Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vpqFGq6CY99flOkU6Oe-BDYOwxg.cer
File: vpqFGq6CY99flOkU6Oe-BDYOwxg.cer (raw, json)
Hash identifier: obC8bgQs49StACaaVuyCKiVrt3izEKtonvhLYcmX0zA=
Subject key identifier: BE:9A:85:1A:AE:82:63:DF:5F:94:E9:14:E8:E7:BE:04:36:0E:C3:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9CD02D372E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/b7b30c-f2a7-42d4-9423-d92a936b156b/1/vpqFGq6CY99flOkU6Oe-BDYOwxg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/b7b30c-f2a7-42d4-9423-d92a936b156b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:55:22 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 213.226.72.0/22
IP: 2a09:4380::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673507522350 (0x9cd02d372e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:55:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be9a851aae8263df5f94e914e8e7be04360ec318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:f1:1a:76:77:05:f5:42:a8:fc:16:39:ce:
59:f3:d2:7c:5c:3c:df:46:41:60:e2:7a:75:1b:32:
fa:28:9b:d1:b4:70:22:8e:f2:9f:99:27:14:09:3b:
36:c0:4f:b1:d6:a5:6b:e0:e1:6f:f7:77:80:35:ce:
18:7d:7d:40:43:d6:06:20:c5:0d:80:36:71:78:c9:
bb:58:0a:1d:61:00:aa:04:83:18:38:30:76:9f:a6:
8c:1b:47:9a:ee:ca:2c:d9:55:a4:11:d8:32:16:14:
85:12:b5:76:9f:74:37:df:e1:e6:a0:af:77:55:db:
82:fa:1c:54:f8:59:51:aa:9f:1d:08:ee:b0:7e:73:
4b:05:62:88:83:eb:f2:2b:30:3c:59:ab:b4:77:6e:
d4:4e:fe:99:d7:21:40:0f:e5:38:8c:91:89:35:51:
19:ac:be:2a:40:e2:ff:3f:7e:24:e8:4b:e9:05:e8:
01:67:7b:e2:7c:99:1c:89:ad:4e:83:bb:7e:17:f0:
d7:07:44:dd:d7:33:39:74:14:22:12:60:de:df:2b:
16:44:9d:e5:59:a8:a7:b4:34:35:81:8d:41:a2:f1:
7c:98:a0:16:c6:f7:eb:0f:11:24:0b:98:2e:6d:09:
d8:d3:54:f7:85:1f:e3:01:64:58:f2:14:d9:1d:b3:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9A:85:1A:AE:82:63:DF:5F:94:E9:14:E8:E7:BE:04:36:0E:C3:18
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b7b30c-f2a7-42d4-9423-d92a936b156b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b7b30c-f2a7-42d4-9423-d92a936b156b/1/vpqFGq6CY99flOkU6Oe-BDYOwxg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.226.72.0/22
IPv6:
2a09:4380::/32
Signature Algorithm: sha256WithRSAEncryption
62:2f:df:21:8f:2d:8d:5f:28:04:77:76:3d:a6:81:6e:69:2f:
41:e0:7f:f9:4b:7b:2a:c2:78:3f:13:4f:7c:17:dc:6c:5d:29:
a3:6c:77:c7:a9:2c:83:7f:a6:39:72:4c:13:e1:a6:84:3b:6c:
79:05:a4:19:64:27:b8:db:c6:37:af:d5:b5:db:d3:8b:e0:ea:
93:b8:23:92:20:76:13:70:9a:77:f9:b7:67:9e:e4:38:ad:f8:
5d:72:db:bb:80:6c:ba:db:72:be:5e:1a:ea:fc:48:20:5a:32:
58:b7:de:8d:3c:33:ad:df:f5:a1:e8:60:1e:79:57:6e:20:a3:
50:98:93:4c:e3:42:64:1d:3d:0e:5e:59:7f:df:01:e6:66:3d:
73:92:95:71:40:8f:ea:82:fe:70:cd:85:c7:cc:b0:9c:db:76:
2a:9f:1b:18:a9:be:e8:c0:d4:bd:d0:95:25:5e:5a:bf:e9:57:
35:1a:ca:81:eb:26:36:f1:28:ad:ed:c8:b6:7d:dd:0f:7c:8a:
54:53:38:6e:d9:2f:eb:b2:83:a8:a7:55:d7:53:09:57:62:0a:
f8:85:58:62:c5:c7:b1:50:76:23:78:b2:55:fc:fb:76:a9:18:
e8:55:ce:bc:c5:36:15:f3:5a:1f:58:a3:10:c0:03:b9:ce:a6:
26:58:55:5d
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIGAJzQLTcuMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDM1NTIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiZTlhODUxYWFl
ODI2M2RmNWY5NGU5MTRlOGU3YmUwNDM2MGVjMzE4MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAw9/xGnZ3BfVCqPwWOc5Z89J8XDzfRkFg4np1GzL6KJvR
tHAijvKfmScUCTs2wE+x1qVr4OFv93eANc4YfX1AQ9YGIMUNgDZxeMm7WAodYQCq
BIMYODB2n6aMG0ea7sos2VWkEdgyFhSFErV2n3Q33+HmoK93VduC+hxU+FlRqp8d
CO6wfnNLBWKIg+vyKzA8Wau0d27UTv6Z1yFAD+U4jJGJNVEZrL4qQOL/P34k6Evp
BegBZ3vifJkcia1Og7t+F/DXB0Td1zM5dBQiEmDe3ysWRJ3lWaintDQ1gY1BovF8
mKAWxvfrDxEkC5gubQnY01T3hR/jAWRY8hTZHbO/wwIDAQABo4ICkzCCAo8wHQYD
VR0OBBYEFL6ahRqugmPfX5TpFOjnvgQ2DsMYMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI1L2I3YjMwYy1mMmE3LTQyZDQt
OTQyMy1kOTJhOTM2YjE1NmIvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvYjdiMzBjLWYyYTctNDJkNC05
NDIzLWQ5MmE5MzZiMTU2Yi8xL3ZwcUZHcTZDWTk5ZmxPa1U2T2UtQkRZT3d4Zy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQC1eJIMA0EAgACMAcDBQAqCUOAMA0GCSqGSIb3DQEBCwUAA4IBAQBi
L98hjy2NXygEd3Y9poFuaS9B4H/5S3sqwng/E098F9xsXSmjbHfHqSyDf6Y5ckwT
4aaEO2x5BaQZZCe428Y3r9W129OL4OqTuCOSIHYTcJp3+bdnnuQ4rfhdctu7gGy6
23K+Xhrq/EggWjJYt96NPDOt3/Wh6GAeeVduIKNQmJNM40JkHT0OXll/3wHmZj1z
kpVxQI/qgv5wzYXHzLCc23YqnxsYqb7owNS90JUlXlq/6Vc1GsqB6yY28Sit7ci2
fd0PfIpUUzhu2S/rsoOop1XXUwlXYgr4hVhixcexUHYjeLJV/Pt2qRjoVc68xTYV
81ofWKMQwAO5zqYmWFVd
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:36 2024 by rpki-client on console-ams.rpki-client.org