Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sibGHr7ULANtoA4ZA8Ut77PSGoQ.cer
File: sibGHr7ULANtoA4ZA8Ut77PSGoQ.cer (raw, json)
Hash identifier: iMIIeUpy8sDYYZdqEymk5429P3/+bNUbZDNRVIPz9nw=
Subject key identifier: B2:26:C6:1E:BE:D4:2C:03:6D:A0:0E:19:03:C5:2D:EF:B3:D2:1A:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9F6929855A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/32205b-13c7-4821-b102-a567819e1875/1/sibGHr7ULANtoA4ZA8Ut77PSGoQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/32205b-13c7-4821-b102-a567819e1875/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 06:01:27 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.229.204.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684664128858 (0x9f6929855a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:01:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b226c61ebed42c036da00e1903c52defb3d21a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:a7:dc:fc:12:47:68:af:d4:2f:65:42:20:
53:50:2d:2e:1a:64:65:c8:ce:53:6d:a8:b9:22:0f:
29:da:bf:f8:cf:ab:d1:9a:f2:80:e3:16:e8:0a:b8:
64:e8:6f:cb:04:48:07:b1:8f:9e:3f:c0:df:4b:53:
7d:fb:ec:ac:64:82:43:96:ee:98:52:14:6a:fe:59:
dc:1b:c3:ae:6b:e9:ed:36:2d:1b:ff:d3:25:3b:3f:
92:8c:6a:f1:d6:bf:91:f9:b3:52:4d:8f:8b:c9:7f:
44:24:70:0b:f3:ec:ac:5b:cf:42:67:ca:3d:6d:d6:
4f:16:1e:4f:22:7b:9e:88:24:04:4b:9f:9c:d8:37:
36:43:7e:57:d4:11:69:49:db:47:32:59:23:9c:14:
81:b6:77:c8:9a:95:fe:aa:fe:8e:bf:85:61:ef:55:
c2:d7:d2:73:5b:98:e7:4f:90:1f:f1:77:0b:70:a2:
19:1c:ac:36:e0:b4:e9:78:87:8a:25:68:1d:18:09:
0c:80:97:1e:94:9d:44:69:66:1a:b2:a9:6a:3e:f7:
9d:93:6e:d2:2b:81:8f:ec:52:04:4f:d9:2c:e2:75:
af:32:1a:df:e7:de:11:ea:19:42:f9:0a:56:27:e4:
7f:a5:97:1a:99:f2:cb:74:65:61:90:f4:36:83:19:
ba:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:26:C6:1E:BE:D4:2C:03:6D:A0:0E:19:03:C5:2D:EF:B3:D2:1A:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/32205b-13c7-4821-b102-a567819e1875/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/32205b-13c7-4821-b102-a567819e1875/1/sibGHr7ULANtoA4ZA8Ut77PSGoQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.204.0/24
Signature Algorithm: sha256WithRSAEncryption
18:b4:d0:e2:cd:6c:ac:61:20:23:7a:1c:43:50:f4:26:28:f5:
23:45:db:51:6b:92:60:8c:27:cf:c7:31:e9:de:86:d5:e1:17:
04:53:db:ce:ad:b5:8a:cf:20:dd:97:bf:0a:55:57:19:3e:17:
2f:e6:53:31:ea:94:6b:9b:e2:c5:db:b9:cc:7d:a5:13:92:41:
b0:e6:18:57:35:2c:cb:ca:2a:4f:ae:5b:53:ce:9b:41:c9:bf:
fd:b5:b4:4a:0f:57:1d:26:98:98:5f:ae:c3:98:5f:fc:bd:a3:
91:ab:dd:16:82:77:cf:07:4f:6f:d3:c3:67:be:56:55:6f:30:
bd:09:cc:36:95:3f:05:34:91:27:b0:c1:42:7d:bb:ca:2f:6e:
95:4b:1a:40:ab:dc:38:1a:70:6c:54:ea:a6:74:ea:86:04:f1:
72:f0:1d:dc:e7:52:54:ff:99:2c:b4:7a:c3:bf:b9:8d:dd:f7:
07:13:9b:86:7d:f2:92:cb:7b:28:10:83:d6:c7:9f:ea:38:a8:
bd:7f:80:e1:6e:24:28:a7:ad:58:68:82:69:ce:f9:86:1b:99:
92:c9:fc:df:63:78:9c:85:a2:cc:70:a6:08:4e:39:fc:ba:b2:
c7:c8:af:a2:70:e0:68:8e:fb:33:86:67:d9:a2:d5:fb:d8:af:
10:e7:49:d7
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAJ9pKYVaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDYwMTI3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiMjI2YzYxZWJl
ZDQyYzAzNmRhMDBlMTkwM2M1MmRlZmIzZDIxYTg0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAsOOn3PwSR2iv1C9lQiBTUC0uGmRlyM5Tbai5Ig8p2r/4
z6vRmvKA4xboCrhk6G/LBEgHsY+eP8DfS1N9++ysZIJDlu6YUhRq/lncG8Oua+nt
Ni0b/9MlOz+SjGrx1r+R+bNSTY+LyX9EJHAL8+ysW89CZ8o9bdZPFh5PInueiCQE
S5+c2Dc2Q35X1BFpSdtHMlkjnBSBtnfImpX+qv6Ov4Vh71XC19JzW5jnT5Af8XcL
cKIZHKw24LTpeIeKJWgdGAkMgJcelJ1EaWYasqlqPvedk27SK4GP7FIET9ks4nWv
Mhrf594R6hlC+QpWJ+R/pZcamfLLdGVhkPQ2gxm6nwIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFLImxh6+1CwDbaAOGQPFLe+z0hqEMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4LzMyMjA1Yi0xM2M3LTQ4MjEt
YjEwMi1hNTY3ODE5ZTE4NzUvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvMzIyMDViLTEzYzctNDgyMS1i
MTAyLWE1Njc4MTllMTg3NS8xL3NpYkdIcjdVTEFOdG9BNFpBOFV0NzdQU0dvUS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAueXMMA0GCSqGSIb3DQEBCwUAA4IBAQAYtNDizWysYSAjehxDUPQm
KPUjRdtRa5JgjCfPxzHp3obV4RcEU9vOrbWKzyDdl78KVVcZPhcv5lMx6pRrm+LF
27nMfaUTkkGw5hhXNSzLyipPrltTzptByb/9tbRKD1cdJpiYX67DmF/8vaORq90W
gnfPB09v08NnvlZVbzC9Ccw2lT8FNJEnsMFCfbvKL26VSxpAq9w4GnBsVOqmdOqG
BPFy8B3c51JU/5kstHrDv7mN3fcHE5uGffKSy3soEIPWx5/qOKi9f4DhbiQop61Y
aIJpzvmGG5mSyfzfY3ichaLMcKYITjn8urLHyK+icOBojvszhmfZotX72K8Q50nX
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:56 2024 by rpki-client on console-ams.rpki-client.org