Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uTSkh7ojPga9LT-VdVn5beOj4f4.cer
File: uTSkh7ojPga9LT-VdVn5beOj4f4.cer (raw, json)
Hash identifier: rYoT5q4fQecw9iNMn5oaNeB6qFnnlRqTBMNsKOblYag=
Subject key identifier: B9:34:A4:87:BA:23:3E:06:BD:2D:3F:95:75:59:F9:6D:E3:A3:E1:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B26EADB00B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/563c56-ef7a-4920-ab1d-d8e1194a9e96/1/uTSkh7ojPga9LT-VdVn5beOj4f4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/563c56-ef7a-4920-ab1d-d8e1194a9e96/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 28 May 2022 10:16:07 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 47505
IP: 91.206.78.0/23
IP: 193.142.208.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 766361055243 (0xb26eadb00b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 28 10:16:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b934a487ba233e06bd2d3f957559f96de3a3e1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3c:a6:cc:ce:1e:83:a3:61:bd:33:ff:0f:34:
1b:b2:d0:1b:e8:e0:a5:bb:8c:78:5c:a1:79:23:07:
6d:ea:15:d7:c4:09:dd:4b:ff:a4:21:eb:b7:65:7e:
f7:37:94:7b:ff:e3:50:dc:0c:38:d1:6b:2a:9c:29:
d9:76:d8:97:c2:c9:37:59:ff:86:6a:e5:ff:23:6f:
5a:3d:44:26:3b:a6:ac:82:bd:2d:58:4a:08:14:dd:
e1:f1:16:6a:a7:9a:90:b1:bd:87:a7:57:4e:a7:e3:
c7:0d:e0:5c:8f:b2:65:08:01:f4:63:3d:2d:a8:bb:
10:83:4b:21:2f:6e:bc:3c:3c:7a:ad:1c:4d:ed:c6:
2b:c4:9d:f2:24:ca:9c:0e:5c:dd:e0:43:df:3e:d8:
5b:1a:61:09:fd:fd:d5:6b:d4:c9:e1:e2:88:5a:c2:
df:2f:f2:86:73:cd:7b:39:69:73:4e:9b:b5:be:8c:
c8:3a:69:b8:c5:93:7d:e9:ec:da:18:80:89:2d:7f:
dd:80:1a:5b:ce:94:65:fb:dd:79:3c:54:1f:92:7d:
43:98:70:87:39:4a:c5:23:0a:d8:c4:d3:8d:42:39:
77:18:02:c4:de:9b:fc:e5:a2:f9:2a:18:5d:a0:b1:
c1:de:f2:f6:c7:0c:d0:b8:c7:f6:72:39:ae:4e:41:
0b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:34:A4:87:BA:23:3E:06:BD:2D:3F:95:75:59:F9:6D:E3:A3:E1:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/563c56-ef7a-4920-ab1d-d8e1194a9e96/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/563c56-ef7a-4920-ab1d-d8e1194a9e96/1/uTSkh7ojPga9LT-VdVn5beOj4f4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.78.0/23
193.142.208.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47505
Signature Algorithm: sha256WithRSAEncryption
6f:10:5e:c4:f8:50:dd:4c:17:c5:a0:80:a3:5e:c9:c6:89:0b:
93:33:da:35:c5:4f:e4:47:6c:74:53:8d:8b:9d:37:97:33:32:
2a:3e:06:70:a8:58:da:ea:7a:1e:3e:78:99:e3:9c:7f:59:fb:
76:8f:61:45:99:7e:62:e3:2a:48:f0:86:ef:00:01:74:67:e4:
1b:a1:28:dd:31:e9:bf:58:15:8e:4f:75:14:dd:09:2c:75:85:
51:ce:ef:92:c4:1c:0e:d3:32:3b:90:5f:f0:9a:c7:56:7b:6e:
e3:a2:4b:93:8a:19:6f:44:f0:76:e4:fc:50:6f:f0:b8:bd:24:
7d:27:ff:11:a7:dd:15:e1:47:e1:04:e0:1a:81:53:91:22:3a:
1a:d9:31:30:8a:51:fd:5f:64:e2:cd:33:45:49:80:2f:39:df:
5d:f9:7c:bb:f5:11:2b:80:b0:63:b7:fb:8a:07:10:ea:7c:6d:
39:28:d0:68:14:8b:6e:9b:bf:d9:17:a5:40:37:29:37:dc:6f:
06:f1:ea:78:b6:f6:3e:4d:32:10:85:d7:ef:d0:fc:8a:ea:ce:
76:dd:51:dc:0f:28:6e:87:2e:f7:40:f5:bf:e8:ae:08:fd:40:
b0:70:37:24:ca:a5:c5:89:78:00:9b:04:34:c8:28:dc:f6:53:
07:4e:af:c6
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIGALJurbALMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
NTI4MTAxNjA3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiOTM0YTQ4N2Jh
MjMzZTA2YmQyZDNmOTU3NTU5Zjk2ZGUzYTNlMWZlMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAnjymzM4eg6NhvTP/DzQbstAb6OClu4x4XKF5Iwdt6hXX
xAndS/+kIeu3ZX73N5R7/+NQ3Aw40WsqnCnZdtiXwsk3Wf+GauX/I29aPUQmO6as
gr0tWEoIFN3h8RZqp5qQsb2Hp1dOp+PHDeBcj7JlCAH0Yz0tqLsQg0shL268PDx6
rRxN7cYrxJ3yJMqcDlzd4EPfPthbGmEJ/f3Va9TJ4eKIWsLfL/KGc817OWlzTpu1
vozIOmm4xZN96ezaGICJLX/dgBpbzpRl+915PFQfkn1DmHCHOUrFIwrYxNONQjl3
GALE3pv85aL5KhhdoLHB3vL2xwzQuMf2cjmuTkELfwIDAQABo4ICpjCCAqIwHQYD
VR0OBBYEFLk0pIe6Iz4GvS0/lXVZ+W3jo+H+MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkLzU2M2M1Ni1lZjdhLTQ5MjAt
YWIxZC1kOGUxMTk0YTllOTYvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvNTYzYzU2LWVmN2EtNDkyMC1h
YjFkLWQ4ZTExOTRhOWU5Ni8xL3VUU2toN29qUGdhOUxULVZkVm41YmVPajRmNC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQBW85OAwQAwY7QMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC5kTAN
BgkqhkiG9w0BAQsFAAOCAQEAbxBexPhQ3UwXxaCAo17JxokLkzPaNcVP5EdsdFON
i503lzMyKj4GcKhY2up6Hj54meOcf1n7do9hRZl+YuMqSPCG7wABdGfkG6Eo3THp
v1gVjk91FN0JLHWFUc7vksQcDtMyO5Bf8JrHVntu46JLk4oZb0TwduT8UG/wuL0k
fSf/EafdFeFH4QTgGoFTkSI6GtkxMIpR/V9k4s0zRUmALznfXfl8u/URK4CwY7f7
igcQ6nxtOSjQaBSLbpu/2RelQDcpN9xvBvHqeLb2Pk0yEIXX79D8iurOdt1R3A8o
bocu90D1v+iuCP1AsHA3JMqlxYl4AJsENMgo3PZTB06vxg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:32 2024 by rpki-client on console-fra.rpki-client.org