Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pHmCNiaeHzAN3M-PKypqsK-9cHI.cer
File: pHmCNiaeHzAN3M-PKypqsK-9cHI.cer (raw, json)
Hash identifier: 2hB6RLOqTgCxh6XO5MvIdQibYlHI+bO+/rMfVJXovf4=
Subject key identifier: A4:79:82:36:26:9E:1F:30:0D:DC:CF:8F:2B:2A:6A:B0:AF:BD:70:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A2342AA19B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/5c079d-a070-4a9d-995d-ab2c9f1aa192/1/pHmCNiaeHzAN3M-PKypqsK-9cHI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/5c079d-a070-4a9d-995d-ab2c9f1aa192/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:06:13 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 57379
IP: 91.231.68.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696659911067 (0xa2342aa19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:06:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4798236269e1f300ddccf8f2b2a6ab0afbd7072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8d:03:52:3a:0a:3e:99:8c:d2:cb:a7:d4:ca:
1c:84:f1:91:75:e0:cd:09:ce:00:96:04:cc:5b:ee:
fa:e6:9a:2a:32:ea:12:dc:a9:79:e0:62:7e:4c:82:
9d:90:2d:ac:89:f4:92:f2:a7:76:9b:54:0f:b4:92:
85:81:ff:86:ac:1a:f8:4c:b7:3b:ff:c4:27:57:dd:
1c:29:b8:48:e7:1a:0b:6a:01:5c:c6:97:9a:30:1e:
70:d3:92:9b:d2:fa:15:cd:72:20:4e:e1:84:f9:45:
a0:a6:71:76:88:56:af:55:9f:3b:b2:e4:40:e0:92:
31:95:bd:a2:96:c5:f1:2a:59:6c:c5:f1:30:06:e2:
ec:1a:c3:34:34:18:e7:c5:3a:b3:cc:67:20:13:f1:
53:0a:14:05:7a:84:3c:2c:c9:81:be:70:9e:3e:fc:
ec:41:4d:a3:25:63:6f:c5:68:65:c8:71:f6:f8:59:
41:13:b7:32:0c:8a:7b:8f:3c:ed:4d:57:97:e1:ec:
fa:34:dd:f8:15:01:fb:87:28:de:1a:cc:40:82:e1:
12:e5:f6:b2:6e:56:83:62:71:dd:9e:82:da:f1:9b:
3c:99:3c:c8:3b:b7:9d:3c:38:8d:91:d7:8d:99:9d:
36:84:8d:bb:1d:06:df:5c:da:f2:1c:57:15:a7:74:
a0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:79:82:36:26:9E:1F:30:0D:DC:CF:8F:2B:2A:6A:B0:AF:BD:70:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5c079d-a070-4a9d-995d-ab2c9f1aa192/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5c079d-a070-4a9d-995d-ab2c9f1aa192/1/pHmCNiaeHzAN3M-PKypqsK-9cHI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.68.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57379
Signature Algorithm: sha256WithRSAEncryption
2a:a6:6d:02:59:25:36:69:89:2e:09:90:10:f8:ca:ba:04:41:
92:a2:87:7d:ec:fd:ac:9d:5b:f0:b2:b8:c9:26:8a:b3:00:6d:
a3:a1:61:06:87:a4:26:fa:da:95:bf:23:5a:e1:83:5e:9d:b5:
3e:d9:53:0a:1f:28:f9:82:7d:40:72:0a:80:15:bc:17:f7:3e:
c4:58:9e:ab:be:83:90:1b:4f:11:66:95:22:8b:9d:f5:5f:3b:
f6:41:ce:f6:d8:00:3c:c8:3f:ef:5d:28:2d:e0:b8:3d:48:73:
ef:94:85:49:64:49:14:59:7f:3c:89:0e:69:72:21:c4:98:b7:
7f:f5:06:56:53:75:9a:d9:a3:ca:c9:8b:28:19:9c:08:57:7b:
32:59:7e:55:ed:ed:bf:21:65:81:b2:87:fe:c8:63:e8:24:fd:
e4:1c:38:a7:2e:45:2c:e1:f8:ee:e7:8b:3c:e3:fd:b0:42:ef:
a7:02:57:0e:03:c3:36:64:44:9b:44:45:2a:0a:61:5f:0e:3d:
f2:52:d6:8e:61:00:76:74:31:43:90:fb:63:79:30:7d:a3:3d:
08:d9:e8:a9:8e:e0:a5:42:8e:7c:5d:ba:f4:5c:40:d0:94:4c:
b6:84:52:da:5a:7d:09:9a:a7:f3:8d:f4:f1:2e:b7:f9:16:44:
20:7a:a3:2e
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgIGAKI0KqGbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDgwNjEzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhNDc5ODIzNjI2
OWUxZjMwMGRkY2NmOGYyYjJhNmFiMGFmYmQ3MDcyMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAu40DUjoKPpmM0sun1MochPGRdeDNCc4AlgTMW+765poq
MuoS3Kl54GJ+TIKdkC2sifSS8qd2m1QPtJKFgf+GrBr4TLc7/8QnV90cKbhI5xoL
agFcxpeaMB5w05Kb0voVzXIgTuGE+UWgpnF2iFavVZ87suRA4JIxlb2ilsXxKlls
xfEwBuLsGsM0NBjnxTqzzGcgE/FTChQFeoQ8LMmBvnCePvzsQU2jJWNvxWhlyHH2
+FlBE7cyDIp7jzztTVeX4ez6NN34FQH7hyjeGsxAguES5fayblaDYnHdnoLa8Zs8
mTzIO7edPDiNkdeNmZ02hI27HQbfXNryHFcVp3SgowIDAQABo4ICoDCCApwwHQYD
VR0OBBYEFKR5gjYmnh8wDdzPjysqarCvvXByMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5LzVjMDc5ZC1hMDcwLTRhOWQt
OTk1ZC1hYjJjOWYxYWExOTIvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvNWMwNzlkLWEwNzAtNGE5ZC05
OTVkLWFiMmM5ZjFhYTE5Mi8xL3BIbUNOaWFlSHpBTjNNLVBLeXBxc0stOWNISS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAW+dEMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDgIzANBgkqhkiG
9w0BAQsFAAOCAQEAKqZtAlklNmmJLgmQEPjKugRBkqKHfez9rJ1b8LK4ySaKswBt
o6FhBoekJvralb8jWuGDXp21PtlTCh8o+YJ9QHIKgBW8F/c+xFieq76DkBtPEWaV
Ioud9V879kHO9tgAPMg/710oLeC4PUhz75SFSWRJFFl/PIkOaXIhxJi3f/UGVlN1
mtmjysmLKBmcCFd7Mll+Ve3tvyFlgbKH/shj6CT95Bw4py5FLOH47ueLPOP9sELv
pwJXDgPDNmREm0RFKgphXw498lLWjmEAdnQxQ5D7Y3kwfaM9CNnoqY7gpUKOfF26
9FxA0JRMtoRS2lp9CZqn84308S63+RZEIHqjLg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:43 2024 by rpki-client on console-fra.rpki-client.org