Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eU2YSnZm6gJMpl9AgoAdAvEfmYA.cer
File: eU2YSnZm6gJMpl9AgoAdAvEfmYA.cer (raw, json)
Hash identifier: AgtQ5aeYCy7w6jZFpTC/r0jvgvkIX171Tv2GB9DYcO8=
Subject key identifier: 79:4D:98:4A:76:66:EA:02:4C:A6:5F:40:82:80:1D:02:F1:1F:99:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9E234E0311
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/3d1b6f-3465-4df6-ac9f-bb1749b9ef7d/1/eU2YSnZm6gJMpl9AgoAdAvEfmYA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/3d1b6f-3465-4df6-ac9f-bb1749b9ef7d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 04:59:13 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.69.88.0/22
IP: 2a04:a8c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 679197147921 (0x9e234e0311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:59:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=794d984a7666ea024ca65f4082801d02f11f9980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6b:b5:64:ab:44:5d:0f:72:6b:66:a0:e8:1b:
c3:bb:b8:03:6d:0e:60:da:9b:6b:36:c8:ad:80:38:
c5:49:cc:6d:77:7f:bc:e4:f2:c3:20:81:59:5e:8e:
b1:65:2c:5e:a4:21:93:90:89:70:e8:77:68:ac:83:
d5:4b:52:32:bb:9a:17:fe:98:58:03:17:37:dc:a8:
60:f0:9c:57:2e:db:2d:1c:90:0a:7c:3d:49:1f:8c:
9f:91:b1:57:4c:81:e8:1a:06:fe:2c:b2:f5:77:43:
8d:cd:e5:a4:99:fe:de:2f:c9:4a:20:58:75:0d:8d:
1f:ed:7f:27:a9:e0:d4:5e:7d:d6:9b:e0:23:71:2d:
44:16:7a:f3:f7:d2:99:93:5b:02:01:49:2b:da:74:
d8:60:df:08:f7:52:50:d2:98:db:9b:ad:65:42:38:
13:99:74:cd:22:5f:45:f4:f0:19:ad:03:3a:ba:cc:
63:fe:58:ac:24:ff:f1:27:2b:e3:f2:85:78:38:99:
48:7a:de:92:e0:d8:26:84:58:21:1c:ff:47:7d:29:
82:f4:33:57:c6:3f:de:ac:f8:94:3a:88:81:a2:30:
c5:49:f9:66:b6:70:bf:32:0e:a5:0a:ff:e7:a7:56:
df:69:3d:8a:44:71:b6:28:cc:c1:52:8a:23:c6:10:
e1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4D:98:4A:76:66:EA:02:4C:A6:5F:40:82:80:1D:02:F1:1F:99:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3d1b6f-3465-4df6-ac9f-bb1749b9ef7d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3d1b6f-3465-4df6-ac9f-bb1749b9ef7d/1/eU2YSnZm6gJMpl9AgoAdAvEfmYA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.88.0/22
IPv6:
2a04:a8c0::/29
Signature Algorithm: sha256WithRSAEncryption
59:44:5d:de:9b:0d:96:01:45:3e:35:89:e0:be:30:94:9b:a0:
56:5f:91:10:01:b9:5f:8f:56:78:2d:ee:51:e3:ad:81:37:f1:
a2:4d:6a:30:96:12:4f:06:52:26:ec:86:e2:4a:84:7b:74:4f:
7b:78:67:7b:bd:4f:ac:2a:9a:7c:e5:b4:5f:c4:4d:39:94:88:
15:60:c5:6d:64:dd:a7:59:ae:14:e1:b7:48:e4:c4:cc:9a:ee:
c6:f6:21:e5:33:3b:76:c8:e2:76:be:ea:90:40:e4:29:84:5b:
b3:01:bc:f6:30:91:e8:2e:88:dc:8b:b4:0b:2e:0d:e4:6e:e7:
c9:13:66:7c:d4:7e:ba:39:fc:40:e2:df:e0:a0:af:aa:d3:33:
b8:13:5d:aa:e2:6a:2a:2b:11:58:bf:14:e9:9d:d1:ac:3b:e7:
d7:12:ad:ef:c7:1f:42:96:65:ff:a9:11:eb:b6:37:8a:32:46:
b0:2c:f9:37:32:96:87:5e:62:09:47:d2:fe:e0:02:bc:52:5a:
ad:56:d0:0c:f0:86:92:db:8d:a4:14:16:0f:2d:47:34:64:ac:
85:23:f8:43:fc:8d:33:37:ae:6a:3a:16:a0:7e:ed:a7:28:f0:
0f:31:eb:7a:28:f5:80:47:be:e7:ea:be:ef:7c:bc:07:e3:7d:
de:96:ab:36
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIGAJ4jTgMRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDQ1OTEzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3OTRkOTg0YTc2
NjZlYTAyNGNhNjVmNDA4MjgwMWQwMmYxMWY5OTgwMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAm2u1ZKtEXQ9ya2ag6BvDu7gDbQ5g2ptrNsitgDjFScxt
d3+85PLDIIFZXo6xZSxepCGTkIlw6HdorIPVS1Iyu5oX/phYAxc33Khg8JxXLtst
HJAKfD1JH4yfkbFXTIHoGgb+LLL1d0ONzeWkmf7eL8lKIFh1DY0f7X8nqeDUXn3W
m+AjcS1EFnrz99KZk1sCAUkr2nTYYN8I91JQ0pjbm61lQjgTmXTNIl9F9PAZrQM6
usxj/lisJP/xJyvj8oV4OJlIet6S4NgmhFghHP9HfSmC9DNXxj/erPiUOoiBojDF
SflmtnC/Mg6lCv/np1bfaT2KRHG2KMzBUoojxhDhgwIDAQABo4ICkzCCAo8wHQYD
VR0OBBYEFHlNmEp2ZuoCTKZfQIKAHQLxH5mAMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q2LzNkMWI2Zi0zNDY1LTRkZjYt
YWM5Zi1iYjE3NDliOWVmN2QvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvM2QxYjZmLTM0NjUtNGRmNi1h
YzlmLWJiMTc0OWI5ZWY3ZC8xL2VVMllTblptNmdKTXBsOUFnb0FkQXZFZm1ZQS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCuUVYMA0EAgACMAcDBQMqBKjAMA0GCSqGSIb3DQEBCwUAA4IBAQBZ
RF3emw2WAUU+NYngvjCUm6BWX5EQAblfj1Z4Le5R462BN/GiTWowlhJPBlIm7Ibi
SoR7dE97eGd7vU+sKpp85bRfxE05lIgVYMVtZN2nWa4U4bdI5MTMmu7G9iHlMzt2
yOJ2vuqQQOQphFuzAbz2MJHoLojci7QLLg3kbufJE2Z81H66OfxA4t/goK+q0zO4
E12q4moqKxFYvxTpndGsO+fXEq3vxx9ClmX/qRHrtjeKMkawLPk3MpaHXmIJR9L+
4AK8UlqtVtAM8IaS242kFBYPLUc0ZKyFI/hD/I0zN65qOhagfu2nKPAPMet6KPWA
R77n6r7vfLwH433elqs2
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:40 2023 by rpki-client on console.sobornost.net