Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/od17CslI1JsP4W6DkfIX3iGbfes.cer
File: od17CslI1JsP4W6DkfIX3iGbfes.cer (raw, json)
Hash identifier: TmfHuwhd4kYD6wfPQynC9POoNaxordbZ9vzuUkZHhOE=
Subject key identifier: A1:DD:7B:0A:C9:48:D4:9B:0F:E1:6E:83:91:F2:17:DE:21:9B:7D:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A55EBF2D56
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/bfa336-4e63-4da9-8063-e5f3d1a1751d/1/od17CslI1JsP4W6DkfIX3iGbfes.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/bfa336-4e63-4da9-8063-e5f3d1a1751d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:01:12 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.245.12.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 710259191126 (0xa55ebf2d56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:01:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1dd7b0ac948d49b0fe16e8391f217de219b7deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:ae:c9:69:60:83:72:28:68:b8:1e:06:9a:
4d:fe:f5:2f:ca:13:bd:b7:ec:28:e6:f1:fe:40:e8:
ed:75:e2:54:6e:f3:13:99:58:22:ee:e4:e9:53:a5:
d2:34:9a:44:d3:fd:57:28:71:8d:c1:bf:aa:28:00:
70:ed:fc:98:6b:3b:f5:b5:22:3b:7d:7c:7b:0b:7f:
da:8a:1a:59:d2:5b:67:0c:7f:ce:1b:0a:e2:f5:3d:
96:9a:88:d2:4f:62:83:5b:7c:be:f6:b3:0a:3a:0b:
3b:32:b8:23:03:0c:08:ba:8a:2c:c9:0c:b0:ea:04:
e1:1f:36:74:51:ea:91:47:1e:2e:81:bb:6e:c6:7e:
0f:eb:01:c1:b8:97:90:f0:5a:c7:7c:43:4a:f4:90:
95:da:f0:c8:cf:e4:e2:1e:a9:a7:be:f9:f7:96:70:
92:e2:78:bc:07:3b:e8:74:0e:fb:e5:86:43:93:38:
32:b0:43:64:ff:8e:98:3f:f9:5b:72:d4:ba:d5:8e:
38:e4:c8:a4:c1:27:80:0b:8a:10:9f:ed:b4:c7:d4:
94:47:64:9b:6e:0b:80:34:a1:4f:af:3d:77:fc:95:
6e:71:7a:e5:eb:b4:ac:d8:a6:a1:8f:3f:22:5b:01:
3b:4e:a8:55:41:65:96:08:0c:3d:2e:4c:e8:92:77:
9c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DD:7B:0A:C9:48:D4:9B:0F:E1:6E:83:91:F2:17:DE:21:9B:7D:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bfa336-4e63-4da9-8063-e5f3d1a1751d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bfa336-4e63-4da9-8063-e5f3d1a1751d/1/od17CslI1JsP4W6DkfIX3iGbfes.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.12.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:9f:ab:ba:e6:c3:0a:ff:e2:02:7d:96:4c:8f:cc:c2:4b:db:
b1:6e:93:ee:2b:73:94:82:02:c0:1e:2c:f3:3f:49:84:9c:92:
3f:6c:ef:6c:b9:f4:fd:c1:1d:25:33:5a:ba:7f:ce:96:97:6a:
40:ce:71:da:a3:46:46:21:d1:c8:54:35:8e:a7:41:8d:bd:89:
04:09:6d:69:ee:47:6c:ff:38:d0:20:52:01:a0:0e:d2:9c:fc:
0b:74:b5:f1:30:22:f0:65:40:a7:2e:f7:cf:0c:df:73:22:14:
d5:85:3d:2a:ce:65:2e:bb:41:eb:09:98:28:5d:c6:24:29:9f:
34:5e:fe:8f:eb:c8:66:0b:f5:80:c2:03:7c:b8:57:03:c2:c5:
41:58:6e:40:55:54:5a:69:26:2d:ec:a3:31:04:b6:95:d1:0b:
65:96:a4:d1:94:62:cd:f2:8c:3b:ca:00:80:98:d0:80:e1:e9:
96:0f:f3:8a:42:ca:bb:ff:42:03:ee:7f:9b:23:d7:6f:1e:3f:
01:1c:9a:82:d9:5d:b6:98:6e:28:cc:23:84:93:9b:56:51:e0:
07:f7:4c:fe:b1:11:ec:4c:fe:21:19:53:5b:c0:d1:73:4c:6a:
f2:37:97:a8:6b:33:61:50:52:45:00:71:24:19:48:64:a0:2a:
44:b1:fa:34
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAKVevy1WMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTEwMTEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhMWRkN2IwYWM5
NDhkNDliMGZlMTZlODM5MWYyMTdkZTIxOWI3ZGViMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAp2GuyWlgg3IoaLgeBppN/vUvyhO9t+wo5vH+QOjtdeJU
bvMTmVgi7uTpU6XSNJpE0/1XKHGNwb+qKABw7fyYazv1tSI7fXx7C3/aihpZ0ltn
DH/OGwri9T2WmojST2KDW3y+9rMKOgs7MrgjAwwIuoosyQyw6gThHzZ0UeqRRx4u
gbtuxn4P6wHBuJeQ8FrHfENK9JCV2vDIz+TiHqmnvvn3lnCS4ni8BzvodA775YZD
kzgysENk/46YP/lbctS61Y445MikwSeAC4oQn+20x9SUR2SbbguANKFPrz13/JVu
cXrl67Ss2Kahjz8iWwE7TqhVQWWWCAw9LkzoknecTQIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFKHdewrJSNSbD+Fug5HyF94hm33rMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyL2JmYTMzNi00ZTYzLTRkYTkt
ODA2My1lNWYzZDFhMTc1MWQvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvYmZhMzM2LTRlNjMtNGRhOS04
MDYzLWU1ZjNkMWExNzUxZC8xL29kMTdDc2xJMUpzUDRXNkRrZklYM2lHYmZlcy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCufUMMA0GCSqGSIb3DQEBCwUAA4IBAQCqn6u65sMK/+ICfZZMj8zC
S9uxbpPuK3OUggLAHizzP0mEnJI/bO9sufT9wR0lM1q6f86Wl2pAznHao0ZGIdHI
VDWOp0GNvYkECW1p7kds/zjQIFIBoA7SnPwLdLXxMCLwZUCnLvfPDN9zIhTVhT0q
zmUuu0HrCZgoXcYkKZ80Xv6P68hmC/WAwgN8uFcDwsVBWG5AVVRaaSYt7KMxBLaV
0QtllqTRlGLN8ow7ygCAmNCA4emWD/OKQsq7/0ID7n+bI9dvHj8BHJqC2V22mG4o
zCOEk5tWUeAH90z+sRHsTP4hGVNbwNFzTGryN5eoazNhUFJFAHEkGUhkoCpEsfo0
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:11 2023 by rpki-client on console-ams.rpki-client.org