Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2mLwaeDSoZA9SRwGVKj15kF2nxY.cer
File: 2mLwaeDSoZA9SRwGVKj15kF2nxY.cer (raw, json)
Hash identifier: UHJDnrFlP/9Np9rirA04f5T1Lztq9xV78FGn6jXfCWM=
Subject key identifier: DA:62:F0:69:E0:D2:A1:90:3D:49:1C:06:54:A8:F5:E6:41:76:9F:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A3B51FBAE2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/c7af1c-da41-4ef3-8963-604535036742/1/2mLwaeDSoZA9SRwGVKj15kF2nxY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/c7af1c-da41-4ef3-8963-604535036742/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:56:20 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.209.73.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 703118424802 (0xa3b51fbae2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:56:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da62f069e0d2a1903d491c0654a8f5e641769f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f6:0c:ea:3b:a4:f4:1c:60:1f:32:0f:b8:91:
95:5b:06:79:bf:f0:22:f2:eb:ea:e0:1b:12:44:00:
4a:20:37:9b:f2:b1:1e:7b:d3:35:f1:a4:1a:97:d8:
1f:b8:ee:9e:3b:58:3d:d8:4e:74:3b:b1:3e:ac:d2:
c5:25:4a:c6:03:02:78:fe:7c:a3:84:ac:76:7c:9e:
49:fa:4a:56:d2:de:19:26:9f:4f:3e:3d:82:7f:bb:
52:43:46:c6:0a:4e:a2:b7:aa:f5:f2:e9:49:61:72:
ff:7c:6b:df:37:78:3f:ea:e9:16:12:af:f1:75:9b:
f6:22:b6:3e:0c:12:68:19:0f:ac:a9:b2:fa:40:76:
72:c9:25:16:c2:96:50:55:21:f8:3f:47:67:ce:b1:
87:b6:97:63:f3:f1:7a:a3:14:61:55:98:d8:40:34:
da:63:49:41:55:54:6f:8a:ee:6e:63:ff:01:18:e9:
de:75:45:5d:ca:7a:f5:44:18:6f:93:ef:15:b2:85:
76:da:68:0a:d4:c3:b9:f2:10:35:d3:b8:59:0d:3f:
87:7e:ea:3e:81:17:89:4d:70:1a:3b:2f:fe:0c:80:
07:0f:a5:b5:d0:9f:2c:3e:b3:e2:2f:fb:1a:b9:5e:
22:79:2c:99:0a:d1:b1:27:56:fe:fb:6d:ee:b7:94:
cb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:62:F0:69:E0:D2:A1:90:3D:49:1C:06:54:A8:F5:E6:41:76:9F:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c7af1c-da41-4ef3-8963-604535036742/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c7af1c-da41-4ef3-8963-604535036742/1/2mLwaeDSoZA9SRwGVKj15kF2nxY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.73.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:d8:8c:d8:6e:6f:af:0d:d5:2d:af:dc:59:54:10:d5:ee:bf:
ab:02:bf:e5:98:bb:c0:ea:e9:68:43:e8:bf:8a:a7:b0:ff:b8:
95:59:a8:5a:47:53:c2:46:fe:b6:2a:f8:e9:2d:d7:ef:68:e3:
c6:7d:c7:3a:79:f7:07:67:f4:5a:85:fd:14:a2:d9:64:28:b2:
59:a6:23:95:76:47:cd:49:70:3c:87:1d:b8:28:8b:b7:55:bd:
81:60:50:c7:8b:4b:8c:1b:7c:95:39:0e:a3:27:d2:59:0e:19:
7a:dd:d1:69:14:82:87:2c:16:60:c9:17:a1:50:a4:50:0b:24:
81:f6:1f:81:78:4a:1e:a7:2e:ad:6f:7d:af:9e:25:15:79:b5:
c2:9d:26:75:a4:7e:7e:aa:95:60:3a:bb:63:cc:22:6a:67:2f:
9f:be:4a:1d:b2:5f:d7:16:ec:fe:aa:50:5c:16:23:16:02:a9:
d4:a0:5c:57:18:90:49:0e:5b:4d:4f:01:fc:5a:27:8b:11:2f:
2a:3b:e5:86:d5:9f:8b:92:6e:f0:e0:32:0a:a0:fb:6c:a8:58:
89:a2:b7:3e:9e:70:7e:29:cc:14:f8:f6:a2:13:04:1d:35:82:
25:70:0c:8f:43:1f:fc:20:de:52:26:10:6d:d1:8e:71:3c:64:
3d:3c:bc:11
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAKO1H7riMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDk1NjIwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkYTYyZjA2OWUw
ZDJhMTkwM2Q0OTFjMDY1NGE4ZjVlNjQxNzY5ZjE2MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA5vYM6juk9BxgHzIPuJGVWwZ5v/Ai8uvq4BsSRABKIDeb
8rEee9M18aQal9gfuO6eO1g92E50O7E+rNLFJUrGAwJ4/nyjhKx2fJ5J+kpW0t4Z
Jp9PPj2Cf7tSQ0bGCk6it6r18ulJYXL/fGvfN3g/6ukWEq/xdZv2IrY+DBJoGQ+s
qbL6QHZyySUWwpZQVSH4P0dnzrGHtpdj8/F6oxRhVZjYQDTaY0lBVVRviu5uY/8B
GOnedUVdynr1RBhvk+8VsoV22mgK1MO58hA107hZDT+Hfuo+gReJTXAaOy/+DIAH
D6W10J8sPrPiL/sauV4ieSyZCtGxJ1b++23ut5TLuQIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFNpi8Gng0qGQPUkcBlSo9eZBdp8WMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjL2M3YWYxYy1kYTQxLTRlZjMt
ODk2My02MDQ1MzUwMzY3NDIvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvYzdhZjFjLWRhNDEtNGVmMy04
OTYzLTYwNDUzNTAzNjc0Mi8xLzJtTHdhZURTb1pBOVNSd0dWS2oxNWtGMm54WS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAW9FJMA0GCSqGSIb3DQEBCwUAA4IBAQBN2IzYbm+vDdUtr9xZVBDV
7r+rAr/lmLvA6uloQ+i/iqew/7iVWahaR1PCRv62KvjpLdfvaOPGfcc6efcHZ/Ra
hf0UotlkKLJZpiOVdkfNSXA8hx24KIu3Vb2BYFDHi0uMG3yVOQ6jJ9JZDhl63dFp
FIKHLBZgyRehUKRQCySB9h+BeEoepy6tb32vniUVebXCnSZ1pH5+qpVgOrtjzCJq
Zy+fvkodsl/XFuz+qlBcFiMWAqnUoFxXGJBJDltNTwH8WieLES8qO+WG1Z+Lkm7w
4DIKoPtsqFiJorc+nnB+KcwU+PaiEwQdNYIlcAyPQx/8IN5SJhBt0Y5xPGQ9PLwR
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:43 2023 by rpki-client on console.sobornost.net