Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p0Y4MWJ2ycgZNeQ70r2dJeKGXEg.cer
File: p0Y4MWJ2ycgZNeQ70r2dJeKGXEg.cer (raw, json)
Hash identifier: u/h8Z8zQAXWT7me4BjXWi1+PozalRn4FCapYJXeOP+U=
Subject key identifier: A7:46:38:31:62:76:C9:C8:19:35:E4:3B:D2:BD:9D:25:E2:86:5C:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 99B946A862
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/0d85f0-c9db-4838-a785-2861746c73bf/1/p0Y4MWJ2ycgZNeQ70r2dJeKGXEg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/0d85f0-c9db-4838-a785-2861746c73bf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:00:34 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 204463
IP: 185.185.52.0/22
IP: 2a0d:a980::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660238411874 (0x99b946a862)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:00:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a74638316276c9c81935e43bd2bd9d25e2865c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:30:2a:11:32:ed:91:30:e5:97:2a:82:fc:3c:
78:c1:82:3f:67:1c:e6:d8:bd:3c:74:17:a7:f0:13:
79:47:16:65:91:9e:17:42:04:30:64:8c:f2:cd:f3:
c5:5a:18:20:7e:28:bc:34:76:aa:6d:1a:16:7c:da:
13:af:76:a7:fe:f3:bb:4d:dd:59:a0:c6:d9:ed:76:
31:3b:38:f1:a8:18:f7:e5:bf:89:4d:82:fb:55:cb:
98:0c:11:3b:a6:9e:43:60:94:2d:97:7b:3d:d4:8f:
0f:83:8e:ab:7e:99:fd:8d:cc:4a:48:9e:2a:1b:e7:
83:de:97:4c:c3:a5:70:dd:b5:1c:ed:2d:7c:6d:a6:
ea:41:e1:ac:1f:59:15:d0:d5:95:cf:6e:12:c7:46:
1f:6f:52:1e:f7:00:31:04:fc:94:e7:57:95:ae:b3:
9b:9b:ff:6c:67:67:7e:ef:ba:57:b7:5c:d1:74:f0:
c7:c9:0d:5e:98:65:bf:8f:eb:4b:80:9f:10:e9:a3:
35:93:55:de:9f:53:98:83:5e:70:f6:6b:06:d3:41:
72:ed:94:6b:63:9f:74:e2:f2:0e:75:63:37:41:38:
00:97:7b:8a:72:d9:74:d6:3e:52:ab:6e:96:8e:c1:
88:14:7f:74:52:2d:ec:dc:7e:97:59:26:33:a9:a3:
01:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:46:38:31:62:76:C9:C8:19:35:E4:3B:D2:BD:9D:25:E2:86:5C:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0d85f0-c9db-4838-a785-2861746c73bf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0d85f0-c9db-4838-a785-2861746c73bf/1/p0Y4MWJ2ycgZNeQ70r2dJeKGXEg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.52.0/22
IPv6:
2a0d:a980::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204463
Signature Algorithm: sha256WithRSAEncryption
26:89:7d:25:97:29:17:24:9e:35:94:74:d8:1e:b5:f6:da:7d:
60:14:ab:5b:fb:fb:b8:a4:19:20:cf:a2:ab:73:b5:00:0e:25:
5c:a6:c3:aa:8e:1e:a5:e7:8e:ae:39:18:15:e8:3b:6e:d1:92:
86:50:f2:cd:ae:61:f0:6d:a7:e6:6f:e0:cf:ed:6c:d0:fb:ee:
aa:a1:1c:21:65:ab:dd:5d:ca:b6:56:8f:fb:6b:b8:36:7b:8c:
4c:52:d9:b6:f3:c1:f5:53:6d:e1:3a:88:3c:77:53:d8:b4:48:
8c:15:5a:36:a8:ab:f3:51:29:05:88:02:57:9a:ca:a1:d4:7d:
15:aa:04:c9:36:53:42:33:4f:57:c9:be:e4:38:b3:8e:02:62:
df:9b:5a:18:26:42:e1:fd:8c:9c:32:0a:43:ca:f2:7e:5f:2e:
1a:41:bb:1d:b1:1e:67:92:6c:cb:52:5c:80:6d:a8:4c:8a:d5:
2d:b9:05:e2:3f:03:01:46:5e:a6:70:c8:96:4e:11:07:d2:c1:
8f:81:09:9d:04:aa:30:a1:73:5f:ab:fe:74:cf:17:3a:c6:69:
92:bd:e7:ae:23:b6:aa:df:df:70:6d:f5:ed:84:46:0c:59:57:
d0:67:c1:79:f0:c8:27:91:45:df:18:98:df:f1:85:14:c3:ef:
b0:fe:17:87
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIGAJm5RqhiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDEwMDM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhNzQ2MzgzMTYy
NzZjOWM4MTkzNWU0M2JkMmJkOWQyNWUyODY1YzQ4MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAnDAqETLtkTDllyqC/Dx4wYI/Zxzm2L08dBen8BN5RxZl
kZ4XQgQwZIzyzfPFWhggfii8NHaqbRoWfNoTr3an/vO7Td1ZoMbZ7XYxOzjxqBj3
5b+JTYL7VcuYDBE7pp5DYJQtl3s91I8Pg46rfpn9jcxKSJ4qG+eD3pdMw6Vw3bUc
7S18babqQeGsH1kV0NWVz24Sx0Yfb1Ie9wAxBPyU51eVrrObm/9sZ2d+77pXt1zR
dPDHyQ1emGW/j+tLgJ8Q6aM1k1Xen1OYg15w9msG00Fy7ZRrY5904vIOdWM3QTgA
l3uKctl01j5Sq26WjsGIFH90Ui3s3H6XWSYzqaMBgQIDAQABo4ICrzCCAqswHQYD
VR0OBBYEFKdGODFidsnIGTXkO9K9nSXihlxIMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0LzBkODVmMC1jOWRiLTQ4Mzgt
YTc4NS0yODYxNzQ2YzczYmYvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvMGQ4NWYwLWM5ZGItNDgzOC1h
Nzg1LTI4NjE3NDZjNzNiZi8xL3AwWTRNV0oyeWNnWk5lUTcwcjJkSmVLR1hFZy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCubk0MA0EAgACMAcDBQMqDamAMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMerzANBgkqhkiG9w0BAQsFAAOCAQEAJol9JZcpFySeNZR02B619tp9YBSr
W/v7uKQZIM+iq3O1AA4lXKbDqo4epeeOrjkYFeg7btGShlDyza5h8G2n5m/gz+1s
0PvuqqEcIWWr3V3KtlaP+2u4NnuMTFLZtvPB9VNt4TqIPHdT2LRIjBVaNqir81Ep
BYgCV5rKodR9FaoEyTZTQjNPV8m+5DizjgJi35taGCZC4f2MnDIKQ8ryfl8uGkG7
HbEeZ5Jsy1JcgG2oTIrVLbkF4j8DAUZepnDIlk4RB9LBj4EJnQSqMKFzX6v+dM8X
OsZpkr3nriO2qt/fcG317YRGDFlX0GfBefDIJ5FF3xiY3/GFFMPvsP4Xhw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:29:18 2025 by rpki-client