Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zjuv6uuoGy19F6ILjtmH4GmMZDA.cer
File: zjuv6uuoGy19F6ILjtmH4GmMZDA.cer (raw, json)
Hash identifier: N9U+CbK+I+Vi4E0skSphH3AN0L4j9ISD5o4CU0iZIyI=
Subject key identifier: CE:3B:AF:EA:EB:A8:1B:2D:7D:17:A2:0B:8E:D9:87:E0:69:8C:64:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9C6436DB42
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/5426f4-3759-4d8e-aea4-0a561b7e84c9/1/zjuv6uuoGy19F6ILjtmH4GmMZDA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/5426f4-3759-4d8e-aea4-0a561b7e84c9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:51:23 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 204897
IP: 185.236.144.0/22
IP: 2a0d:b100::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671696214850 (0x9c6436db42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:51:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce3bafeaeba81b2d7d17a20b8ed987e0698c6430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c0:ae:3f:36:23:d6:08:53:3a:04:ce:18:7d:
90:39:09:90:5e:07:13:4f:82:25:01:1f:86:01:3c:
0b:b7:ae:c8:fb:cd:67:fb:bc:2e:90:a7:fc:7e:73:
ea:37:08:ad:ea:ee:39:15:67:7c:b8:52:e8:b1:e5:
ab:45:98:b5:ea:58:72:5d:e7:80:d3:ed:82:bb:aa:
21:09:67:30:8b:76:09:a8:66:cf:5d:aa:4a:7d:9b:
4b:c2:ad:5a:e0:db:f5:36:4d:90:6a:60:af:06:c2:
fe:4b:cb:f5:1e:4e:b5:dc:9e:b7:37:bf:fc:61:01:
75:60:7f:c1:86:ce:61:33:62:27:bf:58:64:c1:bd:
b9:8f:63:c9:a7:ad:bb:34:42:72:51:69:61:6f:52:
27:2c:4a:a3:5b:36:94:b8:8f:85:46:56:fb:73:ad:
9a:6c:94:f0:36:77:8e:62:25:e8:f6:5f:9f:a0:a0:
3e:bf:39:cc:bd:79:2a:79:da:08:b6:68:40:ee:28:
d4:2b:03:f0:4c:2b:8a:5d:5a:ab:64:a6:62:cd:c1:
2f:03:1b:b4:53:40:78:d8:7d:37:b5:fc:55:34:71:
7e:1c:9b:06:89:f1:89:60:7b:2c:a1:96:20:8f:01:
1c:98:c9:09:56:2a:54:b8:22:2a:6a:fa:ea:ab:27:
32:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3B:AF:EA:EB:A8:1B:2D:7D:17:A2:0B:8E:D9:87:E0:69:8C:64:30
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5426f4-3759-4d8e-aea4-0a561b7e84c9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5426f4-3759-4d8e-aea4-0a561b7e84c9/1/zjuv6uuoGy19F6ILjtmH4GmMZDA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.144.0/22
IPv6:
2a0d:b100::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204897
Signature Algorithm: sha256WithRSAEncryption
9e:b6:90:05:5a:af:f8:74:af:cf:6e:36:29:bc:89:c5:14:29:
c7:60:41:c8:41:e9:01:d8:e6:c1:f2:6f:ee:59:18:4a:05:f7:
3f:e8:5f:87:db:7d:70:be:a6:a8:d6:04:3f:19:17:f5:7a:51:
8d:f5:3c:22:e0:b9:d9:13:df:20:35:09:d1:78:33:be:d6:5d:
75:57:ce:a1:ca:a2:6f:64:04:78:44:17:9a:64:fd:32:18:7d:
59:67:80:a3:63:84:78:f2:99:fe:ab:20:c5:5b:07:33:0b:a4:
a7:04:83:29:82:65:47:d7:da:1e:47:23:78:7b:2e:f5:bd:85:
a7:9c:ca:d0:70:3c:29:1a:1b:2a:11:72:93:97:b7:11:8c:06:
d5:7d:56:48:d6:c3:3f:7e:92:7a:c4:92:d7:19:a4:c1:38:c6:
4d:2c:ec:94:5d:8d:85:0f:7c:0f:ca:01:fc:a4:f3:f1:b3:dc:
38:78:df:c3:38:1b:9a:b4:70:62:40:c8:b9:79:a9:ee:d0:e3:
1e:6f:4e:c1:99:24:67:9b:34:84:88:d6:12:99:29:53:50:53:
ea:1b:06:6e:50:fe:2a:57:7d:f4:ba:35:33:90:0e:a9:a0:01:
df:26:ff:9e:a9:27:33:04:af:f7:dc:17:9b:23:a4:56:af:13:
a4:7c:d5:be
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIGAJxkNttCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDM1MTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjZTNiYWZlYWVi
YTgxYjJkN2QxN2EyMGI4ZWQ5ODdlMDY5OGM2NDMwMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAwMCuPzYj1ghTOgTOGH2QOQmQXgcTT4IlAR+GATwLt67I
+81n+7wukKf8fnPqNwit6u45FWd8uFLoseWrRZi16lhyXeeA0+2Cu6ohCWcwi3YJ
qGbPXapKfZtLwq1a4Nv1Nk2QamCvBsL+S8v1Hk613J63N7/8YQF1YH/Bhs5hM2In
v1hkwb25j2PJp627NEJyUWlhb1InLEqjWzaUuI+FRlb7c62abJTwNneOYiXo9l+f
oKA+vznMvXkqedoItmhA7ijUKwPwTCuKXVqrZKZizcEvAxu0U0B42H03tfxVNHF+
HJsGifGJYHssoZYgjwEcmMkJVipUuCIqavrqqycy1QIDAQABo4ICrzCCAqswHQYD
VR0OBBYEFM47r+rrqBstfReiC47Zh+BpjGQwMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwLzU0MjZmNC0zNzU5LTRkOGUt
YWVhNC0wYTU2MWI3ZTg0YzkvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvNTQyNmY0LTM3NTktNGQ4ZS1h
ZWE0LTBhNTYxYjdlODRjOS8xL3pqdXY2dXVvR3kxOUY2SUxqdG1INEdtTVpEQS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCueyQMA0EAgACMAcDBQMqDbEAMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMgYTANBgkqhkiG9w0BAQsFAAOCAQEAnraQBVqv+HSvz242KbyJxRQpx2BB
yEHpAdjmwfJv7lkYSgX3P+hfh9t9cL6mqNYEPxkX9XpRjfU8IuC52RPfIDUJ0Xgz
vtZddVfOocqib2QEeEQXmmT9Mhh9WWeAo2OEePKZ/qsgxVsHMwukpwSDKYJlR9fa
HkcjeHsu9b2Fp5zK0HA8KRobKhFyk5e3EYwG1X1WSNbDP36SesSS1xmkwTjGTSzs
lF2NhQ98D8oB/KTz8bPcOHjfwzgbmrRwYkDIuXmp7tDjHm9OwZkkZ5s0hIjWEpkp
U1BT6hsGblD+Kld99Lo1M5AOqaAB3yb/nqknMwSv99wXmyOkVq8TpHzVvg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:21 2024 by rpki-client on console-fra.rpki-client.org