Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zilsBah7rykNDKkh0lD1QQFIp9Q.cer
File: zilsBah7rykNDKkh0lD1QQFIp9Q.cer (raw, json)
Hash identifier: 4ywSNvJqj16Khf7Wx9oWHcm6PEMiuQZN0UH5Xe+/TdE=
Subject key identifier: CE:29:6C:05:A8:7B:AF:29:0D:0C:A9:21:D2:50:F5:41:01:48:A7:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185716767E8834944DE9F849A1CFB7714EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a9331-45a9-4b18-876e-caf60305bafe/1/zilsBah7rykNDKkh0lD1QQFIp9Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a9331-45a9-4b18-876e-caf60305bafe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:34:40 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 203914
IP: 93.157.109.0/24
IP: 2a11:7580::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:67:67:e8:83:49:44:de:9f:84:9a:1c:fb:77:14:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:34:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce296c05a87baf290d0ca921d250f5410148a7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8d:20:91:4a:e0:77:be:4c:46:32:04:b6:bc:
bf:32:de:03:3b:e4:38:13:a4:b9:1b:25:f7:e2:56:
da:c8:20:6c:66:31:b8:27:ff:da:8f:92:0a:69:59:
68:3a:82:a9:1e:88:96:9f:09:b3:1b:1e:2a:43:13:
24:f8:5b:ee:82:5f:ea:cb:3f:d7:6e:ea:eb:94:3c:
79:b4:33:8c:d5:a0:22:fd:2d:72:7b:a8:ea:4f:e5:
3a:a5:56:a7:ee:d6:b1:c5:1f:ba:60:f9:4b:d8:f1:
fe:1b:b1:a8:27:f1:6d:e0:6a:f5:ab:ab:a9:16:0a:
04:fb:43:ce:a7:84:57:e4:c2:aa:b5:03:a3:95:f5:
50:cc:61:ce:e6:e6:f4:59:e0:9d:69:f4:e9:ab:c5:
dd:17:a2:98:5b:f9:60:5e:26:b7:66:d0:b3:b7:76:
ed:5a:38:99:54:ed:f6:a5:fb:fc:ca:5a:90:c2:22:
4a:c9:32:74:e3:24:78:5d:2b:7e:dd:4a:bc:86:19:
a6:aa:22:ff:73:b1:c8:10:d0:14:b4:e5:00:e0:f4:
f0:8d:b7:2c:17:a7:14:b2:bf:30:03:06:fb:d9:33:
18:c5:b1:77:ce:7a:48:24:f5:70:d7:ca:71:23:6a:
3e:10:d5:47:d8:1a:7b:13:ae:c1:d1:72:0b:0e:51:
af:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:29:6C:05:A8:7B:AF:29:0D:0C:A9:21:D2:50:F5:41:01:48:A7:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a9331-45a9-4b18-876e-caf60305bafe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a9331-45a9-4b18-876e-caf60305bafe/1/zilsBah7rykNDKkh0lD1QQFIp9Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.109.0/24
IPv6:
2a11:7580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203914
Signature Algorithm: sha256WithRSAEncryption
b1:29:29:ec:da:5b:ec:ad:b6:e5:16:a9:2b:05:c0:2a:93:ad:
49:24:63:f6:d2:8c:bb:b6:9e:91:a7:75:eb:f8:f9:17:88:70:
43:68:0d:7d:98:b8:54:01:67:d1:36:48:f5:46:41:65:c2:13:
19:ef:8b:d4:c9:35:2e:fb:ea:ab:27:a3:df:28:a3:fc:ab:c0:
af:50:70:7a:73:42:10:ae:74:b1:e6:27:8b:c9:b0:b6:b3:22:
e1:b4:fc:03:1f:c7:b1:8c:7e:4c:8e:c2:bf:43:06:f8:89:60:
6d:82:a3:a9:06:b6:2f:46:3f:88:04:42:2f:cd:19:d0:b7:74:
a0:6f:82:f7:32:9d:e2:4b:5c:dd:10:c5:33:bc:9e:80:38:7c:
e9:3b:2c:be:d0:c8:df:e8:2c:1e:7d:1d:61:ae:1f:42:95:0d:
2d:61:87:db:43:5d:89:9a:53:e9:41:f0:69:a0:3e:36:8c:70:
27:f1:73:8c:1c:6d:63:a1:ac:10:ff:65:b2:96:f7:d5:73:3d:
7b:20:c9:2e:3d:fd:28:fa:ca:d0:af:36:a9:e0:18:0b:1a:89:
c1:73:ef:59:40:45:31:1b:15:71:6f:71:64:c9:5a:b3:c4:54:
fc:24:9e:56:dc:9a:68:c2:a7:9a:92:a3:ac:89:ee:74:7e:ff:
a1:09:b5:cf
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYVxZ2fog0lE3p+Emhz7dxTuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDczNDQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTI5NmMwNWE4N2JhZjI5MGQwY2E5MjFkMjUwZjU0MTAxNDhhN2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY0gkUrgd75MRjIEtry/Mt4DO+Q4
E6S5GyX34lbayCBsZjG4J//aj5IKaVloOoKpHoiWnwmzGx4qQxMk+Fvugl/qyz/X
burrlDx5tDOM1aAi/S1ye6jqT+U6pVan7taxxR+6YPlL2PH+G7GoJ/Ft4Gr1q6up
FgoE+0POp4RX5MKqtQOjlfVQzGHO5ub0WeCdafTpq8XdF6KYW/lgXia3ZtCzt3bt
WjiZVO32pfv8ylqQwiJKyTJ04yR4XSt+3Uq8hhmmqiL/c7HIENAUtOUA4PTwjbcs
F6cUsr8wAwb72TMYxbF3znpIJPVw18pxI2o+ENVH2Bp7E67B0XILDlGvEQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFM4pbAWoe68pDQypIdJQ9UEBSKfUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmLzNhOTMz
MS00NWE5LTRiMTgtODc2ZS1jYWY2MDMwNWJhZmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvM2E5MzMx
LTQ1YTktNGIxOC04NzZlLWNhZjYwMzA1YmFmZS8xL3ppbHNCYWg3cnlrTkRLa2gw
bEQxUVFGSXA5US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAXZ1tMA0EAgACMAcDBQMqEXWAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMcijANBgkqhkiG9w0BAQsFAAOCAQEAsSkp7Npb7K22
5RapKwXAKpOtSSRj9tKMu7aekad16/j5F4hwQ2gNfZi4VAFn0TZI9UZBZcITGe+L
1Mk1Lvvqqyej3yij/KvAr1BwenNCEK50seYni8mwtrMi4bT8Ax/HsYx+TI7Cv0MG
+IlgbYKjqQa2L0Y/iARCL80Z0Ld0oG+C9zKd4ktc3RDFM7yegDh86TssvtDI3+gs
Hn0dYa4fQpUNLWGH20NdiZpT6UHwaaA+NoxwJ/FzjBxtY6GsEP9lspb31XM9eyDJ
Lj39KPrK0K82qeAYCxqJwXPvWUBFMRsVcW9xZMlas8RU/CSeVtyaaMKnmpKjrInu
dH7/oQm1zw==
-----END CERTIFICATE-----
Generated at Wed Mar 12 17:28:24 2025 by rpki-client