Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zYjuCyXbvQfPGhVpzZcCBAbiabQ.cer
File: zYjuCyXbvQfPGhVpzZcCBAbiabQ.cer (raw, json)
Hash identifier: dx5Eu2wosVHEgNthOILLAnPCtJG385ZR3LkHygaRQ14=
Subject key identifier: CD:88:EE:0B:25:DB:BD:07:CF:1A:15:69:CD:97:02:04:06:E2:69:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 98B1120C2A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/9/CD88EE0B25DBBD07CF1A1569CD97020406E269B4.mft
caRepository: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/9
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Sat 01 Jan 2022 00:00:30 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 210502
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655805778986 (0x98b1120c2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:00:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd88ee0b25dbbd07cf1a1569cd97020406e269b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:75:68:8f:1e:8d:8a:ae:9d:9e:4e:13:bd:
6e:d2:91:24:02:1f:d6:cd:b5:5d:68:b2:eb:8b:81:
5f:3b:9f:76:45:6f:92:32:1c:68:66:f6:36:71:23:
36:58:5c:51:90:47:66:4b:4d:13:36:05:79:16:33:
4f:c4:03:6b:43:35:f4:51:cf:2f:32:80:a9:95:42:
17:1a:06:e5:6b:4d:07:aa:d3:5b:62:e6:13:91:bd:
03:d1:cf:c9:a9:fe:26:a0:9b:e4:a1:a0:cb:e6:f1:
aa:1e:b8:4b:5b:ea:fc:33:e9:98:5d:e7:92:29:4d:
49:29:6d:fa:d6:cc:f5:55:de:b8:5f:d0:a9:e5:c4:
06:a9:e1:d3:22:cb:3b:74:b9:f8:1b:4e:47:5d:a4:
dd:a3:5d:9d:1f:93:31:a1:b3:77:fd:3a:61:e4:95:
99:be:4a:b6:72:86:22:ea:33:45:1d:3c:21:20:a5:
de:db:11:15:a4:3e:3f:4b:44:21:92:ea:84:ee:37:
4c:fe:fd:a3:f9:4b:59:99:9f:b7:b7:b6:24:2b:69:
e9:76:91:ec:2e:06:0e:b4:9c:b0:1c:5a:d9:a9:42:
eb:e6:a6:cd:1b:06:8c:17:7a:2c:dd:fb:04:46:29:
31:7a:17:aa:85:6d:bb:b7:4f:68:f1:61:7d:fe:0a:
a0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:88:EE:0B:25:DB:BD:07:CF:1A:15:69:CD:97:02:04:06:E2:69:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/9
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/9/CD88EE0B25DBBD07CF1A1569CD97020406E269B4.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210502
Signature Algorithm: sha256WithRSAEncryption
16:a3:4e:4a:9b:a3:35:5b:82:54:3c:52:91:79:70:e5:ff:c1:
ed:4d:9b:00:9d:23:d9:46:04:99:8b:ee:c9:5a:37:a4:c8:60:
36:3a:d5:56:36:ca:cb:59:71:b6:1f:b8:d3:df:01:48:9b:7d:
b6:23:f9:58:20:7e:bf:24:4c:d6:8a:8a:97:c0:63:c8:da:57:
6c:29:94:b8:40:de:8a:69:d2:12:5d:c4:e9:62:91:5c:2b:b3:
76:44:91:37:53:29:ec:bd:d1:35:92:e7:61:01:b9:70:2e:98:
a3:99:f2:1e:43:ca:3d:7a:b2:a5:87:2a:86:0b:6f:ee:4f:d3:
ff:76:84:c1:aa:51:ff:66:11:3b:ef:39:a8:f9:f3:c5:19:ec:
f8:75:bc:40:80:15:ab:c7:98:a8:a0:a9:c5:9c:3d:6a:67:c6:
16:48:80:69:87:b3:0d:8f:a0:4e:4f:b8:fc:48:e1:bf:84:86:
de:cc:9d:52:5c:33:ec:aa:86:02:60:11:f5:49:dd:e2:03:72:
ce:c0:eb:2d:9e:7b:39:00:b7:74:4e:61:7c:21:77:d5:e8:54:
b9:fc:79:04:d8:d6:89:39:be:fa:ad:28:59:96:81:83:e1:69:
e0:e0:d3:a9:b6:46:33:96:e3:ae:58:81:19:2a:a2:05:7a:b5:
3f:ee:46:40
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIGAJixEgwqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDAwMDMwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjZDg4ZWUwYjI1
ZGJiZDA3Y2YxYTE1NjljZDk3MDIwNDA2ZTI2OWI0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAqr51aI8ejYqunZ5OE71u0pEkAh/WzbVdaLLri4FfO592
RW+SMhxoZvY2cSM2WFxRkEdmS00TNgV5FjNPxANrQzX0Uc8vMoCplUIXGgbla00H
qtNbYuYTkb0D0c/Jqf4moJvkoaDL5vGqHrhLW+r8M+mYXeeSKU1JKW361sz1Vd64
X9Cp5cQGqeHTIss7dLn4G05HXaTdo12dH5MxobN3/Tph5JWZvkq2coYi6jNFHTwh
IKXe2xEVpD4/S0QhkuqE7jdM/v2j+UtZmZ+3t7YkK2npdpHsLgYOtJywHFrZqULr
5qbNGwaMF3os3fsERikxeheqhW27t09o8WF9/gqgJwIDAQABo4ICXjCCAlowHQYD
VR0OBBYEFM2I7gsl270HzxoVac2XAgQG4mm0MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggECBggrBgEFBQcBCwSB9TCB8jBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJl
cG8uYXMyMDc5NjAubmV0L3JlcG8vYXMyMDc5NjAtcnBraS1jYS85MG8GCCsGAQUF
BzAKhmNyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9hczIwNzk2
MC1ycGtpLWNhLzkvQ0Q4OEVFMEIyNURCQkQwN0NGMUExNTY5Q0Q5NzAyMDQwNkUy
NjlCNC5tZnQwOwYIKwYBBQUHMA2GL2h0dHBzOi8vcnBraS5hczIwNzk2MC5uZXQv
cnJkcC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8v
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpu
SEMyUUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwM2RjANBgkqhkiG9w0BAQsFAAOCAQEAFqNOSpuj
NVuCVDxSkXlw5f/B7U2bAJ0j2UYEmYvuyVo3pMhgNjrVVjbKy1lxth+4098BSJt9
tiP5WCB+vyRM1oqKl8BjyNpXbCmUuEDeimnSEl3E6WKRXCuzdkSRN1Mp7L3RNZLn
YQG5cC6Yo5nyHkPKPXqypYcqhgtv7k/T/3aEwapR/2YRO+85qPnzxRns+HW8QIAV
q8eYqKCpxZw9amfGFkiAaYezDY+gTk+4/Ejhv4SG3sydUlwz7KqGAmAR9Und4gNy
zsDrLZ57OQC3dE5hfCF31ehUufx5BNjWiTm++q0oWZaBg+Fp4ODTqbZGM5bjrliB
GSqiBXq1P+5GQA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:42 2024 by rpki-client on console-ams.rpki-client.org