Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pCl3AfODOEHERuv740Jwsm-oK7U.cer
File: pCl3AfODOEHERuv740Jwsm-oK7U.cer (raw, json)
Hash identifier: ZgtQsUxe9F+3uTOFBHZtPwDluXPjLYlWM9TAWeJZh8A=
Subject key identifier: A4:29:77:01:F3:83:38:41:C4:46:EB:FB:E3:42:70:B2:6F:A8:2B:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A506F7E8F7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/895a29-54c7-4f5e-9df1-c0f482a206c3/1/pCl3AfODOEHERuv740Jwsm-oK7U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/895a29-54c7-4f5e-9df1-c0f482a206c3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:57:39 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 43659
IP: 171.22.72.0/22
IP: 2a09:3bc0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 708786514167 (0xa506f7e8f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:57:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4297701f3833841c446ebfbe34270b26fa82bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7e:b7:a2:f2:57:9d:06:48:6d:ac:20:5e:46:
27:64:20:a9:74:08:f6:fe:9d:9e:41:be:c1:42:b8:
d5:b5:53:52:78:3b:d4:82:ae:72:86:96:0e:53:79:
94:df:81:83:ab:17:e3:36:12:a6:d2:be:da:cd:9b:
bb:70:73:04:d9:ad:f3:1a:26:30:43:fb:8d:81:00:
db:9c:96:89:b3:4d:3d:2e:18:7d:32:75:f5:61:6e:
48:d3:a5:c6:39:b8:33:91:9d:69:a7:64:36:8d:7d:
15:fd:8f:29:13:4a:fc:5d:fe:e4:31:fc:a2:c7:54:
3c:45:0b:3c:ad:d9:3b:54:08:57:be:39:3d:aa:a7:
25:75:51:a1:99:73:48:f0:17:1f:55:0c:e6:b7:b5:
21:c9:89:63:00:f6:40:2d:3a:3e:fd:dd:87:61:81:
ee:7b:b7:14:98:df:c2:07:a9:7e:de:c0:86:c0:06:
76:8b:19:a0:2b:7b:a6:5f:27:35:32:77:44:57:2f:
1d:77:da:49:0a:19:72:55:5e:32:f8:d7:4d:b5:2f:
c9:2c:a5:4f:0a:38:0a:b0:d4:66:83:3c:d4:d0:db:
21:9e:65:37:b2:9c:28:01:d1:84:23:6b:6b:7f:c3:
c5:46:e1:1b:ea:79:0a:47:d1:54:9c:36:18:6f:1a:
b1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:29:77:01:F3:83:38:41:C4:46:EB:FB:E3:42:70:B2:6F:A8:2B:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/895a29-54c7-4f5e-9df1-c0f482a206c3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/895a29-54c7-4f5e-9df1-c0f482a206c3/1/pCl3AfODOEHERuv740Jwsm-oK7U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.72.0/22
IPv6:
2a09:3bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43659
Signature Algorithm: sha256WithRSAEncryption
5a:56:48:90:fb:58:ae:a8:cd:08:b6:59:9a:90:30:7a:da:ed:
30:30:49:5c:21:df:9c:b7:45:5a:a6:cb:ef:0f:53:f9:26:37:
09:54:e1:f1:a9:61:b5:95:8c:c2:48:f4:f5:21:49:0f:fb:0a:
8d:7b:e1:58:3d:93:46:fc:e9:53:62:b4:6c:14:22:89:90:00:
80:72:e6:cd:81:8b:6c:77:ff:29:87:53:59:fe:77:44:73:ca:
46:54:16:ac:09:f3:b0:78:e7:c7:da:1e:ce:16:bd:a6:fe:9c:
6c:03:a1:70:93:6b:dc:50:72:06:c3:8a:ef:b1:88:6c:74:20:
97:b5:2a:81:80:45:b3:e8:bb:b3:84:4d:c4:29:81:f5:c3:10:
9b:03:09:6e:b2:78:7b:4d:b8:96:90:f4:27:43:51:68:91:39:
f3:8d:2f:f2:67:f7:13:fc:92:e2:92:de:81:f6:6b:8e:8c:a6:
15:96:43:78:fb:7e:7f:d4:6e:01:19:13:82:9c:65:8b:4b:b3:
25:3a:18:1d:85:3e:bf:b5:86:e4:33:ee:87:b7:74:b6:c9:57:
c1:10:28:60:1c:a4:89:37:74:d9:a3:8b:35:03:ca:78:3a:c9:
fd:f3:68:6c:6c:31:d8:07:ab:69:ab:88:0d:7c:eb:59:ff:ac:
3a:43:07:5d
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIGAKUG9+j3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTA1NzM5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhNDI5NzcwMWYz
ODMzODQxYzQ0NmViZmJlMzQyNzBiMjZmYTgyYmI1MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA6X63ovJXnQZIbawgXkYnZCCpdAj2/p2eQb7BQrjVtVNS
eDvUgq5yhpYOU3mU34GDqxfjNhKm0r7azZu7cHME2a3zGiYwQ/uNgQDbnJaJs009
Lhh9MnX1YW5I06XGObgzkZ1pp2Q2jX0V/Y8pE0r8Xf7kMfyix1Q8RQs8rdk7VAhX
vjk9qqcldVGhmXNI8BcfVQzmt7UhyYljAPZALTo+/d2HYYHue7cUmN/CB6l+3sCG
wAZ2ixmgK3umXyc1MndEVy8dd9pJChlyVV4y+NdNtS/JLKVPCjgKsNRmgzzU0Nsh
nmU3spwoAdGEI2trf8PFRuEb6nkKR9FUnDYYbxqxxwIDAQABo4ICrzCCAqswHQYD
VR0OBBYEFKQpdwHzgzhBxEbr++NCcLJvqCu1MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3Lzg5NWEyOS01NGM3LTRmNWUt
OWRmMS1jMGY0ODJhMjA2YzMvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvODk1YTI5LTU0YzctNGY1ZS05
ZGYxLWMwZjQ4MmEyMDZjMy8xL3BDbDNBZk9ET0VIRVJ1djc0MEp3c20tb0s3VS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCqxZIMA0EAgACMAcDBQMqCTvAMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwCqizANBgkqhkiG9w0BAQsFAAOCAQEAWlZIkPtYrqjNCLZZmpAwetrtMDBJ
XCHfnLdFWqbL7w9T+SY3CVTh8alhtZWMwkj09SFJD/sKjXvhWD2TRvzpU2K0bBQi
iZAAgHLmzYGLbHf/KYdTWf53RHPKRlQWrAnzsHjnx9oezha9pv6cbAOhcJNr3FBy
BsOK77GIbHQgl7UqgYBFs+i7s4RNxCmB9cMQmwMJbrJ4e024lpD0J0NRaJE5840v
8mf3E/yS4pLegfZrjoymFZZDePt+f9RuARkTgpxli0uzJToYHYU+v7WG5DPuh7d0
tslXwRAoYBykiTd02aOLNQPKeDrJ/fNobGwx2AeraauIDXzrWf+sOkMHXQ==
-----END CERTIFICATE-----
Generated at Wed Apr 23 11:15:00 2025 by rpki-client