Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GGwkV7pn346hvFD_5qgXS7umSUc.cer
File: GGwkV7pn346hvFD_5qgXS7umSUc.cer (raw, json)
Hash identifier: 1a6IkxVddmlqY/qiqbnAPE1Re2yQm4iXRXmMEP8fEj4=
Subject key identifier: 18:6C:24:57:BA:67:DF:8E:A1:BC:50:FF:E6:A8:17:4B:BB:A6:49:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018267BD624AC7901F5248FE3BD13C38E573
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/c40c94-e43f-4433-9ed6-8269acf68d57/1/GGwkV7pn346hvFD_5qgXS7umSUc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/c40c94-e43f-4433-9ed6-8269acf68d57/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 04 Aug 2022 07:24:00 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 209034
IP: 185.240.44.0/22
IP: 2a09:cdc0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:67:bd:62:4a:c7:90:1f:52:48:fe:3b:d1:3c:38:e5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 4 07:24:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=186c2457ba67df8ea1bc50ffe6a8174bbba64947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:0b:ee:37:2a:b2:44:9b:99:52:8b:f9:c6:
f5:4f:6c:ac:53:7a:01:93:23:92:bb:8d:aa:86:ea:
0e:db:6a:f7:fd:8f:ad:37:42:e1:a6:6f:46:6d:70:
85:4d:00:14:6d:07:8a:f5:5c:9e:59:c9:2d:21:14:
b9:90:c0:94:b6:1b:b2:a4:1c:ce:3f:8e:c2:e6:66:
14:dd:de:dc:7c:27:1d:67:b3:19:08:8b:d1:96:a2:
6f:fe:b0:f8:43:f9:08:7f:29:88:a1:e3:cb:81:e6:
45:06:7c:73:16:3f:16:7f:40:4e:36:6a:ce:99:9c:
0d:b3:16:fb:ab:f0:8d:bf:97:85:23:82:cc:66:23:
5b:99:b7:e5:6d:05:27:90:3d:9e:8b:f3:bd:5e:02:
ee:37:ad:32:3a:e8:5e:55:a9:9d:33:2c:9c:1c:77:
5b:31:62:a8:38:a2:5a:96:ee:67:57:78:f3:92:24:
ae:9c:9b:39:84:1e:68:e1:04:41:af:cd:83:17:8a:
4c:2e:05:94:8f:bc:0c:1b:f2:83:3a:87:50:86:d3:
6e:d1:ab:7c:61:03:98:76:88:c6:d7:d2:ff:a5:34:
a4:bc:b2:c1:b2:b2:0d:17:7b:a8:f5:69:13:02:b6:
4a:95:67:72:2c:6e:94:e0:e1:49:de:06:81:35:ad:
3e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6C:24:57:BA:67:DF:8E:A1:BC:50:FF:E6:A8:17:4B:BB:A6:49:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c40c94-e43f-4433-9ed6-8269acf68d57/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c40c94-e43f-4433-9ed6-8269acf68d57/1/GGwkV7pn346hvFD_5qgXS7umSUc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.44.0/22
IPv6:
2a09:cdc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209034
Signature Algorithm: sha256WithRSAEncryption
7e:03:66:04:30:4f:77:81:2a:43:b9:d4:13:21:f8:78:d4:e7:
79:79:2f:5a:f5:5a:06:39:f0:aa:98:ed:14:a0:40:fc:b1:37:
48:1a:7b:58:1d:c2:54:a1:b4:d6:57:5e:c4:03:76:0a:b8:eb:
92:38:0b:5f:ba:6f:9b:39:2d:a0:5b:93:a8:11:13:03:e3:56:
a2:b4:8d:44:a5:ba:28:2c:9c:7e:70:43:e0:59:5b:3e:3b:b4:
fc:5c:b7:82:f0:9c:7b:1e:f2:27:56:17:a3:dd:1b:ed:80:b8:
ea:2b:62:f9:3b:5c:d9:c3:b8:f6:9b:c6:94:72:ae:7e:5a:9e:
d4:b3:14:0e:48:80:db:72:9f:f7:e2:50:4c:ba:2d:69:76:36:
c9:61:cf:39:b4:01:a7:52:1e:60:7d:96:04:a9:91:91:91:1a:
ad:54:f3:78:7c:ac:63:6a:99:be:ee:3e:34:23:67:86:12:db:
c5:37:5b:b7:f0:bb:c9:c4:17:7d:0d:ea:be:1f:47:74:bb:11:
8a:96:d1:e0:78:3a:70:de:e4:7c:d5:e0:15:88:1a:86:d6:14:
95:e4:61:dc:60:fd:a9:6b:83:25:bf:91:68:0f:75:7c:b3:cd:
35:1e:e6:a2:fa:1b:6c:4c:cf:08:d3:8f:24:99:2b:1b:10:23:
17:99:26:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:28:52 2024 by rpki-client on console-ams.rpki-client.org