Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9x-b3axMNAeNjQ-rnhTRdqQW-WM.cer
File: 9x-b3axMNAeNjQ-rnhTRdqQW-WM.cer (raw, json)
Hash identifier: 3A/yGC/nS8wAzRKxDmH/LKdsVLac7D3/UdhomjVRITc=
Subject key identifier: F7:1F:9B:DD:AC:4C:34:07:8D:8D:0F:AB:9E:14:D1:76:A4:16:F9:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A9CDB39A9A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/514d67-ba6c-415e-bebc-0f1f3cb08b75/1/9x-b3axMNAeNjQ-rnhTRdqQW-WM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/514d67-ba6c-415e-bebc-0f1f3cb08b75/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:01:33 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 35573
AS: 41937
AS: 44252
AS: 44323
AS: 51052
AS: 51451
AS: 197324
AS: 201892
AS: 203826
IP: 5.134.104.0/21
IP: 5.154.225.0/24
IP: 31.14.33.0/24
IP: 37.153.174.0/23
IP: 46.17.120.0/21
IP: 46.235.96.0/21
IP: 62.101.128.0/20
IP: 62.240.24.0/21
IP: 87.250.32.0/19
IP: 89.34.2.0/24
IP: 89.39.144.0/23
IP: 89.42.12.0/24
IP: 89.46.126.0/23
IP: 89.47.40.0/23
IP: 91.185.96.0/19
IP: 91.204.52.0/22
IP: 92.60.224.0/20
IP: 92.244.128.0/19
IP: 93.113.250.0/23
IP: 94.228.224.0/20
IP: 109.72.48.0/20
IP: 109.94.228.0 -- 109.94.239.255
IP: 109.122.64.0/18
IP: 109.198.0.0/19
IP: 176.67.192.0/19
IP: 178.17.16.0/20
IP: 178.79.0.0/18
IP: 178.237.208.0/20
IP: 178.250.136.0/21
IP: 185.10.140.0/22
IP: 185.26.172.0/22
IP: 185.27.128.0/22
IP: 185.34.92.0/22
IP: 185.36.255.0/24
IP: 185.71.88.0/22
IP: 185.103.136.0/22
IP: 185.112.20.0/22
IP: 185.157.104.0/22
IP: 185.179.136.0/22
IP: 188.215.30.0/24
IP: 188.240.88.0/24
IP: 188.240.200.0/23
IP: 213.196.96.0/20
IP: 2a00:8720::/32
IP: 2a00:cf00::/32
IP: 2a01:b800::/32
IP: 2a02:61a0::/32
IP: 2a03:fc40::/32
IP: 2a04:1dc0::/29
IP: 2a06:5b00::/29
IP: 2a06:63c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 729300572826 (0xa9cdb39a9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:01:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f71f9bddac4c34078d8d0fab9e14d176a416f963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:92:6e:82:a9:1d:41:68:c6:ad:6f:d0:2d:6e:
8f:44:20:1d:8c:5b:7e:56:fc:8d:3b:c6:5f:41:34:
25:40:d9:a2:9f:5d:c4:61:0b:50:48:e1:87:c6:0a:
3f:24:e8:45:89:27:2b:45:85:3c:d5:30:28:5c:1d:
23:94:7b:f2:95:ee:c5:21:dc:c5:e1:6e:51:d2:90:
cf:fb:1f:f1:cb:3e:c9:2f:ac:76:d6:c1:ab:9a:f6:
23:5f:ce:6d:b2:92:ec:28:24:b0:29:2e:15:11:16:
21:93:a3:2c:da:01:3b:43:c8:9c:1f:4b:bd:25:9c:
0e:ad:19:f3:4a:b1:7f:0d:1c:03:98:af:f1:1b:1a:
a8:39:78:3b:47:bb:00:13:cf:dd:fc:64:83:1b:35:
