Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tyLJBjlxS7bGp7CxI_DQZixw1cE.cer
File: tyLJBjlxS7bGp7CxI_DQZixw1cE.cer (raw, json)
Hash identifier: qbmqI7NgcbBVsJ5xczU7Rcngjtk5vAtdMBwpMoFjPAI=
Subject key identifier: B7:22:C9:06:39:71:4B:B6:C6:A7:B0:B1:23:F0:D0:66:2C:70:D5:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9D035038D9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/d52ddd-92e1-4d26-a6a1-2161c065e1ec/1/tyLJBjlxS7bGp7CxI_DQZixw1cE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/d52ddd-92e1-4d26-a6a1-2161c065e1ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:57:17 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 49191
IP: 94.142.130.0/24
IP: 160.238.124.0/22
IP: 2001:67c:178c::/48
IP: 2a07:7780::/29
IP: 2a07:ba80::/29
IP: 2a07:c100::/29
IP: 2a0a:100::/29
IP: 2a0a:3280::/29
IP: 2a0a:4ac0::/29
IP: 2a0a:ce80::/29
IP: 2a0a:f780::/29
IP: 2a0a:fa00::/29
IP: 2a0b:f00::/29
IP: 2a0d:4fc0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 674365454553 (0x9d035038d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:57:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b722c90639714bb6c6a7b0b123f0d0662c70d5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:41:7d:22:cb:45:54:e2:a8:de:27:49:98:5d:
93:23:56:56:21:08:7b:71:70:b8:cc:83:6d:c6:c3:
5b:ed:99:78:6d:65:82:af:f6:c0:0f:f1:b8:b9:99:
1c:70:63:d8:4e:e3:60:61:69:05:d1:7f:7e:57:de:
e2:f4:1c:5a:36:34:32:08:b3:3a:f0:24:02:3a:4c:
a7:63:51:3e:9d:bf:5b:0f:0b:c7:0e:a9:02:53:ae:
24:1f:8c:64:97:91:93:f5:1f:92:27:ab:82:94:3d:
03:60:11:24:de:69:44:f3:31:92:71:f6:10:1d:fe:
a1:30:d2:06:a0:26:f8:90:7b:c9:d8:64:61:0f:83:
5d:04:15:04:e8:8b:57:4b:05:cb:d2:c0:9d:16:73:
ff:a1:5b:db:30:76:09:5a:4b:1d:d4:de:a1:cc:0f:
c8:4d:a6:98:3b:e4:6a:54:bf:0c:32:3f:72:41:81:
a6:f7:63:e3:58:6e:02:46:33:1f:7f:19:50:21:a5:
fe:39:ba:ca:92:6d:f4:e3:32:8f:73:96:54:04:0e:
c5:53:e2:24:99:56:c4:5c:11:e2:48:ac:8a:b9:cc:
09:f5:f0:cb:c7:af:ab:a9:88:7e:bb:28:83:67:77:
3e:3a:5c:88:4d:e7:c6:ed:12:56:1a:37:2d:52:bc:
11:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:22:C9:06:39:71:4B:B6:C6:A7:B0:B1:23:F0:D0:66:2C:70:D5:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d52ddd-92e1-4d26-a6a1-2161c065e1ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d52ddd-92e1-4d26-a6a1-2161c065e1ec/1/tyLJBjlxS7bGp7CxI_DQZixw1cE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.130.0/24
160.238.124.0/22
IPv6:
2001:67c:178c::/48
2a07:7780::/29
2a07:ba80::/29
2a07:c100::/29
2a0a:100::/29
2a0a:3280::/29
2a0a:4ac0::/29
2a0a:ce80::/29
2a0a:f780::/29
2a0a:fa00::/29
2a0b:f00::/29
