Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o4NevBH5_8nS_NXNV7LHrsYKd24.cer
File: o4NevBH5_8nS_NXNV7LHrsYKd24.cer (raw, json)
Hash identifier: ryjGnuuj8z/gjHl7j2W9COMk/NVBocE/c+9SQ5jbrr0=
Subject key identifier: A3:83:5E:BC:11:F9:FF:C9:D2:FC:D5:CD:57:B2:C7:AE:C6:0A:77:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A5621DA78F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/a08ea3-e801-4ada-af8e-74978cb14f08/1/o4NevBH5_8nS_NXNV7LHrsYKd24.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/a08ea3-e801-4ada-af8e-74978cb14f08/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:01:20 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.228.124.0/22
IP: 2a09:eac0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 710315714447 (0xa5621da78f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:01:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3835ebc11f9ffc9d2fcd5cd57b2c7aec60a776e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:db:09:6a:b6:08:e0:2c:2f:89:65:02:09:
b1:02:29:4e:7d:64:5b:65:b4:22:4a:6e:4b:67:d5:
be:ac:e0:eb:24:28:ce:e5:6b:97:49:bd:09:6d:35:
d9:95:cb:b3:ca:22:47:a1:15:84:27:19:8b:c6:4a:
c7:c8:1e:fc:e9:17:87:48:3d:a6:5d:b0:ea:57:35:
dc:b1:3e:d0:70:c6:77:25:22:7d:3c:cc:13:30:77:
e1:1e:8e:bc:66:aa:6c:fe:76:f8:a7:cc:16:98:e1:
d6:13:ee:8c:45:7c:91:82:17:65:95:4c:d1:36:c1:
26:be:e5:5e:a3:2c:90:15:1b:17:90:4f:a5:77:5b:
93:13:8c:ef:d1:97:a2:f4:b1:58:97:5c:33:72:dc:
63:9d:ad:88:49:cc:46:01:11:9e:4a:63:c7:a0:f5:
6a:5a:0d:ea:e1:ce:49:17:94:50:2f:24:8e:0a:48:
d2:07:44:05:9e:e3:a5:1b:36:af:f8:f0:6d:53:d8:
56:d2:61:db:da:ae:ae:07:7d:88:74:de:50:e9:83:
99:4d:7a:53:b9:29:21:49:a6:d6:5f:52:8a:2b:68:
9f:65:28:34:2c:12:16:f2:c0:85:3f:57:3f:5e:3f:
3f:5f:1c:96:45:c1:cb:f8:e7:24:24:7b:e7:bc:aa:
c5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:83:5E:BC:11:F9:FF:C9:D2:FC:D5:CD:57:B2:C7:AE:C6:0A:77:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a08ea3-e801-4ada-af8e-74978cb14f08/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a08ea3-e801-4ada-af8e-74978cb14f08/1/o4NevBH5_8nS_NXNV7LHrsYKd24.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.124.0/22
IPv6:
2a09:eac0::/29
Signature Algorithm: sha256WithRSAEncryption
54:1f:5c:e0:34:7c:74:72:ed:15:5f:c6:17:7a:a6:c8:33:04:
cf:d0:db:a7:6d:cf:4c:ad:9e:7f:b1:3f:70:ab:61:20:fb:5e:
1e:55:24:81:b6:53:a1:a5:6c:06:e9:23:69:26:1c:8c:b0:23:
cc:a0:70:e3:70:4c:a7:8b:f2:da:81:d8:17:bf:03:7d:3d:2a:
12:af:76:15:28:40:db:f1:8f:4c:af:49:70:f8:92:fb:7f:99:
f4:06:76:e0:14:11:60:0e:ef:fd:d5:ed:4e:82:58:16:b2:d7:
fb:54:fd:c7:10:9d:80:dd:20:0a:76:ea:cb:f7:00:d6:40:3b:
90:5d:80:96:db:42:70:e3:dd:28:7e:5e:2d:70:67:8b:89:ea:
1b:15:e6:eb:c2:20:e3:3c:bd:da:51:63:d6:f3:62:07:f5:3a:
20:53:94:30:58:22:62:06:69:83:8e:ad:90:21:a3:55:fc:f6:
e7:ba:e5:ff:11:52:f1:a0:11:b0:99:68:b5:23:23:05:1d:77:
00:bf:30:40:d1:18:38:b8:7d:fe:70:22:ed:e9:0b:2c:51:10:
9f:ff:a1:5f:6a:58:be:78:80:0d:b0:db:3e:70:65:2e:c4:75:
b3:5b:b1:f2:90:32:78:21:e8:3a:0a:34:83:45:5e:c3:91:b4:
c0:8c:da:9d
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIGAKViHaePMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTEwMTIwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhMzgzNWViYzEx
ZjlmZmM5ZDJmY2Q1Y2Q1N2IyYzdhZWM2MGE3NzZlMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAuB/bCWq2COAsL4llAgmxAilOfWRbZbQiSm5LZ9W+rODr
JCjO5WuXSb0JbTXZlcuzyiJHoRWEJxmLxkrHyB786ReHSD2mXbDqVzXcsT7QcMZ3
JSJ9PMwTMHfhHo68Zqps/nb4p8wWmOHWE+6MRXyRghdllUzRNsEmvuVeoyyQFRsX
kE+ld1uTE4zv0Zei9LFYl1wzctxjna2IScxGARGeSmPHoPVqWg3q4c5JF5RQLySO
CkjSB0QFnuOlGzav+PBtU9hW0mHb2q6uB32IdN5Q6YOZTXpTuSkhSabWX1KKK2if
ZSg0LBIW8sCFP1c/Xj8/XxyWRcHL+OckJHvnvKrFJwIDAQABo4ICkzCCAo8wHQYD
VR0OBBYEFKODXrwR+f/J0vzVzVeyx67GCnduMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M5L2EwOGVhMy1lODAxLTRhZGEt
YWY4ZS03NDk3OGNiMTRmMDgvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvYTA4ZWEzLWU4MDEtNGFkYS1h
ZjhlLTc0OTc4Y2IxNGYwOC8xL280TmV2Qkg1XzhuU19OWE5WN0xIcnNZS2QyNC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCueR8MA0EAgACMAcDBQMqCerAMA0GCSqGSIb3DQEBCwUAA4IBAQBU
H1zgNHx0cu0VX8YXeqbIMwTP0Nunbc9MrZ5/sT9wq2Eg+14eVSSBtlOhpWwG6SNp
JhyMsCPMoHDjcEyni/LagdgXvwN9PSoSr3YVKEDb8Y9Mr0lw+JL7f5n0BnbgFBFg
Du/91e1OglgWstf7VP3HEJ2A3SAKdurL9wDWQDuQXYCW20Jw490ofl4tcGeLieob
FebrwiDjPL3aUWPW82IH9TogU5QwWCJiBmmDjq2QIaNV/PbnuuX/EVLxoBGwmWi1
IyMFHXcAvzBA0Rg4uH3+cCLt6QssURCf/6Ffali+eIANsNs+cGUuxHWzW7HykDJ4
Ieg6CjSDRV7DkbTAjNqd
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:10 2023 by rpki-client on console.sobornost.net