Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vFRbJpuuLFXPcEvX4SqN7Fj2Jho.cer
File: vFRbJpuuLFXPcEvX4SqN7Fj2Jho.cer (raw, json)
Hash identifier: HueNMKHXavTVwYt82tJx9f23zzZwXierbkJarimp3gE=
Subject key identifier: BC:54:5B:26:9B:AE:2C:55:CF:70:4B:D7:E1:2A:8D:EC:58:F6:26:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B0243E69FF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/11/BC545B269BAE2C55CF704BD7E12A8DEC58F6261A.mft
caRepository: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/11
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Thu 14 Apr 2022 16:58:29 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 205789
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 756522314239 (0xb0243e69ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 14 16:58:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc545b269bae2c55cf704bd7e12a8dec58f6261a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:82:87:ab:1b:38:11:66:a2:22:d3:90:64:a8:
81:75:7e:52:7f:72:8b:c0:57:cd:6c:2f:92:b3:0c:
30:95:0a:7e:fb:3a:12:1a:e4:0c:94:ae:3e:81:1c:
6b:46:83:db:a7:f3:20:09:dd:e3:3c:6c:c5:34:6a:
d4:7a:bb:62:83:ed:59:e3:ce:a6:37:f7:f4:65:cf:
e5:5b:a6:cf:31:9c:8e:03:1b:fb:95:cd:4b:3b:75:
ee:05:17:28:01:7b:e1:d8:63:09:ef:47:a7:ef:d2:
48:3e:84:74:8f:08:0b:b9:10:04:40:0f:8e:db:6b:
59:01:4d:df:1f:5a:60:64:3e:52:e0:ac:90:71:e1:
7c:aa:30:4f:fc:6d:96:e2:81:a2:76:92:d9:c9:6f:
8e:8c:f3:f8:38:ea:c9:79:66:17:6b:43:40:4e:e1:
12:39:96:1e:68:65:94:6a:f4:4a:73:84:fc:5f:8a:
86:2d:89:36:e5:b0:66:a8:48:2b:5e:6b:ac:35:af:
1a:9d:ab:04:17:f2:cf:8d:d3:05:ec:6b:29:0c:a8:
51:1b:b0:f2:4b:bf:99:23:be:ea:7b:8f:3b:5d:00:
94:b1:b0:1b:85:21:3d:bf:f4:f0:6a:77:bd:2a:5e:
90:9e:a7:d5:9f:d4:a8:5b:e3:6b:6e:c9:83:5c:bd:
72:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:54:5B:26:9B:AE:2C:55:CF:70:4B:D7:E1:2A:8D:EC:58:F6:26:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/11
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/11/BC545B269BAE2C55CF704BD7E12A8DEC58F6261A.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205789
Signature Algorithm: sha256WithRSAEncryption
62:0c:76:c8:ee:eb:ec:09:af:42:f4:3f:3a:09:18:93:16:be:
79:e6:54:43:43:f9:37:7e:38:0e:25:49:5a:ad:f1:8c:53:6f:
d9:30:6d:e8:d9:e6:c2:ce:a8:14:66:78:34:62:d7:9c:1d:9a:
73:af:30:b5:45:7a:23:ee:08:b5:26:68:cf:45:b4:30:27:f4:
3f:de:d4:15:12:6d:3c:9d:f0:83:d2:dd:04:b8:b6:8f:af:e4:
75:ee:ec:9a:c3:58:39:38:08:9f:d7:a7:12:26:a5:1a:5a:1d:
b8:dc:01:69:5f:6e:75:e8:ad:03:33:2c:ad:8a:f7:5c:e2:98:
36:39:56:1c:4a:05:01:e1:48:77:2f:85:c8:7a:9f:b5:50:10:
79:ea:23:63:ea:e9:d6:fa:f1:ba:22:23:33:8e:5d:5e:15:dc:
c2:0a:2b:2c:58:44:ce:07:c4:b6:74:54:fc:de:1f:5b:b6:f6:
a6:b2:2d:c6:2d:38:47:c4:5e:20:ad:c7:d8:78:69:ca:bd:62:
44:c7:87:0b:84:92:e1:ff:7e:69:39:4a:eb:78:fd:0e:7a:ba:
c7:ce:a7:cb:82:db:6a:71:49:57:fb:82:89:5c:46:ee:3e:52:
c9:08:f5:0f:6f:ad:02:5d:a4:a3:fb:60:a0:a8:21:87:8a:c6:
86:a2:0c:c0
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIGALAkPmn/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
NDE0MTY1ODI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiYzU0NWIyNjli
YWUyYzU1Y2Y3MDRiZDdlMTJhOGRlYzU4ZjYyNjFhMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA6IKHqxs4EWaiItOQZKiBdX5Sf3KLwFfNbC+SswwwlQp+
+zoSGuQMlK4+gRxrRoPbp/MgCd3jPGzFNGrUertig+1Z486mN/f0Zc/lW6bPMZyO
Axv7lc1LO3XuBRcoAXvh2GMJ70en79JIPoR0jwgLuRAEQA+O22tZAU3fH1pgZD5S
4KyQceF8qjBP/G2W4oGidpLZyW+OjPP4OOrJeWYXa0NATuESOZYeaGWUavRKc4T8
X4qGLYk25bBmqEgrXmusNa8anasEF/LPjdMF7GspDKhRG7DyS7+ZI77qe487XQCU
sbAbhSE9v/Twane9Kl6QnqfVn9SoW+NrbsmDXL1y6wIDAQABo4ICYDCCAlwwHQYD
VR0OBBYEFLxUWyabrixVz3BL1+EqjexY9iYaMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEEBggrBgEFBQcBCwSB9zCB9DBDBggrBgEFBQcwBYY3cnN5bmM6Ly9ycGtpLXJl
cG8uYXMyMDc5NjAubmV0L3JlcG8vYXMyMDc5NjAtcnBraS1jYS8xMTBwBggrBgEF
BQcwCoZkcnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vYXMyMDc5
NjAtcnBraS1jYS8xMS9CQzU0NUIyNjlCQUUyQzU1Q0Y3MDRCRDdFMTJBOERFQzU4
RjYyNjFBLm1mdDA7BggrBgEFBQcwDYYvaHR0cHM6Ly9ycGtpLmFzMjA3OTYwLm5l
dC9ycmRwL25vdGlmaWNhdGlvbi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6
Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJ
Sm5IQzJRSFZWM2Q1bWsuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDAyPdMA0GCSqGSIb3DQEBCwUAA4IBAQBiDHbI
7uvsCa9C9D86CRiTFr555lRDQ/k3fjgOJUlarfGMU2/ZMG3o2ebCzqgUZng0Ytec
HZpzrzC1RXoj7gi1JmjPRbQwJ/Q/3tQVEm08nfCD0t0EuLaPr+R17uyaw1g5OAif
16cSJqUaWh243AFpX2516K0DMyytivdc4pg2OVYcSgUB4Uh3L4XIep+1UBB56iNj
6unW+vG6IiMzjl1eFdzCCissWETOB8S2dFT83h9btvamsi3GLThHxF4grcfYeGnK
vWJEx4cLhJLh/35pOUrreP0OerrHzqfLgttqcUlX+4KJXEbuPlLJCPUPb60CXaSj
+2CgqCGHisaGogzA
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:38 2024 by rpki-client on console-fra.rpki-client.org