Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vZf0ReZhH3iTt8yL5YDKDuLpECI.cer
File: vZf0ReZhH3iTt8yL5YDKDuLpECI.cer (raw, json)
Hash identifier: /oP+hPW5fOWimHfBIgx0WQSnLk9zaBUW5QRFcyS35UU=
Subject key identifier: BD:97:F4:45:E6:61:1F:78:93:B7:CC:8B:E5:80:CA:0E:E2:E9:10:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A1DC3D7E9C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/2e8cf1-3960-4ee3-870e-d55cdba9d5bb/1/vZf0ReZhH3iTt8yL5YDKDuLpECI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/2e8cf1-3960-4ee3-870e-d55cdba9d5bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:01:55 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 59547
IP: 45.11.164.0/22
IP: 151.248.48.0/21
IP: 2a01:9bc0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 695184752284 (0xa1dc3d7e9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:01:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd97f445e6611f7893b7cc8be580ca0ee2e91022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dc:23:37:3b:ce:00:e0:0e:2c:79:f2:66:8e:
4b:99:ce:26:05:01:23:03:09:31:32:76:89:66:ec:
09:97:51:16:b0:02:3a:c1:8a:4f:5b:8a:90:86:07:
9e:94:bd:d0:cf:68:af:f5:a4:9c:fc:e7:b2:fc:0a:
af:2b:a6:45:73:dd:d7:f1:40:97:7c:6d:ec:54:2b:
a8:d2:7e:ce:05:4b:c9:31:3e:d9:f0:37:95:92:9f:
81:0a:43:fe:27:4e:8e:14:10:71:05:fa:7c:fd:d5:
93:82:4d:37:fe:4c:aa:6c:64:ab:1f:60:ea:58:2e:
4b:9f:45:23:fb:7c:f9:34:4b:4e:40:9a:1d:14:9e:
70:62:89:ee:ef:06:83:28:ae:ec:3b:13:6f:9c:64:
14:e8:52:2a:41:61:7f:d0:9f:ef:15:48:e5:25:ac:
be:e5:80:3e:93:a3:8e:50:b3:78:50:93:91:22:db:
dc:06:14:14:42:23:83:f0:61:8f:40:b6:d4:b7:57:
72:c9:f7:84:7f:35:13:02:38:55:de:da:82:6e:3d:
5b:3b:f2:90:13:e4:9f:3c:cd:6c:0b:40:ca:a0:0a:
10:46:58:40:09:3a:64:ce:3d:f6:fd:1b:8e:89:8a:
84:64:8e:5a:a8:4d:04:c3:c3:f5:24:10:79:4f:e2:
aa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:97:F4:45:E6:61:1F:78:93:B7:CC:8B:E5:80:CA:0E:E2:E9:10:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2e8cf1-3960-4ee3-870e-d55cdba9d5bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2e8cf1-3960-4ee3-870e-d55cdba9d5bb/1/vZf0ReZhH3iTt8yL5YDKDuLpECI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.164.0/22
151.248.48.0/21
IPv6:
2a01:9bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59547
Signature Algorithm: sha256WithRSAEncryption
7d:45:bb:2c:c5:d9:7e:c4:03:33:fa:94:00:81:47:56:ed:24:
b4:84:c7:aa:55:82:b4:a8:1c:51:f4:e5:a4:a2:54:c6:0c:70:
6b:5a:8b:04:18:94:9e:6a:45:f9:14:2f:48:f5:55:bc:4e:c5:
07:82:eb:e3:61:99:dd:4b:e3:75:de:e3:d2:d1:ae:19:d0:2e:
b0:82:82:a4:f8:0d:89:d7:19:34:17:8b:cc:62:3e:75:3c:1f:
65:33:16:b6:62:19:31:41:19:14:a8:d0:e0:22:80:6d:13:be:
69:4c:e0:9b:a1:f8:d2:32:fe:25:bc:8a:ef:41:e1:c2:37:ce:
b8:45:6a:b3:e2:66:55:07:1d:4f:c6:d0:d9:05:8e:5b:c9:1f:
30:ef:51:30:f5:01:2a:9e:43:14:61:74:fa:d3:65:4a:ab:84:
d2:62:49:d6:6f:cc:64:40:21:dd:10:51:17:a8:6e:b7:0d:eb:
27:9f:d8:97:4b:45:a8:86:b5:7d:22:f7:84:31:47:52:1a:c1:
de:95:38:c8:4c:29:c4:1c:76:6d:23:01:73:93:c9:b0:62:9b:
5d:1f:c5:93:f0:11:8e:8e:c3:87:9f:ca:ec:82:94:a7:59:e5:
89:18:46:f0:1b:24:da:35:7b:ec:0a:1f:de:15:f5:62:6b:99:
75:82:75:1b
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIGAKHcPX6cMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDgwMTU1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiZDk3ZjQ0NWU2
NjExZjc4OTNiN2NjOGJlNTgwY2EwZWUyZTkxMDIyMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAmtwjNzvOAOAOLHnyZo5Lmc4mBQEjAwkxMnaJZuwJl1EW
sAI6wYpPW4qQhgeelL3Qz2iv9aSc/Oey/AqvK6ZFc93X8UCXfG3sVCuo0n7OBUvJ
MT7Z8DeVkp+BCkP+J06OFBBxBfp8/dWTgk03/kyqbGSrH2DqWC5Ln0Uj+3z5NEtO
QJodFJ5wYonu7waDKK7sOxNvnGQU6FIqQWF/0J/vFUjlJay+5YA+k6OOULN4UJOR
ItvcBhQUQiOD8GGPQLbUt1dyyfeEfzUTAjhV3tqCbj1bO/KQE+SfPM1sC0DKoAoQ
RlhACTpkzj32/RuOiYqEZI5aqE0Ew8P1JBB5T+KqvwIDAQABo4ICtTCCArEwHQYD
VR0OBBYEFL2X9EXmYR94k7fMi+WAyg7i6RAiMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5LzJlOGNmMS0zOTYwLTRlZTMt
ODcwZS1kNTVjZGJhOWQ1YmIvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkvMmU4Y2YxLTM5NjAtNGVlMy04
NzBlLWQ1NWNkYmE5ZDViYi8xL3ZaZjBSZVpoSDNpVHQ4eUw1WURLRHVMcEVDSS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQCLQukAwQDl/gwMA0EAgACMAcDBQMqAZvAMBoGCCsGAQUFBwEIAQH/
BAswCaAHMAUCAwDomzANBgkqhkiG9w0BAQsFAAOCAQEAfUW7LMXZfsQDM/qUAIFH
Vu0ktITHqlWCtKgcUfTlpKJUxgxwa1qLBBiUnmpF+RQvSPVVvE7FB4Lr42GZ3Uvj
dd7j0tGuGdAusIKCpPgNidcZNBeLzGI+dTwfZTMWtmIZMUEZFKjQ4CKAbRO+aUzg
m6H40jL+JbyK70HhwjfOuEVqs+JmVQcdT8bQ2QWOW8kfMO9RMPUBKp5DFGF0+tNl
SquE0mJJ1m/MZEAh3RBRF6hutw3rJ5/Yl0tFqIa1fSL3hDFHUhrB3pU4yEwpxBx2
bSMBc5PJsGKbXR/Fk/ARjo7Dh5/K7IKUp1nliRhG8Bsk2jV77Aof3hX1YmuZdYJ1
Gw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:31 2024 by rpki-client on console-ams.rpki-client.org