2a0d:4fc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49191
Signature Algorithm: sha256WithRSAEncryption
3e:5d:07:33:40:1d:16:79:0c:58:54:2d:e6:f0:f4:1f:1c:00:
a5:3e:c0:75:8b:6e:41:75:1d:c1:6f:60:09:62:3a:7b:ac:38:
02:1c:d1:75:18:9e:43:1d:a7:4d:8a:58:f4:1e:b8:cb:55:b9:
b8:35:38:56:98:00:f6:a1:6f:9e:1c:9e:62:41:1b:18:ed:90:
8f:2c:bc:d9:8b:3e:e3:5a:a2:b7:19:59:20:c1:fe:53:3f:d6:
ce:ed:b8:0b:40:39:6b:24:05:9b:62:79:76:44:9a:d6:c4:b9:
b6:c2:8c:64:4b:ff:dd:d9:34:40:e3:57:3e:6a:71:80:0f:ba:
7a:6d:60:ef:88:39:4c:3e:bf:99:86:3c:d7:b1:37:99:33:9d:
e2:d0:a0:0b:d8:b0:ce:3a:5d:cd:1b:bc:0a:7d:22:85:3b:e6:
fd:09:f2:0e:d6:4f:63:ce:1a:80:71:48:15:eb:5f:2b:c0:29:
bf:9c:23:17:80:29:54:1d:11:be:07:32:19:91:58:ad:7d:96:
4d:cd:5c:06:6f:15:34:24:c7:5b:16:d4:ff:49:ae:d4:11:00:
27:7c:35:29:39:f9:35:52:0e:57:e1:59:ed:8b:f8:d1:cd:1e:
a0:83:ea:5e:92:f2:42:71:00:aa:84:c1:03:fa:8c:d6:02:5a:
6d:88:12:94
-----BEGIN CERTIFICATE-----
MIIF7TCCBNWgAwIBAgIGAJ0DUDjZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDM1NzE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiNzIyYzkwNjM5
NzE0YmI2YzZhN2IwYjEyM2YwZDA2NjJjNzBkNWMxMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAj0F9IstFVOKo3idJmF2TI1ZWIQh7cXC4zINtxsNb7Zl4
bWWCr/bAD/G4uZkccGPYTuNgYWkF0X9+V97i9BxaNjQyCLM68CQCOkynY1E+nb9b
DwvHDqkCU64kH4xkl5GT9R+SJ6uClD0DYBEk3mlE8zGScfYQHf6hMNIGoCb4kHvJ
2GRhD4NdBBUE6ItXSwXL0sCdFnP/oVvbMHYJWksd1N6hzA/ITaaYO+RqVL8MMj9y
QYGm92PjWG4CRjMffxlQIaX+ObrKkm304zKPc5ZUBA7FU+IkmVbEXBHiSKyKucwJ
9fDLx6+rqYh+uyiDZ3c+OlyITefG7RJWGjctUrwRRQIDAQABo4IDBTCCAwEwHQYD
VR0OBBYEFLciyQY5cUu2xqewsSPw0GYscNXBMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhL2Q1MmRkZC05MmUxLTRkMjYt
YTZhMS0yMTYxYzA2NWUxZWMvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvZDUyZGRkLTkyZTEtNGQyNi1h
NmExLTIxNjFjMDY1ZTFlYy8xL3R5TEpCamx4UzdiR3A3Q3hJX0RRWml4dzFjRS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIw
EgQCAAEwDAMEAF6OggMEAqDufDBcBAIAAjBWAwcAIAEGfBeMAwUDKgd3gAMFAyoH
uoADBQMqB8EAAwUDKgoBAAMFAyoKMoADBQMqCkrAAwUDKgrOgAMFAyoK94ADBQMq
CvoAAwUDKgsPAAMFAyoNT8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAMAnMA0G
CSqGSIb3DQEBCwUAA4IBAQA+XQczQB0WeQxYVC3m8PQfHAClPsB1i25BdR3Bb2AJ
Yjp7rDgCHNF1GJ5DHadNilj0HrjLVbm4NThWmAD2oW+eHJ5iQRsY7ZCPLLzZiz7j
WqK3GVkgwf5TP9bO7bgLQDlrJAWbYnl2RJrWxLm2woxkS//d2TRA41c+anGAD7p6
bWDviDlMPr+ZhjzXsTeZM53i0KAL2LDOOl3NG7wKfSKFO+b9CfIO1k9jzhqAcUgV
618rwCm/nCMXgClUHRG+BzIZkVitfZZNzVwGbxU0JMdbFtT/Sa7UEQAnfDUpOfk1
Ug5X4Vnti/jRzR6gg+pekvJCcQCqhMED+ozWAlptiBKU
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:11 2024 by rpki-client on console-ams.rpki-client.org