Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KXdilEX_vTBscApL8oAeo3yhnP4.cer
File: KXdilEX_vTBscApL8oAeo3yhnP4.cer (raw, json)
Hash identifier: +FoQwMs6hc8RMC7ria9KHu2ZcPKol56ThOAjiyFYkr0=
Subject key identifier: 29:77:62:94:45:FF:BD:30:6C:70:0A:4B:F2:80:1E:A3:7C:A1:9C:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A2E1AE5A97
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/590483-b957-40fa-acfb-74b01b93ce3d/1/KXdilEX_vTBscApL8oAeo3yhnP4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/590483-b957-40fa-acfb-74b01b93ce3d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:00:22 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 195.230.123.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699571002007 (0xa2e1ae5a97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:00:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2977629445ffbd306c700a4bf2801ea37ca19cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:a6:1b:01:43:9a:1c:5c:18:98:22:cf:93:
47:8a:ad:ec:0d:b2:72:f9:3a:4b:c3:fe:63:e6:fe:
ea:89:8d:c0:63:06:23:87:4e:73:c9:33:fe:b1:da:
8e:a6:4b:9e:96:a8:6e:f9:e0:49:b9:b2:36:fd:ec:
c5:52:31:1b:df:9e:b6:20:9a:ee:5c:fe:9a:c2:0b:
78:6c:50:97:43:92:01:ff:a3:01:2d:36:04:f1:d0:
35:9a:00:da:1e:1f:30:2c:36:af:3c:ff:df:a1:6f:
ca:a9:2a:02:39:42:f4:74:5c:33:7c:66:e2:5e:72:
8b:2a:a1:f6:5d:b4:34:3c:3b:e9:bc:2e:9f:3c:f6:
46:1e:9b:06:7b:4f:62:01:99:3f:74:fc:cb:d7:5e:
78:94:3f:75:29:95:57:39:1f:36:f0:64:2f:2b:d9:
8d:38:98:22:3e:59:e4:3d:59:77:32:51:79:15:a5:
68:86:8a:40:8c:1e:73:3b:3c:6f:58:3e:32:56:7c:
0f:ce:32:92:f2:41:bf:4a:10:ab:61:d6:72:1e:4d:
a4:80:02:4b:2b:b2:37:6f:55:0f:0d:44:71:cc:a9:
27:4d:1e:df:53:ff:b6:3d:63:da:ca:87:96:88:5d:
3e:8d:7b:57:00:16:96:8c:67:68:10:fd:ad:5a:62:
fa:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:77:62:94:45:FF:BD:30:6C:70:0A:4B:F2:80:1E:A3:7C:A1:9C:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/590483-b957-40fa-acfb-74b01b93ce3d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/590483-b957-40fa-acfb-74b01b93ce3d/1/KXdilEX_vTBscApL8oAeo3yhnP4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.123.0/24
Signature Algorithm: sha256WithRSAEncryption
76:f1:3a:de:67:36:c4:d0:18:ed:f3:b2:7a:db:c8:be:29:77:
de:03:c0:c5:f8:71:f2:75:c2:8b:61:8c:e4:95:ed:7f:0e:2c:
d6:e4:0a:86:9f:2c:f0:22:6d:cc:b3:40:4a:28:33:ed:d9:cd:
06:e3:4d:fd:50:fd:53:66:51:95:ad:76:f1:f2:56:a4:09:0d:
b9:09:48:11:c7:60:ac:36:53:37:0b:34:c1:c3:c8:13:4f:02:
ad:d1:6f:0c:09:63:16:fa:f9:2f:9a:22:52:5d:ba:fa:22:3c:
4c:25:53:1d:c0:df:d3:93:cb:3d:a9:b1:b6:55:06:4d:a0:80:
26:97:53:ce:12:63:40:1b:37:5f:37:11:8e:3f:ea:c5:7b:b0:
06:76:f1:63:b0:da:94:5d:d8:03:bd:95:0d:36:70:b1:c2:41:
3d:c2:34:f1:3e:1c:fb:32:fc:ee:b6:77:c4:bf:e2:c7:35:0f:
5e:a4:fc:5c:9a:0f:26:0f:aa:c8:94:3c:64:24:0e:3b:fd:cd:
d9:61:4e:94:8b:5d:48:c7:94:f5:f8:d7:d7:ae:42:04:24:a6:
04:35:42:c9:24:6f:16:a9:13:ba:f8:0d:38:5a:ff:49:1b:23:
3d:ff:d4:f7:ed:62:d2:04:57:99:f5:5e:dc:54:26:68:4e:0b:
00:7b:50:fa
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAKLhrlqXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDkwMDIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyOTc3NjI5NDQ1
ZmZiZDMwNmM3MDBhNGJmMjgwMWVhMzdjYTE5Y2ZlMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAxQqmGwFDmhxcGJgiz5NHiq3sDbJy+TpLw/5j5v7qiY3A
YwYjh05zyTP+sdqOpkuelqhu+eBJubI2/ezFUjEb3562IJruXP6awgt4bFCXQ5IB
/6MBLTYE8dA1mgDaHh8wLDavPP/foW/KqSoCOUL0dFwzfGbiXnKLKqH2XbQ0PDvp
vC6fPPZGHpsGe09iAZk/dPzL1154lD91KZVXOR828GQvK9mNOJgiPlnkPVl3MlF5
FaVohopAjB5zOzxvWD4yVnwPzjKS8kG/ShCrYdZyHk2kgAJLK7I3b1UPDURxzKkn
TR7fU/+2PWPayoeWiF0+jXtXABaWjGdoEP2tWmL62QIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFCl3YpRF/70wbHAKS/KAHqN8oZz+MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhLzU5MDQ4My1iOTU3LTQwZmEt
YWNmYi03NGIwMWI5M2NlM2QvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvNTkwNDgzLWI5NTctNDBmYS1h
Y2ZiLTc0YjAxYjkzY2UzZC8xL0tYZGlsRVhfdlRCc2NBcEw4b0FlbzN5aG5QNC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAw+Z7MA0GCSqGSIb3DQEBCwUAA4IBAQB28TreZzbE0Bjt87J628i+
KXfeA8DF+HHydcKLYYzkle1/DizW5AqGnyzwIm3Ms0BKKDPt2c0G4039UP1TZlGV
rXbx8lakCQ25CUgRx2CsNlM3CzTBw8gTTwKt0W8MCWMW+vkvmiJSXbr6IjxMJVMd
wN/Tk8s9qbG2VQZNoIAml1POEmNAGzdfNxGOP+rFe7AGdvFjsNqUXdgDvZUNNnCx
wkE9wjTxPhz7MvzutnfEv+LHNQ9epPxcmg8mD6rIlDxkJA47/c3ZYU6Ui11Ix5T1
+NfXrkIEJKYENULJJG8WqRO6+A04Wv9JGyM9/9T37WLSBFeZ9V7cVCZoTgsAe1D6
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:46 2023 by rpki-client on console.sobornost.net