Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ojGVApZeNIuFASAoIq_lSJfEu1E.cer
File: ojGVApZeNIuFASAoIq_lSJfEu1E.cer (raw, json)
Hash identifier: zmb/6oaby6NJQbZqac7F3mai9IpE7J2yIonLfovYP9o=
Subject key identifier: A2:31:95:02:96:5E:34:8B:85:01:20:28:22:AF:E5:48:97:C4:BB:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A85A912AEB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/3ce1f0-51e0-49e7-b092-3e431cf74fce/1/ojGVApZeNIuFASAoIq_lSJfEu1E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/3ce1f0-51e0-49e7-b092-3e431cf74fce/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:57:42 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.90.32.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723073968875 (0xa85a912aeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:57:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2319502965e348b8501202822afe54897c4bb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:e6:87:0e:51:ee:83:22:1f:24:62:dc:9b:
1a:86:75:e8:4e:21:ce:6d:54:35:c0:d5:c7:52:85:
2c:db:58:67:59:29:2c:b8:b2:65:b9:c5:f1:48:5a:
43:9e:58:86:8f:13:2f:ac:4d:c0:c7:e2:ee:91:c3:
3f:77:e0:24:62:f0:41:92:85:25:d4:a5:67:42:d1:
e7:8a:e5:8c:e8:c9:66:7b:59:69:ad:b7:fa:b9:d3:
f7:dd:62:7d:42:d6:37:05:a7:99:af:d7:f5:cc:7e:
03:f0:39:4f:02:47:00:20:ef:ba:7f:1b:1a:23:e1:
5a:25:9b:56:a5:c5:ea:df:5c:a3:b0:f5:84:79:b2:
ea:a0:c7:2e:68:5d:06:72:e9:34:80:fd:8f:61:5c:
ba:52:35:a6:d8:e4:fe:7d:e9:77:2a:3e:98:1e:17:
97:94:e2:00:fe:f4:6f:ab:dd:d7:14:9a:56:f9:97:
03:7f:67:e6:64:a3:16:de:73:19:38:6f:94:af:be:
c9:b9:d0:ae:ab:8c:35:17:73:82:37:66:99:86:d5:
1a:a5:c6:ad:c7:54:fe:d7:68:14:de:89:38:7b:4f:
31:fe:2f:ab:12:2b:70:c5:85:a7:8f:f8:27:a9:25:
37:b3:61:5b:eb:12:d7:a9:74:d5:6a:d2:a5:fd:28:
fb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:31:95:02:96:5E:34:8B:85:01:20:28:22:AF:E5:48:97:C4:BB:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3ce1f0-51e0-49e7-b092-3e431cf74fce/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3ce1f0-51e0-49e7-b092-3e431cf74fce/1/ojGVApZeNIuFASAoIq_lSJfEu1E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.32.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:26:5f:44:54:ea:a8:64:1f:e9:42:68:36:3f:ae:1f:42:ec:
99:1c:7b:11:59:8f:9d:b9:55:52:ee:a3:90:03:84:f0:93:ea:
df:18:c8:92:7e:a7:d7:08:4f:e9:44:3d:39:05:35:f7:f6:1d:
8b:05:47:b8:12:36:ca:03:c5:9d:f2:70:0a:9a:c0:f0:3a:99:
b4:e4:d1:2d:73:10:93:8a:67:6c:50:28:13:70:77:21:6d:21:
ba:d7:a0:57:bb:58:37:47:df:69:8c:cb:c7:b3:c1:1f:dc:93:
3b:bb:a6:82:db:3e:44:29:b2:38:7c:d4:59:f8:9e:52:f4:22:
8c:83:02:19:f5:19:b5:fe:2c:a9:f3:4a:24:b9:be:6b:50:aa:
e2:de:c5:60:12:91:d5:7c:0f:3d:63:60:eb:92:e0:16:54:1a:
89:20:1c:c7:7f:b9:1d:8f:7d:53:50:bd:4e:c1:bc:bd:64:15:
f7:65:87:21:b4:82:ab:be:20:c5:5d:04:3c:d5:e9:0b:79:cd:
f9:84:d8:4c:09:e7:28:cf:aa:83:21:03:8d:02:8f:08:d0:29:
46:12:6e:57:d0:33:f8:83:4d:0c:0d:52:66:ed:d9:2b:f8:fe:
d7:da:65:74:62:64:f3:52:57:ec:84:c6:42:c5:a3:75:fa:84:
18:f7:45:f2
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAKhakSrrMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTM1NzQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhMjMxOTUwMjk2
NWUzNDhiODUwMTIwMjgyMmFmZTU0ODk3YzRiYjUxMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAw93mhw5R7oMiHyRi3JsahnXoTiHObVQ1wNXHUoUs21hn
WSksuLJlucXxSFpDnliGjxMvrE3Ax+LukcM/d+AkYvBBkoUl1KVnQtHniuWM6Mlm
e1lprbf6udP33WJ9QtY3BaeZr9f1zH4D8DlPAkcAIO+6fxsaI+FaJZtWpcXq31yj
sPWEebLqoMcuaF0Gcuk0gP2PYVy6UjWm2OT+fel3Kj6YHheXlOIA/vRvq93XFJpW
+ZcDf2fmZKMW3nMZOG+Ur77JudCuq4w1F3OCN2aZhtUapcatx1T+12gU3ok4e08x
/i+rEitwxYWnj/gnqSU3s2Fb6xLXqXTVatKl/Sj7UQIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFKIxlQKWXjSLhQEgKCKv5UiXxLtRMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2LzNjZTFmMC01MWUwLTQ5ZTct
YjA5Mi0zZTQzMWNmNzRmY2UvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvM2NlMWYwLTUxZTAtNDllNy1i
MDkyLTNlNDMxY2Y3NGZjZS8xL29qR1ZBcFplTkl1RkFTQW9JcV9sU0pmRXUxRS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCLVogMA0GCSqGSIb3DQEBCwUAA4IBAQA6Jl9EVOqoZB/pQmg2P64f
QuyZHHsRWY+duVVS7qOQA4Twk+rfGMiSfqfXCE/pRD05BTX39h2LBUe4EjbKA8Wd
8nAKmsDwOpm05NEtcxCTimdsUCgTcHchbSG616BXu1g3R99pjMvHs8Ef3JM7u6aC
2z5EKbI4fNRZ+J5S9CKMgwIZ9Rm1/iyp80okub5rUKri3sVgEpHVfA89Y2DrkuAW
VBqJIBzHf7kdj31TUL1Owby9ZBX3ZYchtIKrviDFXQQ81ekLec35hNhMCecoz6qD
IQONAo8I0ClGEm5X0DP4g00MDVJm7dkr+P7X2mV0YmTzUlfshMZCxaN1+oQY90Xy
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:39 2024 by rpki-client on console-fra.rpki-client.org