61:73:8a:c4:61:e3:bc:3b:8e:6b:c6:5e:2f:6a:25:
77:28:fd:c7:3b:5a:e7:db:0e:64:1e:60:d3:66:07:
87:3e:4a:98:ee:53:ae:67:f2:d0:6a:4b:36:4c:ee:
f1:a5:2b:e7:4c:5b:db:4c:b5:07:de:6c:a6:4e:34:
9f:b4:44:15:94:e3:1d:02:05:37:6f:d2:29:b6:b8:
66:76:b0:d1:da:d1:c7:ba:5c:3a:10:2e:4f:a9:3f:
66:d3:ec:5f:aa:db:ee:4b:b7:94:ab:b8:6a:74:87:
94:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1F:9B:DD:AC:4C:34:07:8D:8D:0F:AB:9E:14:D1:76:A4:16:F9:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/514d67-ba6c-415e-bebc-0f1f3cb08b75/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/514d67-ba6c-415e-bebc-0f1f3cb08b75/1/9x-b3axMNAeNjQ-rnhTRdqQW-WM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.104.0/21
5.154.225.0/24
31.14.33.0/24
37.153.174.0/23
46.17.120.0/21
46.235.96.0/21
62.101.128.0/20
62.240.24.0/21
87.250.32.0/19
89.34.2.0/24
89.39.144.0/23
89.42.12.0/24
89.46.126.0/23
89.47.40.0/23
91.185.96.0/19
91.204.52.0/22
92.60.224.0/20
92.244.128.0/19
93.113.250.0/23
94.228.224.0/20
109.72.48.0/20
109.94.228.0-109.94.239.255
109.122.64.0/18
109.198.0.0/19
176.67.192.0/19
178.17.16.0/20
178.79.0.0/18
178.237.208.0/20
178.250.136.0/21
185.10.140.0/22
185.26.172.0/22
185.27.128.0/22
185.34.92.0/22
185.36.255.0/24
185.71.88.0/22
185.103.136.0/22
185.112.20.0/22
185.157.104.0/22
185.179.136.0/22
188.215.30.0/24
188.240.88.0/24
188.240.200.0/23
213.196.96.0/20
IPv6:
2a00:8720::/32
2a00:cf00::/32
2a01:b800::/32
2a02:61a0::/32
2a03:fc40::/32
2a04:1dc0::/29
2a06:5b00::/29
2a06:63c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35573
41937
44252
44323
51052
51451
197324
201892
203826
Signature Algorithm: sha256WithRSAEncryption
42:0b:af:57:d1:4a:58:5d:e2:c5:1c:48:45:06:1f:12:4a:59:
4b:8e:63:72:44:79:98:ca:aa:bc:fb:f3:df:50:12:39:bf:51:
cb:09:51:72:c0:8a:e8:94:2a:f5:9c:97:52:d2:5f:35:e1:24:
08:84:1f:e4:13:7c:55:e1:21:e1:8a:85:69:ba:95:d9:f6:9a:
8c:bb:29:76:d7:33:7f:a9:b2:67:fc:32:e4:5b:80:ce:8a:cc:
21:f5:03:a4:0a:36:4a:7f:7f:e8:36:02:1f:01:e8:0a:e4:0c:
4f:3d:6a:0c:f5:59:b3:77:79:75:93:e4:e0:e9:08:51:7b:86:
9f:49:2e:ff:48:41:40:60:14:36:a1:d9:6c:39:ae:8a:18:42:
59:f9:d7:cf:eb:43:8f:a9:3b:0b:44:8b:ae:bc:39:fc:91:09:
5d:36:e6:0c:fb:d5:34:d9:d7:6f:29:5a:50:15:ef:e8:6c:06:
69:0c:1e:15:92:58:6d:34:87:45:99:7c:5b:e6:b8:c6:4e:c4:
45:0d:9c:93:8e:7b:7e:4c:e2:a1:d6:ce:f2:db:9a:49:ad:d0:
09:7b:41:82:19:c3:a9:77:e6:97:85:5e:54:b5:43:77:cb:fd:
17:bf:db:ff:93:70:68:db:29:bc:5f:b8:cf:3f:32:5b:59:da:
5e:83:f1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:10 2023 by rpki-client on console-fra.rpki-client.org