn
cmbHvOTrzZmuJc+qTaBPnry1bpYc0zvfL57ITHNTzrfPEZqucJwbhHSi+HtqGY+6
XlESlijCXNnjI7G+e56kF2STvhw+2doQJZYr3cbay0th9j1UWYpiSwNOLDl4eops
MHoAh35ZlXuPmyhavTVKvOpxUdDWFUVGdjT2TAvvk1M3J5+V08ddGw0mcDGHYJoA
R5ZOFCRyALjIzv9LMVW/ZWNwFfmu5XPPFdnLjeWTvQIDAQABo4ICoDCCApwwHQYD
VR0OBBYEFKNn2/qoQreHgW9Byi3L3bTAWJdYMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkL2ZkNjBmMC1iY2E0LTRhOWUt
ODZkMS0yNjQ4M2VjZjZiMDQvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvZmQ2MGYwLWJjYTQtNGE5ZS04
NmQxLTI2NDgzZWNmNmIwNC8xL28yZmItcWhDdDRlQmIwSEtMY3ZkdE1CWWwxZy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAwfJ1MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCGKTANBgkqhkiG
9w0BAQsFAAOCAQEAUef4st/3OZXJnOEmShejAFwxj9QSFs/e5GfD4j9RJkaxFJCo
EO436asQLuXJahFocq/jDlHyWubd4AehNgb1WiwrW5M5U6qvj/hTEFczm8HnP/nz
EH/AtaM32wXcaejLWintUILa/1U3KrIs1CybHMoql+USDjaFAO184M6otoSXydND
eoL+EFv/EM23bgXbJHepT3jwkbqnd11I7GKaKylQD+JA+wtiYLadZ0uAh11q6MsU
AGNlAOrjfptm83Kgs8p2wZ0Q5II97gti+qTaA8rOXPME0kMGx6EL4QvO2Fx0jKVa
dnB13s+F4d/NLgJ7i/v8kRjAocgArG+nhFMpvg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:32 2024 by rpki-client on console-fra.rpki-client.org