Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JMZCcrCzrrgSVJ3ufsWKPq9vpXY.cer
File: JMZCcrCzrrgSVJ3ufsWKPq9vpXY.cer (raw, json)
Hash identifier: z4bdWIFtmt+BSqPYjTsxThkd+JvVxgHiHIqIL/b+IhQ=
Subject key identifier: 24:C6:42:72:B0:B3:AE:B8:12:54:9D:EE:7E:C5:8A:3E:AF:6F:A5:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B197D23FDF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/e0d0b2-9b9a-47f8-84ec-1460c78ea75d/1/JMZCcrCzrrgSVJ3ufsWKPq9vpXY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/e0d0b2-9b9a-47f8-84ec-1460c78ea75d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 12 May 2022 08:08:42 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 39281
AS: 39744
AS: 41531
AS: 42006
AS: 44188
AS: 48990
AS: 50977
IP: 109.107.96.0/19
IP: 185.96.24.0/22
IP: 185.165.4.0/22
IP: 185.210.88.0/22
IP: 185.210.184.0/22
IP: 185.214.12.0/22
IP: 185.216.168.0/22
IP: 185.235.100.0/22
IP: 194.35.88.0/22
IP: 2a03:bb00::/29
IP: 2a04:fec0::/32
IP: 2a0b:5440::/29
IP: 2a0b:9340::/29
IP: 2a0b:ba40::/29
IP: 2a0b:bc00::/29
IP: 2a0c:bbc0::/29
IP: 2a0d:5700::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 762756349919 (0xb197d23fdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 12 08:08:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24c64272b0b3aeb812549dee7ec58a3eaf6fa576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a5:51:cb:81:ed:93:51:52:8c:85:5f:2a:14:
2a:b9:1f:ee:3c:59:30:ea:3a:78:e1:f5:df:6d:6e:
e0:1c:cb:81:88:ae:8a:79:75:41:41:a7:66:af:a6:
a1:d6:d1:34:ea:06:6c:04:9d:a5:e0:21:e4:60:cd:
af:a6:ea:77:4e:08:bf:b5:be:bd:f1:98:41:65:92:
1d:56:f6:b0:ef:36:e2:66:96:40:d7:ef:05:33:d1:
8a:da:da:ec:a7:5c:d6:a6:8e:7c:3f:9e:ca:dc:74:
3c:05:d5:c9:f9:e4:a7:9e:a4:d8:ca:4c:a9:d6:0b:
b6:c5:fe:76:cd:79:78:2d:03:62:91:86:b6:52:a0:
8e:90:b6:99:c4:83:cd:9e:d9:cf:16:6b:5a:4d:95:
6a:00:7b:e8:34:ef:39:fa:02:90:36:7c:53:cb:1d:
6c:4a:71:04:ce:a1:62:64:8d:76:91:9a:ab:2e:6f:
07:a3:87:58:2a:dd:a3:29:cf:18:22:f9:1e:75:c0:
a5:7f:d0:b3:49:53:51:03:f0:db:a5:b2:f8:ea:ca:
16:ee:c1:5a:65:fe:6b:10:e3:80:51:92:3c:db:be:
0b:9e:10:aa:61:3c:4f:73:bd:17:17:92:71:99:57:
cd:65:a3:6f:e2:b4:33:94:6b:02:1b:3e:6a:86:70:
06:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C6:42:72:B0:B3:AE:B8:12:54:9D:EE:7E:C5:8A:3E:AF:6F:A5:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e0d0b2-9b9a-47f8-84ec-1460c78ea75d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e0d0b2-9b9a-47f8-84ec-1460c78ea75d/1/JMZCcrCzrrgSVJ3ufsWKPq9vpXY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.96.0/19
185.96.24.0/22
185.165.4.0/22
185.210.88.0/22
185.210.184.0/22
185.214.12.0/22
185.216.168.0/22
185.235.100.0/22
194.35.88.0/22
IPv6:
2a03:bb00::/29
2a04:fec0::/32
2a0b:5440::/29
2a0b:9340::/29
2a0b:ba40::/29
2a0b:bc00::/29
2a0c:bbc0::/29
2a0d:5700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39281
39744
41531
42006
44188
48990
50977
Signature Algorithm: sha256WithRSAEncryption
41:bc:50:51:53:f8:5b:b2:db:79:3e:90:ec:2f:b8:34:33:8c:
9b:c4:a4:9e:0e:87:fe:81:e8:bd:33:18:ff:9d:06:f7:af:ae:
a2:55:ba:b2:f9:81:b7:ea:94:e5:2f:f6:ea:4a:10:fd:58:61:
9f:8b:d1:a3:38:08:a6:b8:16:c9:48:3f:80:45:fd:a7:2e:c1:
ab:1b:d1:04:d7:95:fc:f7:99:3f:a2:28:7c:af:7a:ca:4f:42:
46:40:76:7f:d3:6d:25:ab:fb:b3:89:74:27:fd:22:95:90:14:
2d:a3:2f:5d:43:5b:2e:6a:0f:85:98:e7:8c:ca:24:af:53:32:
15:2d:a1:63:12:0e:03:d9:a5:94:bd:c0:f4:d6:cb:1a:1c:55:
a9:33:01:9c:ab:9f:70:e6:61:31:a4:52:f5:47:cc:67:33:95:
2f:d7:f4:11:5e:7e:71:e9:29:f5:73:a4:62:04:43:de:d6:a0:
f0:39:b3:d2:7b:1c:a4:15:da:01:44:8d:94:40:29:fb:5f:b1:
0c:89:bb:01:2b:f1:78:61:db:5f:f5:14:42:71:a9:6e:0a:c7:
e4:1e:4f:70:e5:0c:96:43:8e:9b:55:de:32:ab:17:c5:9d:ed:
6a:86:74:09:21:ca:02:f5:59:25:d3:73:c6:b4:4d:8d:30:18:
1d:1d:26:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:29:56 2024 by rpki-client on console-ams.rpki-client.org