Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xQcGejzDj4r3RYJG5EnHZHaWGwI.cer
File: xQcGejzDj4r3RYJG5EnHZHaWGwI.cer (raw, json)
Hash identifier: YYigm5eO/+McyMyqGlQMnmreMQaHAUsUK2gBdWWPIPE=
Subject key identifier: C5:07:06:7A:3C:C3:8F:8A:F7:45:82:46:E4:49:C7:64:76:96:1B:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 996998F4DD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/fe23ca-ad4a-40ba-a1a8-e061ffa001b8/1/xQcGejzDj4r3RYJG5EnHZHaWGwI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/fe23ca-ad4a-40ba-a1a8-e061ffa001b8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:56:38 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 210281
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658901628125 (0x996998f4dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:56:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c507067a3cc38f8af7458246e449c76476961b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9a:3a:df:cc:1b:d1:72:c8:00:d8:c2:b3:9a:
ef:10:a2:49:7d:8d:75:d0:b6:d4:f1:f4:4a:dc:31:
b0:7f:ba:47:93:21:b2:4b:9b:cd:8e:8f:8c:b8:a8:
b5:02:3f:8d:1d:72:81:6a:74:8b:23:8c:cc:49:1b:
56:cb:17:ea:8d:76:01:72:2a:94:87:97:8f:13:08:
84:5b:ad:c5:8d:3f:66:cd:a0:33:63:e6:b1:a9:bd:
b6:64:ed:09:63:44:38:56:eb:1a:fd:f1:95:70:4b:
d3:ec:a3:de:64:fd:e8:39:7d:6c:b1:84:71:60:cc:
d0:70:88:22:31:6b:7d:06:e1:80:47:20:49:ef:67:
0c:dc:c4:b2:e6:61:42:63:77:a4:a0:f7:17:09:b3:
84:63:75:96:5e:81:1b:04:38:e3:95:20:7b:8f:35:
b2:56:62:44:b2:a4:2d:cf:ac:b5:f7:ff:17:5d:4a:
d3:1b:3e:87:f3:88:8b:4e:07:c6:a7:25:90:7c:6b:
38:b5:6f:23:47:4d:40:e4:30:48:1b:29:6a:4f:66:
e7:f6:57:5e:c1:bf:94:77:ac:26:88:4f:e9:63:e7:
2b:4c:cd:3b:7e:2a:48:92:d9:27:4a:c8:2e:62:4c:
c0:81:0c:50:00:27:29:a1:7a:9a:35:48:58:80:ba:
0d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:07:06:7A:3C:C3:8F:8A:F7:45:82:46:E4:49:C7:64:76:96:1B:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/fe23ca-ad4a-40ba-a1a8-e061ffa001b8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/fe23ca-ad4a-40ba-a1a8-e061ffa001b8/1/xQcGejzDj4r3RYJG5EnHZHaWGwI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210281
Signature Algorithm: sha256WithRSAEncryption
1b:d9:a2:be:6c:d6:e7:56:b4:6d:90:88:67:18:f3:fb:ae:aa:
0a:a1:ec:14:95:1b:b3:3d:80:d6:38:97:14:f9:2b:02:4f:35:
67:e1:9c:24:33:4e:c7:86:e3:84:72:e5:0f:c0:d7:40:29:7c:
16:48:ed:e7:cb:78:ee:71:af:48:31:40:1b:24:89:0b:cc:d2:
95:71:6c:ca:97:8a:2c:46:d4:76:71:d8:c0:bc:60:46:d7:e7:
f7:fd:ad:c1:4b:ec:c1:f0:3d:b8:bb:43:0d:81:0f:4f:d2:cf:
3a:52:b1:16:ff:61:58:2c:5a:bd:bc:41:6a:d4:83:7b:64:50:
38:8d:07:3e:58:6f:84:7b:b9:58:f5:f2:62:87:81:f0:31:08:
5a:8d:f6:7e:47:a1:92:50:28:ab:6c:c2:5e:41:e4:33:88:9b:
03:b8:fa:f2:bc:46:cb:da:23:a5:6e:96:5a:9f:53:df:7a:45:
f8:72:16:c5:74:d9:0b:28:21:0b:73:a5:b2:0a:64:b6:70:26:
1e:1b:1d:e5:aa:18:19:f2:61:e8:48:a1:05:b7:3e:fd:cb:57:
b9:fa:a6:c4:d3:04:f8:b7:70:3b:e0:4a:6c:55:0f:62:82:2b:
7f:04:b5:c4:da:53:dd:d0:99:13:c3:fc:4d:51:6e:1e:c9:64:
ad:49:cd:9e
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIGAJlpmPTdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDA1NjM4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjNTA3MDY3YTNj
YzM4ZjhhZjc0NTgyNDZlNDQ5Yzc2NDc2OTYxYjAyMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAmpo638wb0XLIANjCs5rvEKJJfY110LbU8fRK3DGwf7pH
kyGyS5vNjo+MuKi1Aj+NHXKBanSLI4zMSRtWyxfqjXYBciqUh5ePEwiEW63FjT9m
zaAzY+axqb22ZO0JY0Q4Vusa/fGVcEvT7KPeZP3oOX1ssYRxYMzQcIgiMWt9BuGA
RyBJ72cM3MSy5mFCY3ekoPcXCbOEY3WWXoEbBDjjlSB7jzWyVmJEsqQtz6y19/8X
XUrTGz6H84iLTgfGpyWQfGs4tW8jR01A5DBIGylqT2bn9ldewb+Ud6wmiE/pY+cr
TM07fipIktknSsguYkzAgQxQACcpoXqaNUhYgLoN3QIDAQABo4ICfzCCAnswHQYD
VR0OBBYEFMUHBno8w4+K90WCRuRJx2R2lhsCMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzL2ZlMjNjYS1hZDRhLTQwYmEt
YTFhOC1lMDYxZmZhMDAxYjgvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvZmUyM2NhLWFkNGEtNDBiYS1h
MWE4LWUwNjFmZmEwMDFiOC8xL3hRY0dlanpEajRyM1JZSkc1RW5IWkhhV0d3SS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwM1aTANBgkqhkiG9w0BAQsFAAOCAQEAG9mivmzW51a0bZCIZxjz+66qCqHs
FJUbsz2A1jiXFPkrAk81Z+GcJDNOx4bjhHLlD8DXQCl8Fkjt58t47nGvSDFAGySJ
C8zSlXFsypeKLEbUdnHYwLxgRtfn9/2twUvswfA9uLtDDYEPT9LPOlKxFv9hWCxa
vbxBatSDe2RQOI0HPlhvhHu5WPXyYoeB8DEIWo32fkehklAoq2zCXkHkM4ibA7j6
8rxGy9ojpW6WWp9T33pF+HIWxXTZCyghC3OlsgpktnAmHhsd5aoYGfJh6EihBbc+
/ctXufqmxNME+LdwO+BKbFUPYoIrfwS1xNpT3dCZE8P8TVFuHslkrUnNng==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:06 2024 by rpki-client on console-ams.rpki-client.org