Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zdFcST-HXaGWmSfBuRyW4v-VNSw.cer
File: zdFcST-HXaGWmSfBuRyW4v-VNSw.cer (raw, json)
Hash identifier: nIT34hr7abUcCJkH3S/Vh18snWSdTzGwhd56/+3TJWM=
Subject key identifier: CD:D1:5C:49:3F:87:5D:A1:96:99:27:C1:B9:1C:96:E2:FF:95:35:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD13F51AFECC10420B148A42431D688
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/eee0a3-02d8-4171-a47b-40944b6ac31b/1/zdFcST-HXaGWmSfBuRyW4v-VNSw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/eee0a3-02d8-4171-a47b-40944b6ac31b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:33 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 59488
IP: 95.215.222.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d1:3f:51:af:ec:c1:04:20:b1:48:a4:24:31:d6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdd15c493f875da1969927c1b91c96e2ff95352c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e6:0c:10:26:c2:5f:19:20:c5:b3:9f:c1:63:
94:58:39:e1:59:af:ff:be:30:a1:7f:41:cf:26:c2:
85:90:a6:6c:17:1a:56:67:83:49:87:33:ef:0a:ce:
e6:54:8d:08:ba:ef:45:8a:28:45:5e:c3:71:a4:52:
a1:94:d2:c9:d0:8e:98:46:39:e4:42:39:43:18:96:
3b:cd:95:c2:0d:d8:a4:39:b5:09:f2:0d:d6:19:35:
4e:59:8b:73:f8:7b:06:28:d6:e1:9c:ed:c2:6c:38:
7a:39:7e:5a:85:31:5c:cd:b4:ba:d0:d9:3b:55:75:
26:48:4b:eb:30:c5:ce:69:7a:7a:6f:bd:f2:a1:b7:
a6:c5:c6:83:63:a4:b3:60:f4:73:af:17:18:f8:be:
65:74:17:5d:28:ca:4b:c3:96:1d:2c:c1:be:1b:64:
df:ca:02:80:25:e4:98:84:2c:6a:0e:45:fb:ed:74:
72:2c:40:b2:aa:09:32:6f:e5:62:e5:56:c6:b5:46:
88:4b:56:7a:c7:63:ca:22:6c:15:38:08:97:8d:28:
73:84:49:a5:61:0f:61:29:07:63:31:3f:ee:ba:f2:
6d:88:6d:cb:1e:0e:83:ed:5e:5a:a8:6c:a6:87:f5:
f4:8a:cc:0e:55:45:11:97:6e:4a:d3:36:50:b5:52:
80:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D1:5C:49:3F:87:5D:A1:96:99:27:C1:B9:1C:96:E2:FF:95:35:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eee0a3-02d8-4171-a47b-40944b6ac31b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eee0a3-02d8-4171-a47b-40944b6ac31b/1/zdFcST-HXaGWmSfBuRyW4v-VNSw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.222.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59488
Signature Algorithm: sha256WithRSAEncryption
8a:98:aa:4f:f5:9a:81:ae:ac:cb:21:27:df:98:a6:c4:95:55:
6e:e6:9e:cf:ea:c7:38:b2:75:5d:10:40:42:6b:92:8d:ad:ad:
a7:1a:43:34:06:f6:45:d2:76:c0:a4:dd:fc:51:67:55:16:a7:
86:21:17:20:0c:a5:c4:32:7e:f9:43:18:5a:52:5f:84:01:0b:
e0:58:6a:0c:2c:c0:95:4d:8a:40:31:e2:df:27:cc:02:48:c6:
e1:e1:5b:e7:28:43:71:c7:40:b7:5b:bb:35:59:4d:8a:43:ad:
f3:0b:bb:e8:d9:bc:c3:fb:37:fa:6f:51:b3:1d:e3:de:82:27:
41:c7:9c:c6:a9:b7:69:b6:de:8f:77:05:67:fb:f7:f2:91:ff:
68:4d:dd:87:1e:f2:18:f9:95:0a:94:84:36:f0:2b:4d:05:86:
1e:e9:8b:79:a9:7f:5f:17:7b:53:88:db:ab:b5:54:63:af:ff:
7c:c3:cc:20:38:cb:c6:8b:30:ed:18:a2:01:2e:5c:5f:1b:c1:
88:44:79:ec:39:23:14:a7:37:b9:ce:99:29:33:f1:33:d5:cf:
41:60:80:6b:e8:27:03:6b:21:ec:c8:01:74:8b:85:7e:82:1c:
af:e5:c0:dd:3c:bd:ae:5b:29:bc:4b:90:6e:32:41:67:4f:cf:
a4:3a:8d:52
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYVr0T9Rr+zBBCCxSKQkMdaIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDUzMjMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGQxNWM0OTNmODc1ZGExOTY5OTI3YzFiOTFjOTZlMmZmOTUzNTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeYMECbCXxkgxbOfwWOUWDnhWa//
vjChf0HPJsKFkKZsFxpWZ4NJhzPvCs7mVI0Iuu9FiihFXsNxpFKhlNLJ0I6YRjnk
QjlDGJY7zZXCDdikObUJ8g3WGTVOWYtz+HsGKNbhnO3CbDh6OX5ahTFczbS60Nk7
VXUmSEvrMMXOaXp6b73yobemxcaDY6SzYPRzrxcY+L5ldBddKMpLw5YdLMG+G2Tf
ygKAJeSYhCxqDkX77XRyLECyqgkyb+Vi5VbGtUaIS1Z6x2PKImwVOAiXjShzhEml
YQ9hKQdjMT/uuvJtiG3LHg6D7V5aqGymh/X0iswOVUURl25K0zZQtVKAowIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFM3RXEk/h12hlpknwbkcluL/lTUsMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1L2VlZTBh
My0wMmQ4LTQxNzEtYTQ3Yi00MDk0NGI2YWMzMWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvZWVlMGEz
LTAyZDgtNDE3MS1hNDdiLTQwOTQ0YjZhYzMxYi8xL3pkRmNTVC1IWGFHV21TZkJ1
UnlXNHYtVk5Tdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAX9feMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDoYDANBgkqhkiG9w0BAQsFAAOCAQEAipiqT/Waga6syyEn35imxJVVbuaez+rH
OLJ1XRBAQmuSja2tpxpDNAb2RdJ2wKTd/FFnVRanhiEXIAylxDJ++UMYWlJfhAEL
4FhqDCzAlU2KQDHi3yfMAkjG4eFb5yhDccdAt1u7NVlNikOt8wu76Nm8w/s3+m9R
sx3j3oInQcecxqm3abbej3cFZ/v38pH/aE3dhx7yGPmVCpSENvArTQWGHumLeal/
Xxd7U4jbq7VUY6//fMPMIDjLxosw7RiiAS5cXxvBiER57DkjFKc3uc6ZKTPxM9XP
QWCAa+gnA2sh7MgBdIuFfoIcr+XA3Ty9rlspvEuQbjJBZ0/PpDqNUg==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:46 2025 by rpki-client