Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xakxy8DOUBaqWVzeBAYBQ8CXNgE.cer
File: xakxy8DOUBaqWVzeBAYBQ8CXNgE.cer (raw, json)
Hash identifier: zSLcbzyUGddS0tGCdR0cMPgH32Hq7ALyGsww02VhbX4=
Subject key identifier: C5:A9:31:CB:C0:CE:50:16:AA:59:5C:DE:04:06:01:43:C0:97:36:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A787991C76
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/dacfd9-8e16-4cbc-88f8-79e8d60b6158/1/xakxy8DOUBaqWVzeBAYBQ8CXNgE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/dacfd9-8e16-4cbc-88f8-79e8d60b6158/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:01:34 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 59869
IP: 81.22.176.0/20
IP: 2a07:ed80::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 719534496886 (0xa787991c76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:01:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5a931cbc0ce5016aa595cde04060143c0973601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bf:58:c5:63:17:56:f2:6d:69:b4:65:89:fb:
22:1e:06:80:1a:cf:f4:3c:92:cb:4e:a0:68:83:6e:
50:9f:fb:fa:74:93:66:4a:60:c1:d5:d8:40:3a:b8:
9a:d2:02:42:6f:ee:4b:56:21:19:a0:35:d8:e5:e7:
d4:57:59:76:e8:aa:9f:01:c4:73:ae:53:56:b5:7c:
17:7e:dd:ca:c5:8a:49:bc:95:7d:44:65:23:d0:32:
91:02:ad:99:e3:36:1d:09:66:9d:ec:33:89:42:82:
9e:bf:a9:17:dd:dc:46:f8:b2:bf:32:78:48:bf:05:
51:82:df:fa:0a:06:e1:b2:e4:29:64:02:f3:87:d5:
07:30:dd:ff:44:24:e2:da:23:80:bf:3c:63:22:13:
81:2a:9c:9d:85:fb:3e:9c:2e:ef:cb:c9:a7:a2:5a:
5c:9b:c2:7c:ef:81:4e:a4:6e:40:e6:fa:0c:55:92:
7f:21:ad:42:bb:77:c1:2c:de:89:f9:b1:ae:af:db:
59:e6:5b:27:e3:e6:a9:3c:e5:a8:51:bc:1e:39:38:
5b:c4:f4:85:76:83:ca:f1:f0:ca:08:23:15:57:6f:
dd:f7:ad:6c:fb:35:3c:5e:3b:da:db:5c:05:4b:84:
49:68:ea:f4:7f:36:38:c1:85:73:d6:4a:08:d3:7c:
99:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A9:31:CB:C0:CE:50:16:AA:59:5C:DE:04:06:01:43:C0:97:36:01
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dacfd9-8e16-4cbc-88f8-79e8d60b6158/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dacfd9-8e16-4cbc-88f8-79e8d60b6158/1/xakxy8DOUBaqWVzeBAYBQ8CXNgE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.176.0/20
IPv6:
2a07:ed80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59869
Signature Algorithm: sha256WithRSAEncryption
69:0f:b0:87:22:74:36:33:1d:2d:0d:00:32:1e:35:e1:dc:9d:
19:19:fd:56:4f:f8:2d:49:bb:bb:11:b7:ba:27:05:37:b4:e4:
77:fc:ec:c1:4b:b2:fb:a7:b5:41:5b:29:83:48:06:33:c0:2e:
7f:dc:93:42:81:6e:c9:31:87:a9:8a:04:05:b9:81:31:b6:ac:
d5:9c:ab:4e:44:bb:e0:67:8e:01:ab:f5:c0:e2:76:67:e4:79:
ec:b4:40:db:1e:16:d1:84:20:ef:c0:3f:d1:fa:53:8a:2a:27:
a2:39:b1:cd:21:08:de:a2:ed:23:ba:03:81:54:11:98:fe:b2:
d0:c5:f5:b9:a3:d1:aa:2e:41:e2:ac:04:c6:78:0d:58:20:de:
86:d2:22:86:96:2e:5e:92:cc:68:ac:03:09:b7:a8:8a:ed:7a:
d8:79:28:76:8b:f6:18:e5:ca:33:e5:1d:3e:58:58:ef:6a:1b:
d4:e1:7c:ae:d3:a7:90:24:01:91:01:98:30:16:c6:16:b3:f6:
a4:d5:62:3c:eb:35:42:fa:b9:f7:91:47:b5:03:10:4f:65:35:
a4:91:c7:b2:b7:43:52:95:01:60:4a:5b:8d:9a:6e:e1:5e:37:
3b:ee:a1:0e:4b:dc:81:1e:dc:84:83:a7:79:96:a2:1e:98:25:
d0:9b:93:6a
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIGAKeHmRx2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTMwMTM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjNWE5MzFjYmMw
Y2U1MDE2YWE1OTVjZGUwNDA2MDE0M2MwOTczNjAxMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAyL9YxWMXVvJtabRlifsiHgaAGs/0PJLLTqBog25Qn/v6
dJNmSmDB1dhAOria0gJCb+5LViEZoDXY5efUV1l26KqfAcRzrlNWtXwXft3KxYpJ
vJV9RGUj0DKRAq2Z4zYdCWad7DOJQoKev6kX3dxG+LK/MnhIvwVRgt/6CgbhsuQp
ZALzh9UHMN3/RCTi2iOAvzxjIhOBKpydhfs+nC7vy8mnolpcm8J874FOpG5A5voM
VZJ/Ia1Cu3fBLN6J+bGur9tZ5lsn4+apPOWoUbweOThbxPSFdoPK8fDKCCMVV2/d
961s+zU8Xjva21wFS4RJaOr0fzY4wYVz1koI03yZEQIDAQABo4ICrzCCAqswHQYD
VR0OBBYEFMWpMcvAzlAWqllc3gQGAUPAlzYBMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhL2RhY2ZkOS04ZTE2LTRjYmMt
ODhmOC03OWU4ZDYwYjYxNTgvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvZGFjZmQ5LThlMTYtNGNiYy04
OGY4LTc5ZThkNjBiNjE1OC8xL3hha3h5OERPVUJhcVdWemVCQVlCUThDWE5nRS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQEURawMA0EAgACMAcDBQAqB+2AMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwDp3TANBgkqhkiG9w0BAQsFAAOCAQEAaQ+whyJ0NjMdLQ0AMh414dydGRn9
Vk/4LUm7uxG3uicFN7Tkd/zswUuy+6e1QVspg0gGM8Auf9yTQoFuyTGHqYoEBbmB
Mbas1ZyrTkS74GeOAav1wOJ2Z+R57LRA2x4W0YQg78A/0fpTiionojmxzSEI3qLt
I7oDgVQRmP6y0MX1uaPRqi5B4qwExngNWCDehtIihpYuXpLMaKwDCbeoiu162Hko
dov2GOXKM+UdPlhY72ob1OF8rtOnkCQBkQGYMBbGFrP2pNViPOs1Qvq595FHtQMQ
T2U1pJHHsrdDUpUBYEpbjZpu4V43O+6hDkvcgR7chIOneZaiHpgl0JuTag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:01 2024 by rpki-client on console-fra.rpki-client.org