Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ogPgO6G2STBVZtnThkSwAYN0-KY.cer
File: ogPgO6G2STBVZtnThkSwAYN0-KY.cer (raw, json)
Hash identifier: Ks9JqNWLCIuAPY4vdQhIJ08fc5zmX125i/C47owRIdw=
Subject key identifier: A2:03:E0:3B:A1:B6:49:30:55:66:D9:D3:86:44:B0:01:83:74:F8:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: ADCD08D037
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/901ae2-16ea-4769-b461-a26ab305214f/1/ogPgO6G2STBVZtnThkSwAYN0-KY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/901ae2-16ea-4769-b461-a26ab305214f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 24 Feb 2022 15:17:28 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 210836
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 746469249079 (0xadcd08d037)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 24 15:17:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a203e03ba1b649305566d9d38644b0018374f8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:10:5f:2b:09:30:58:d0:4e:3b:3d:b7:e6:
ca:7c:5e:80:40:00:33:41:db:8a:82:2c:79:a0:e3:
4d:d1:4d:3f:cb:2a:fa:f0:00:31:dd:4a:5c:92:9f:
59:8d:87:fe:c6:37:f4:c2:5e:98:97:bd:dd:12:a5:
3e:1f:2b:5d:33:c4:ca:d9:ec:fe:83:ca:27:28:42:
3b:a4:b3:ad:7f:03:b3:3b:e2:20:65:5a:cf:d8:b0:
74:fa:47:d8:9e:ca:be:78:6d:89:ac:cf:4b:1d:ad:
76:23:ab:49:fc:13:b0:b9:0a:8d:dc:da:72:fd:02:
8d:a6:f6:ab:8e:93:d7:d1:ce:0e:95:b4:01:d9:3b:
64:48:69:bb:19:97:94:0a:71:c2:33:0a:7a:58:13:
a1:3b:c3:21:a5:0d:8b:ef:3e:97:f4:09:5c:18:ff:
69:d3:f0:d0:0e:b9:74:04:37:04:2d:05:2b:d7:e4:
28:60:d4:41:03:df:31:cf:49:76:26:59:1e:84:74:
a3:0c:8f:ed:5f:35:67:3c:cd:23:0f:fe:1c:f4:e4:
24:61:e6:94:f5:94:71:77:49:92:26:75:24:1b:c0:
fe:12:2c:e6:8a:ef:dc:8a:76:15:d9:3d:bd:6f:89:
29:0d:4e:77:fb:a5:63:91:e3:27:94:87:13:6c:fc:
35:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:03:E0:3B:A1:B6:49:30:55:66:D9:D3:86:44:B0:01:83:74:F8:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/901ae2-16ea-4769-b461-a26ab305214f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/901ae2-16ea-4769-b461-a26ab305214f/1/ogPgO6G2STBVZtnThkSwAYN0-KY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210836
Signature Algorithm: sha256WithRSAEncryption
7a:89:99:d8:84:01:50:34:36:86:2b:13:57:ed:0b:67:1b:a2:
ad:d4:0c:fa:bb:e6:6c:78:ea:e4:02:6b:8e:17:bd:36:a5:80:
82:ac:69:d3:81:20:66:b0:7c:13:e6:f8:59:b5:1c:30:b5:f1:
65:5e:60:c0:e2:61:b1:dc:24:b4:ed:bf:95:f0:e8:a3:21:16:
97:70:1d:51:92:05:97:48:1b:e0:5b:12:85:f1:c2:72:52:79:
50:dd:f8:44:11:b2:3f:ca:0a:be:ff:33:53:fb:9a:a5:fd:fd:
a5:90:f7:6a:92:eb:59:67:02:df:7b:9c:d4:5b:ee:5b:42:db:
34:e4:c0:46:f1:2c:d1:7f:b5:27:8a:17:c4:9e:02:37:3e:a6:
a8:da:94:1e:92:0c:4e:4a:82:8f:af:db:ce:21:7b:85:f8:9f:
dd:0c:a3:9d:fa:ce:40:36:bd:dc:e6:17:8a:61:7c:95:1c:ff:
84:d9:15:02:95:4f:db:2c:05:fb:84:3e:f2:6e:39:bd:1d:98:
89:8d:ae:15:65:be:89:0b:b0:c2:39:38:c7:db:df:fc:a1:63:
7e:f2:b5:6d:34:a7:82:36:16:d9:db:f8:09:ac:41:5d:ec:85:
29:2f:cc:70:d8:7b:cf:08:e0:53:9f:e9:0d:70:28:d3:4d:c9:
c8:f2:8b:f0
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIGAK3NCNA3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MjI0MTUxNzI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhMjAzZTAzYmEx
YjY0OTMwNTU2NmQ5ZDM4NjQ0YjAwMTgzNzRmOGE2MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAsNMQXysJMFjQTjs9t+bKfF6AQAAzQduKgix5oONN0U0/
yyr68AAx3Upckp9ZjYf+xjf0wl6Yl73dEqU+HytdM8TK2ez+g8onKEI7pLOtfwOz
O+IgZVrP2LB0+kfYnsq+eG2JrM9LHa12I6tJ/BOwuQqN3Npy/QKNpvarjpPX0c4O
lbQB2TtkSGm7GZeUCnHCMwp6WBOhO8MhpQ2L7z6X9AlcGP9p0/DQDrl0BDcELQUr
1+QoYNRBA98xz0l2JlkehHSjDI/tXzVnPM0jD/4c9OQkYeaU9ZRxd0mSJnUkG8D+
Eizmiu/cinYV2T29b4kpDU53+6VjkeMnlIcTbPw1NQIDAQABo4ICfzCCAnswHQYD
VR0OBBYEFKID4DuhtkkwVWbZ04ZEsAGDdPimMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlLzkwMWFlMi0xNmVhLTQ3Njkt
YjQ2MS1hMjZhYjMwNTIxNGYvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvOTAxYWUyLTE2ZWEtNDc2OS1i
NDYxLWEyNmFiMzA1MjE0Zi8xL29nUGdPNkcyU1RCVlp0blRoa1N3QVlOMC1LWS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwM3lDANBgkqhkiG9w0BAQsFAAOCAQEAeomZ2IQBUDQ2hisTV+0LZxuirdQM
+rvmbHjq5AJrjhe9NqWAgqxp04EgZrB8E+b4WbUcMLXxZV5gwOJhsdwktO2/lfDo
oyEWl3AdUZIFl0gb4FsShfHCclJ5UN34RBGyP8oKvv8zU/uapf39pZD3apLrWWcC
33uc1FvuW0LbNOTARvEs0X+1J4oXxJ4CNz6mqNqUHpIMTkqCj6/bziF7hfif3Qyj
nfrOQDa93OYXimF8lRz/hNkVApVP2ywF+4Q+8m45vR2YiY2uFWW+iQuwwjk4x9vf
/KFjfvK1bTSngjYW2dv4CaxBXeyFKS/McNh7zwjgU5/pDXAo003JyPKL8A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:39 2024 by rpki-client on console-fra.rpki-client.org