Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GW-1oAGSPvTRfnti_HvdqIgOHSk.cer
File: GW-1oAGSPvTRfnti_HvdqIgOHSk.cer (raw, json)
Hash identifier: 5ieHDf8oILQpwfu6luYb3jXL+bRvey0BnR+yx1ADSik=
Subject key identifier: 19:6F:B5:A0:01:92:3E:F4:D1:7E:7B:62:FC:7B:DD:A8:88:0E:1D:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A075B52BA5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/89c57c-bf16-4a23-8c8c-7ff05bc09645/1/GW-1oAGSPvTRfnti_HvdqIgOHSk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/89c57c-bf16-4a23-8c8c-7ff05bc09645/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 06:58:04 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 60397
IP: 2.59.112.0/22
IP: 45.149.116.0/22
IP: 79.170.148.0/22
IP: 151.237.56.0/22
IP: 151.237.64.0/23
IP: 151.237.130.0 -- 151.237.135.255
IP: 185.158.8.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 689169574821 (0xa075b52ba5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:58:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=196fb5a001923ef4d17e7b62fc7bdda8880e1d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f2:00:0c:d9:46:5e:87:4d:0d:7d:f5:28:c7:
5d:3f:da:fe:c5:35:10:de:62:17:55:ab:f2:20:24:
72:80:51:2d:69:33:37:aa:f8:e1:59:f4:48:23:bc:
df:36:5f:95:fd:5b:94:1d:7f:d8:7d:65:6f:50:4f:
84:2e:b6:f5:b7:70:8c:72:48:1d:16:00:92:34:93:
dc:f1:f9:19:4e:c0:cb:2f:15:e7:4e:39:3e:4e:3b:
4a:9d:7a:0c:3c:86:13:59:42:cd:6d:d8:12:7e:a1:
1f:3f:8d:35:88:84:85:a1:d4:e3:25:f3:f2:2a:30:
35:37:9e:2b:e2:7d:03:86:16:5e:16:68:23:f7:b8:
be:6f:4d:16:24:2e:b4:3c:33:48:3d:48:ab:af:9f:
cd:9f:1c:ed:96:49:44:61:2b:d4:09:4e:34:af:9b:
4e:9e:f0:10:bd:62:fa:80:0f:82:87:c3:9f:06:79:
1e:da:0d:e7:67:30:ce:4e:18:dd:0f:cb:62:9f:cc:
b8:37:54:42:50:0b:c1:c0:47:5d:7e:e2:50:95:e6:
26:69:50:77:0d:36:6f:f7:3b:43:d4:bd:64:aa:56:
41:e6:57:8f:a4:8d:63:6c:1e:08:81:03:2c:5f:09:
80:f2:e2:c0:1e:25:ad:b3:1b:13:88:cf:95:ff:6a:
77:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6F:B5:A0:01:92:3E:F4:D1:7E:7B:62:FC:7B:DD:A8:88:0E:1D:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/89c57c-bf16-4a23-8c8c-7ff05bc09645/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/89c57c-bf16-4a23-8c8c-7ff05bc09645/1/GW-1oAGSPvTRfnti_HvdqIgOHSk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.112.0/22
45.149.116.0/22
79.170.148.0/22
151.237.56.0/22
151.237.64.0/23
151.237.130.0-151.237.135.255
185.158.8.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60397
Signature Algorithm: sha256WithRSAEncryption
22:01:37:5d:92:55:b4:19:d9:9b:8a:e9:7d:a8:47:b9:a1:72:
ff:e0:10:1a:14:b3:5c:87:80:53:25:c8:fc:2b:42:c0:d2:c3:
03:d1:09:22:0b:fc:3f:29:fd:7b:81:95:20:5a:42:22:57:ed:
15:12:01:58:ab:72:8d:00:fc:1f:d7:c7:41:5a:de:f5:12:f1:
cb:c0:ca:ff:a3:c8:e7:6c:c7:86:6f:02:84:47:42:85:46:9f:
be:71:50:d5:ac:8b:18:d7:06:37:34:0f:00:2a:e4:10:67:4d:
36:f8:4a:31:24:56:bf:b9:29:b4:a5:07:1c:26:7b:49:01:9c:
a6:c2:dd:32:14:d1:05:82:d9:fa:44:e9:90:91:2d:d0:cf:ef:
6b:f0:5f:01:5b:5b:80:e2:d3:59:e0:83:63:5a:8d:e0:f5:56:
b1:75:1f:4b:6e:a8:00:79:19:98:1d:70:f3:7a:56:ee:22:55:
47:62:dc:ef:74:93:12:d6:34:62:6d:c3:fa:ee:a1:6d:26:7f:
68:55:d6:be:9c:ef:96:65:b9:d2:4a:1c:63:5d:32:e7:66:bd:
12:34:85:ea:ce:1c:aa:97:07:9d:07:2d:56:26:71:eb:f3:a1:
c6:ec:e8:65:e2:4d:e6:59:4d:fa:b2:32:fb:88:cc:ff:85:bf:
b5:c5:ae:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-fra.rpki-client.org