Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4qgTDuMKikxrpxPC8oI8xLdncI.cer
File: c4qgTDuMKikxrpxPC8oI8xLdncI.cer (raw, json)
Hash identifier: WmRLS1fMqaq+1VqojfpW8CU0gtKxRJFfWXC/884MsmQ=
Subject key identifier: 73:8A:A0:4C:3B:8C:2A:29:31:AE:9C:4F:0B:CA:08:F3:12:DD:9D:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A22BF7E3C4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/9d068e-f442-4717-9333-10184bdf41d8/1/c4qgTDuMKikxrpxPC8oI8xLdncI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/9d068e-f442-4717-9333-10184bdf41d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:05:53 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 152.96.0.0/16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696522367940 (0xa22bf7e3c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:05:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=738aa04c3b8c2a2931ae9c4f0bca08f312dd9dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:66:95:4e:a1:0d:68:8f:7b:37:e7:ed:70:8d:
6c:ff:a0:33:0b:ba:6c:c6:95:4b:3b:ff:dc:e5:39:
da:97:7f:2b:63:7f:72:08:93:1b:12:0e:00:c9:0e:
b0:27:b2:84:13:07:b5:26:b8:10:5b:83:3a:01:f5:
5a:8d:0d:dd:15:b9:c0:33:d4:1e:ac:88:b2:98:54:
ca:fb:dd:fe:d4:68:98:6d:e3:ee:25:b8:b7:06:16:
29:76:64:f3:b8:d6:a7:d2:9e:66:40:fe:9d:db:12:
e4:a4:e7:6f:f4:f1:13:38:7f:6b:98:38:3f:48:fc:
ec:01:a7:49:99:8e:18:f0:88:64:76:7f:9b:04:28:
4a:f7:38:9a:1b:16:b4:ec:a9:93:2e:f5:32:44:67:
a8:ad:38:d6:3d:22:85:d9:31:2e:83:a3:c7:ab:10:
95:74:c9:6c:81:74:b9:95:f1:dd:75:49:1b:9e:09:
ec:06:45:af:91:d0:ef:73:16:30:0d:c7:46:3a:5c:
60:99:28:72:e2:7b:fc:a7:98:27:41:67:66:b3:bf:
96:ac:a1:7e:64:3f:e2:63:e3:2c:a6:a9:77:3a:eb:
89:d7:80:27:0f:3e:98:59:e9:b6:0d:b4:50:fa:07:
27:4c:63:9a:82:05:45:60:ba:31:0c:17:aa:03:47:
93:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8A:A0:4C:3B:8C:2A:29:31:AE:9C:4F:0B:CA:08:F3:12:DD:9D:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9d068e-f442-4717-9333-10184bdf41d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9d068e-f442-4717-9333-10184bdf41d8/1/c4qgTDuMKikxrpxPC8oI8xLdncI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.96.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:67:99:ba:90:60:3c:ed:d8:9f:d2:e3:c7:59:a1:4a:55:76:
b6:80:f5:45:38:75:71:99:fe:ca:d7:c7:54:6e:5c:fd:cc:b0:
19:b7:ca:9a:00:ea:76:5b:8d:fa:7f:36:d9:45:9a:8e:4d:79:
62:ac:c7:1d:2f:16:0f:87:d7:b8:39:d2:14:12:26:e6:ef:e2:
3b:81:0d:1b:31:8d:a9:f7:0e:1c:ad:27:4e:d2:1e:7a:cb:6e:
68:ba:73:93:0e:20:fc:c4:f9:a8:5c:eb:8f:44:9c:f7:45:46:
24:4e:4d:a8:bf:bd:91:e3:a2:53:cc:f5:55:99:a1:60:a5:53:
a2:6e:9b:20:cb:1c:b1:1c:cd:73:03:f7:06:8f:27:45:d3:f6:
1e:fc:fb:53:ef:db:b5:6f:03:30:df:8d:6c:55:9e:7f:9a:7b:
33:c9:f0:31:41:9c:c1:d6:b0:31:97:3e:e7:1d:9d:1c:1f:1e:
28:b6:14:37:60:33:ad:57:80:ff:e6:b2:28:cc:d9:e7:e8:05:
0e:9d:9e:11:42:1d:16:e9:72:a0:5b:35:ea:a6:7e:da:e1:c7:
32:88:82:f7:b4:0f:97:0a:8c:e4:e7:60:6d:f3:81:c4:53:4b:
56:6d:ec:55:3a:9e:57:0b:aa:29:5a:77:89:92:fb:3c:88:ab:
01:8e:50:50
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIGAKIr9+PEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDgwNTUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3MzhhYTA0YzNi
OGMyYTI5MzFhZTljNGYwYmNhMDhmMzEyZGQ5ZGMyMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA5maVTqENaI97N+ftcI1s/6AzC7psxpVLO//c5Tnal38r
Y39yCJMbEg4AyQ6wJ7KEEwe1JrgQW4M6AfVajQ3dFbnAM9QerIiymFTK+93+1GiY
bePuJbi3BhYpdmTzuNan0p5mQP6d2xLkpOdv9PETOH9rmDg/SPzsAadJmY4Y8Ihk
dn+bBChK9ziaGxa07KmTLvUyRGeorTjWPSKF2TEug6PHqxCVdMlsgXS5lfHddUkb
ngnsBkWvkdDvcxYwDcdGOlxgmShy4nv8p5gnQWdms7+WrKF+ZD/iY+Mspql3OuuJ
14AnDz6YWem2DbRQ+gcnTGOaggVFYLoxDBeqA0eTGQIDAQABo4ICgzCCAn8wHQYD
VR0OBBYEFHOKoEw7jCopMa6cTwvKCPMS3Z3CMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5LzlkMDY4ZS1mNDQyLTQ3MTct
OTMzMy0xMDE4NGJkZjQxZDgvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvOWQwNjhlLWY0NDItNDcxNy05
MzMzLTEwMTg0YmRmNDFkOC8xL2M0cWdURHVNS2lreHJweFBDOG9JOHhMZG5jSS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL
BAIAATAFAwMAmGAwDQYJKoZIhvcNAQELBQADggEBAHxnmbqQYDzt2J/S48dZoUpV
draA9UU4dXGZ/srXx1RuXP3MsBm3ypoA6nZbjfp/NtlFmo5NeWKsxx0vFg+H17g5
0hQSJubv4juBDRsxjan3DhytJ07SHnrLbmi6c5MOIPzE+ahc649EnPdFRiROTai/
vZHjolPM9VWZoWClU6JumyDLHLEczXMD9waPJ0XT9h78+1Pv27VvAzDfjWxVnn+a
ezPJ8DFBnMHWsDGXPucdnRwfHii2FDdgM61XgP/msijM2efoBQ6dnhFCHRbpcqBb
NeqmftrhxzKIgve0D5cKjOTnYG3zgcRTS1Zt7FU6nlcLqilad4mS+zyIqwGOUFA=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:11 2023 by rpki-client on console.sobornost.net