Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rS0kO1bwHXnDHm6FFpbD-xArg88.cer
File: rS0kO1bwHXnDHm6FFpbD-xArg88.cer (raw, json)
Hash identifier: OOXidn+2+gHnwkX909SQ3k2QHSHPXAca+uJwa7Y3YQo=
Subject key identifier: AD:2D:24:3B:56:F0:1D:79:C3:1E:6E:85:16:96:C3:FB:10:2B:83:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A911307BD4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/0a4501-9c97-421b-a144-bf8a8147028c/1/rS0kO1bwHXnDHm6FFpbD-xArg88.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/0a4501-9c97-421b-a144-bf8a8147028c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:07:34 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.132.204.0/22
IP: 2a0e:7040::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 726137863124 (0xa911307bd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:07:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad2d243b56f01d79c31e6e851696c3fb102b83cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6b:f1:d2:6f:18:14:e0:a6:28:b2:c3:b3:0e:
7e:6a:3f:43:92:a2:33:fb:60:e2:e7:06:8e:3d:2b:
a7:19:37:1d:99:48:2b:43:10:81:ee:7e:d6:8c:28:
98:70:48:34:89:f5:38:30:b9:75:4b:e3:3d:10:4f:
7d:6f:80:eb:d3:e6:d6:14:53:04:dc:c2:c2:d5:41:
4a:de:1b:4d:3a:2f:fe:55:19:47:2a:f7:8c:71:43:
69:34:b5:6a:d3:60:b5:cd:94:6c:3b:61:d6:27:0a:
98:b0:fd:6a:3c:b3:db:31:e3:da:6d:5f:2e:83:26:
7c:b5:20:2a:40:4d:a0:5e:24:3e:3a:1f:c5:fd:7e:
59:cd:75:d2:37:b3:39:60:e3:4f:2e:40:f1:42:82:
08:ef:6f:dd:04:c6:c9:13:b0:c4:55:04:72:d1:ee:
17:ce:a9:a9:7d:c6:6a:f0:6d:e4:58:64:14:97:d4:
27:67:c0:07:fe:80:51:9c:6f:62:83:54:1d:42:10:
aa:51:15:7c:78:33:23:25:63:1d:9f:cc:08:90:2c:
63:93:26:02:30:94:71:87:32:58:95:ca:e6:c8:55:
6c:23:f8:d0:fe:1f:53:54:ea:a2:47:25:2b:c3:1e:
ca:23:96:de:8c:e1:24:b6:51:e6:bb:66:b4:6f:6d:
55:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2D:24:3B:56:F0:1D:79:C3:1E:6E:85:16:96:C3:FB:10:2B:83:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0a4501-9c97-421b-a144-bf8a8147028c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0a4501-9c97-421b-a144-bf8a8147028c/1/rS0kO1bwHXnDHm6FFpbD-xArg88.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.204.0/22
IPv6:
2a0e:7040::/29
Signature Algorithm: sha256WithRSAEncryption
4c:b6:cb:be:75:5f:39:1f:4b:9c:39:b9:e2:49:18:f3:e9:3f:
af:34:90:9f:37:31:79:1c:58:4d:45:5c:a4:ce:2d:82:fb:7e:
e8:1f:69:4b:de:c2:cf:4e:7e:39:19:97:c5:cc:81:54:a0:57:
46:e5:77:e9:dd:53:85:3d:99:fe:52:de:6c:ee:d9:5d:c5:d6:
a5:87:a2:d1:c1:71:85:6b:d1:6d:86:7e:a4:a9:83:19:a1:7a:
11:ca:d4:e1:0e:9c:8c:d8:fb:b6:fc:b6:d7:fb:c2:84:ee:4f:
db:7e:26:a1:c0:d8:2e:19:52:54:e8:7e:23:25:60:57:05:be:
23:03:00:97:dc:1d:09:40:52:23:7a:60:af:74:66:e7:a2:b5:
2f:80:b5:df:c5:65:fb:ad:9a:ab:2d:e1:c5:85:9e:db:78:4f:
d2:2c:04:03:93:28:4a:39:d1:b4:d4:81:6c:2a:74:d0:91:f1:
57:59:ee:79:fc:6f:ee:7b:80:82:ff:69:4d:f8:79:c0:27:5f:
f4:0b:0d:ed:3f:91:75:55:1c:56:94:54:b2:49:25:f6:93:30:
2b:a5:42:b1:68:e6:24:0b:ed:40:d9:c0:f5:f0:06:a5:2b:7c:
66:a4:55:51:51:b2:4b:45:c2:f6:a5:39:92:4f:44:56:b9:ac:
e3:c7:78:39
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIGAKkRMHvUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTQwNzM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhZDJkMjQzYjU2
ZjAxZDc5YzMxZTZlODUxNjk2YzNmYjEwMmI4M2NmMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAo2vx0m8YFOCmKLLDsw5+aj9DkqIz+2Di5waOPSunGTcd
mUgrQxCB7n7WjCiYcEg0ifU4MLl1S+M9EE99b4Dr0+bWFFME3MLC1UFK3htNOi/+
VRlHKveMcUNpNLVq02C1zZRsO2HWJwqYsP1qPLPbMePabV8ugyZ8tSAqQE2gXiQ+
Oh/F/X5ZzXXSN7M5YONPLkDxQoII72/dBMbJE7DEVQRy0e4XzqmpfcZq8G3kWGQU
l9QnZ8AH/oBRnG9ig1QdQhCqURV8eDMjJWMdn8wIkCxjkyYCMJRxhzJYlcrmyFVs
I/jQ/h9TVOqiRyUrwx7KI5bejOEktlHmu2a0b21VhwIDAQABo4ICkzCCAo8wHQYD
VR0OBBYEFK0tJDtW8B15wx5uhRaWw/sQK4PPMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzBhNDUwMS05Yzk3LTQyMWIt
YTE0NC1iZjhhODE0NzAyOGMvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvMGE0NTAxLTljOTctNDIxYi1h
MTQ0LWJmOGE4MTQ3MDI4Yy8xL3JTMGtPMWJ3SFhuREhtNkZGcGJELXhBcmc4OC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCLYTMMA0EAgACMAcDBQMqDnBAMA0GCSqGSIb3DQEBCwUAA4IBAQBM
tsu+dV85H0ucObniSRjz6T+vNJCfNzF5HFhNRVykzi2C+37oH2lL3sLPTn45GZfF
zIFUoFdG5Xfp3VOFPZn+Ut5s7tldxdalh6LRwXGFa9Fthn6kqYMZoXoRytThDpyM
2Pu2/LbX+8KE7k/bfiahwNguGVJU6H4jJWBXBb4jAwCX3B0JQFIjemCvdGbnorUv
gLXfxWX7rZqrLeHFhZ7beE/SLAQDkyhKOdG01IFsKnTQkfFXWe55/G/ue4CC/2lN
+HnAJ1/0Cw3tP5F1VRxWlFSySSX2kzArpUKxaOYkC+1A2cD18AalK3xmpFVRUbJL
RcL2pTmST0RWuazjx3g5
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:03 2024 by rpki-client on console-fra.rpki-client.org