Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0wV1r-WJF0MLO1Zq89nLyc7UpWs.cer
File: 0wV1r-WJF0MLO1Zq89nLyc7UpWs.cer (raw, json)
Hash identifier: 3yL9E8ZDmRpv0xc01cDG9ksYy24aMSCOUICxbHo7wr4=
Subject key identifier: D3:05:75:AF:E5:89:17:43:0B:3B:56:6A:F3:D9:CB:C9:CE:D4:A5:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9EBA26FE28
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/48689e-58c1-4ddd-b6bb-6d5d03f59fd7/1/0wV1r-WJF0MLO1Zq89nLyc7UpWs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/48689e-58c1-4ddd-b6bb-6d5d03f59fd7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:51:36 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 48704
IP: 185.171.220.0/22
IP: 2a0d:9d40::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 681727950376 (0x9eba26fe28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:51:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d30575afe58917430b3b566af3d9cbc9ced4a56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:b5:61:9d:e5:49:8c:45:c8:8c:f5:c3:fe:
e7:bc:08:e3:7f:b8:76:4b:21:ae:8b:ea:c8:c1:c8:
7b:f5:9f:1c:91:1b:a4:f5:c3:b8:de:b4:00:5b:b8:
2f:3c:11:10:cb:02:1f:69:d5:88:3b:57:6e:b6:02:
54:4a:ca:aa:94:89:a3:34:41:6e:b0:6a:04:89:26:
55:d4:f6:7f:36:4c:fe:28:3f:87:48:a8:41:a8:ac:
0f:b1:fa:0a:2c:1d:f6:f0:ba:21:c1:a0:8a:b4:06:
73:74:90:42:43:1d:ac:42:b0:2e:f1:7b:a8:37:2f:
b3:80:79:7a:30:c5:fa:76:52:39:04:4a:70:dc:3a:
fc:d0:43:bb:1e:71:e8:d5:1a:09:d7:d7:a7:76:1a:
af:2e:60:f0:5a:7e:c6:04:d4:1b:bd:95:33:08:72:
12:78:74:75:4d:03:75:43:40:d1:37:c8:72:ac:00:
16:1c:c1:e2:30:fd:0a:d4:ef:29:2b:df:49:c8:24:
c9:13:05:4a:7a:51:6c:51:cc:ca:79:6c:7a:74:ef:
3e:f5:aa:0d:d8:f1:c6:55:c4:57:c3:a6:25:26:82:
41:d3:46:10:44:b5:3a:14:e2:e0:50:af:b3:f9:7d:
94:f6:6e:f1:7a:19:37:f9:ec:36:41:6a:d0:c2:b2:
87:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:05:75:AF:E5:89:17:43:0B:3B:56:6A:F3:D9:CB:C9:CE:D4:A5:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/48689e-58c1-4ddd-b6bb-6d5d03f59fd7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/48689e-58c1-4ddd-b6bb-6d5d03f59fd7/1/0wV1r-WJF0MLO1Zq89nLyc7UpWs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.220.0/22
IPv6:
2a0d:9d40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48704
Signature Algorithm: sha256WithRSAEncryption
46:69:f2:56:11:20:63:6a:e7:4d:02:49:39:de:bf:51:9e:8d:
2e:13:52:23:30:11:74:9f:27:6b:04:61:70:3e:38:b7:84:c3:
9a:b5:dc:db:28:cc:b6:bf:c3:af:b6:89:47:5a:61:ff:4e:c2:
fd:6f:64:18:59:ca:c4:68:1b:7f:9a:4d:8f:a1:76:21:1e:78:
08:c8:30:16:c6:b5:b7:c3:77:a0:b8:c3:35:a1:dc:ee:6e:d8:
27:ea:87:78:c7:86:93:10:ce:c6:67:a6:16:3a:74:af:74:b9:
9e:3d:be:b8:57:44:86:66:0f:a0:7e:b5:a8:50:94:12:6a:00:
1a:0e:35:47:a7:b4:a6:3f:e1:b8:5e:a7:4c:e5:8e:fc:a6:85:
20:92:79:50:d7:1b:e1:12:1a:a8:09:bd:8c:ea:68:79:b5:ef:
6e:9a:c1:cc:69:88:ba:39:54:e6:c8:75:50:a1:e8:fa:47:4b:
db:25:d6:03:e8:b4:86:9f:a7:74:23:02:54:ba:81:49:03:4d:
ec:44:99:17:5a:02:67:f4:56:e6:01:fa:d7:3b:a6:3f:26:5d:
18:bb:ab:dd:0e:6b:01:3a:2a:6f:33:c7:da:2d:a4:8a:d3:9a:
1c:20:de:88:bf:80:af:2d:26:1f:01:f5:41:62:67:e2:1a:93:
c3:31:0c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:08 2025 by rpki-client