Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gAeT4XZQAK-vDsJ89NI3PZWThlc.cer
File: gAeT4XZQAK-vDsJ89NI3PZWThlc.cer (raw, json)
Hash identifier: w11gtR24aEAvHscHtQDPROAU9Vbgle3uzVffIvQ0bcs=
Subject key identifier: 80:07:93:E1:76:50:00:AF:AF:0E:C2:7C:F4:D2:37:3D:95:93:86:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A52EAFD984
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/fe642f-2183-4e1b-8c0e-ef3e5e588d80/1/gAeT4XZQAK-vDsJ89NI3PZWThlc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/fe642f-2183-4e1b-8c0e-ef3e5e588d80/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:58:58 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 194.169.208.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 709452880260 (0xa52eafd984)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:58:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=800793e1765000afaf0ec27cf4d2373d95938657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5a:5c:17:fd:86:12:09:3e:89:5d:30:13:d7:
46:cd:5a:f6:af:42:13:8d:b7:8a:4d:40:bc:c4:a0:
d4:bb:20:a4:06:39:76:54:df:9b:bf:2b:01:c4:2f:
34:f6:38:6c:40:77:24:44:9a:4f:93:c2:3c:de:ba:
a5:cb:be:e3:15:68:d9:0b:a3:9a:73:2a:1d:cb:1c:
45:b6:96:60:54:b9:0a:9f:e1:72:22:9f:b0:34:3c:
88:2b:a0:1c:57:69:c2:56:f1:9f:09:e2:dd:c2:c9:
93:8d:8c:22:3e:59:cb:3a:b8:ce:de:f9:e9:a5:26:
a9:e1:d6:95:3d:82:2f:42:34:be:06:e8:8e:70:65:
8a:49:f8:ee:26:84:b3:89:09:48:32:92:a5:97:6d:
f2:18:d9:a4:0e:ae:e3:7e:19:7e:54:ed:f7:01:9f:
99:73:99:7f:00:7d:67:3a:a2:79:15:7b:d3:95:0e:
87:42:99:6c:54:b2:f0:f9:5d:27:bd:cc:af:8b:2e:
8a:c1:b3:76:35:9a:e8:9b:38:63:f3:8d:59:44:4c:
52:48:66:11:2c:3f:a4:a9:a1:68:33:a4:84:70:e5:
fb:d3:bb:91:6d:c3:c2:d6:fb:f5:a0:67:44:c7:27:
09:ec:c3:23:84:ad:ad:b1:43:e5:2b:47:8e:18:ae:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:07:93:E1:76:50:00:AF:AF:0E:C2:7C:F4:D2:37:3D:95:93:86:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fe642f-2183-4e1b-8c0e-ef3e5e588d80/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fe642f-2183-4e1b-8c0e-ef3e5e588d80/1/gAeT4XZQAK-vDsJ89NI3PZWThlc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.208.0/24
Signature Algorithm: sha256WithRSAEncryption
27:35:b1:62:7f:d1:fd:57:ea:ca:65:2a:87:6d:2c:50:18:1b:
40:5d:b6:4e:20:2d:af:2a:59:e4:d4:d8:92:6e:e0:94:0a:c2:
a4:71:d7:29:ed:c8:56:62:0f:1b:30:74:e4:d3:e4:ce:55:d7:
4a:a2:21:67:0a:0c:63:44:d4:d1:07:48:bb:31:bd:69:2a:d8:
53:3c:8d:38:5d:2a:4a:58:de:6c:e5:21:e5:4b:93:9c:7f:d6:
70:0a:0e:b2:77:0a:96:dc:60:db:4a:27:ba:e6:75:c8:9b:6d:
df:cd:10:d6:2a:9f:6e:6b:8d:d7:71:f7:23:fc:0e:bd:ee:37:
27:e9:fb:6f:9b:f6:91:1a:db:6d:12:ce:16:de:b7:35:d2:b6:
44:22:da:4c:78:bb:71:09:38:ac:29:90:45:10:9d:70:a6:a0:
e9:83:13:da:e3:a5:23:6a:ae:3e:97:db:45:63:aa:77:1a:67:
77:d2:df:78:40:0f:ca:03:a9:c0:d8:06:1a:ba:23:89:a4:2a:
6f:27:85:7a:12:fd:d0:ba:a6:ff:30:ec:4d:40:75:88:b2:69:
20:05:1e:75:21:71:7b:60:7e:e9:c9:1d:b7:3c:6c:16:85:43:
a6:10:fa:60:cc:0a:2a:e9:c5:75:2e:4e:c0:38:28:aa:db:66:
5e:68:9e:0f
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAKUur9mEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTA1ODU4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4MDA3OTNlMTc2
NTAwMGFmYWYwZWMyN2NmNGQyMzczZDk1OTM4NjU3MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAp1pcF/2GEgk+iV0wE9dGzVr2r0ITjbeKTUC8xKDUuyCk
Bjl2VN+bvysBxC809jhsQHckRJpPk8I83rqly77jFWjZC6OacyodyxxFtpZgVLkK
n+FyIp+wNDyIK6AcV2nCVvGfCeLdwsmTjYwiPlnLOrjO3vnppSap4daVPYIvQjS+
BuiOcGWKSfjuJoSziQlIMpKll23yGNmkDq7jfhl+VO33AZ+Zc5l/AH1nOqJ5FXvT
lQ6HQplsVLLw+V0nvcyviy6KwbN2NZromzhj841ZRExSSGYRLD+kqaFoM6SEcOX7
07uRbcPC1vv1oGdExycJ7MMjhK2tsUPlK0eOGK4Y4wIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFIAHk+F2UACvrw7CfPTSNz2Vk4ZXMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlL2ZlNjQyZi0yMTgzLTRlMWIt
OGMwZS1lZjNlNWU1ODhkODAvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvZmU2NDJmLTIxODMtNGUxYi04
YzBlLWVmM2U1ZTU4OGQ4MC8xL2dBZVQ0WFpRQUstdkRzSjg5TkkzUFpXVGhsYy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAwqnQMA0GCSqGSIb3DQEBCwUAA4IBAQAnNbFif9H9V+rKZSqHbSxQ
GBtAXbZOIC2vKlnk1NiSbuCUCsKkcdcp7chWYg8bMHTk0+TOVddKoiFnCgxjRNTR
B0i7Mb1pKthTPI04XSpKWN5s5SHlS5Ocf9ZwCg6ydwqW3GDbSie65nXIm23fzRDW
Kp9ua43Xcfcj/A697jcn6ftvm/aRGtttEs4W3rc10rZEItpMeLtxCTisKZBFEJ1w
pqDpgxPa46Ujaq4+l9tFY6p3Gmd30t94QA/KA6nA2AYauiOJpCpvJ4V6Ev3Quqb/
MOxNQHWIsmkgBR51IXF7YH7pyR23PGwWhUOmEPpgzAoq6cV1Lk7AOCiq22ZeaJ4P
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:10 2023 by rpki-client on console.sobornost.net