Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MWWu6_zf8YU5WxAZjWnW1RQFROs.cer
File: MWWu6_zf8YU5WxAZjWnW1RQFROs.cer (raw, json)
Hash identifier: oB1TBUyLXtUdPjKsyRShdLhSH/ZXOpq9Wg8Erxdv3Fs=
Subject key identifier: 31:65:AE:EB:FC:DF:F1:85:39:5B:10:19:8D:69:D6:D5:14:05:44:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A87A1F690C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/fb8b6e-6fbd-4a1b-a238-1ebb7fc5bab4/1/MWWu6_zf8YU5WxAZjWnW1RQFROs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/fb8b6e-6fbd-4a1b-a238-1ebb7fc5bab4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:59:42 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 31623
IP: 193.34.178.0/23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723603384588 (0xa87a1f690c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:59:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3165aeebfcdff185395b10198d69d6d5140544eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:07:9f:bc:b5:59:51:82:48:ea:4a:ee:97:
65:86:7f:47:60:2b:18:2d:fe:70:8f:b2:e1:8a:a9:
64:be:36:75:29:44:ff:59:d9:c8:b3:fb:55:cc:30:
31:15:61:5d:ee:76:31:55:33:48:9e:2e:4a:a8:3d:
71:53:31:cd:a3:96:cb:5f:42:7a:a7:94:d7:83:22:
f1:d6:a5:00:b2:48:8d:32:6e:d5:3e:9f:66:30:ac:
45:f3:42:1a:ff:78:fc:74:cb:c8:c6:a8:ec:c3:98:
f5:f3:b0:24:4c:c0:0e:0d:f7:b9:52:9b:87:06:80:
0c:62:99:ea:2e:3c:ce:17:96:fa:15:8c:8b:80:8f:
c6:1e:cb:05:86:56:a4:4b:90:dc:d2:37:d9:53:53:
02:51:b4:77:1f:5b:fb:15:59:90:fe:c7:8a:fd:46:
fd:f4:a3:96:da:45:99:b3:d3:c2:07:21:93:b0:82:
09:3c:7c:59:46:cd:e8:1e:54:f2:3a:19:19:6b:c7:
f1:ac:4e:62:d3:87:49:19:be:23:12:22:2b:44:14:
52:83:5c:b1:03:6e:4d:9a:22:aa:94:45:f5:10:66:
48:56:71:56:f0:09:b7:9f:6a:df:e7:53:68:a6:35:
81:fb:b1:2a:e2:40:15:60:36:db:c3:a0:8e:77:85:
67:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:65:AE:EB:FC:DF:F1:85:39:5B:10:19:8D:69:D6:D5:14:05:44:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fb8b6e-6fbd-4a1b-a238-1ebb7fc5bab4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fb8b6e-6fbd-4a1b-a238-1ebb7fc5bab4/1/MWWu6_zf8YU5WxAZjWnW1RQFROs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.178.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31623
Signature Algorithm: sha256WithRSAEncryption
88:cb:a6:c9:30:e4:f0:dc:55:4e:37:aa:d1:12:87:c1:97:67:
00:f7:e3:de:a1:82:b5:60:71:62:cf:95:72:8e:97:ee:fa:fd:
c2:73:cb:c2:27:d7:64:3a:3f:08:a3:4f:b7:b8:1e:1c:08:ae:
33:2e:3d:3e:c4:87:3b:51:86:34:61:25:d0:da:59:45:4b:cd:
66:07:0a:84:08:95:c7:7e:f9:28:84:47:d5:e7:ab:fa:0e:53:
87:57:83:5f:3a:fa:c5:16:36:6f:5b:8c:d1:51:fa:6d:68:02:
58:3b:27:c0:02:37:19:30:31:a1:2b:0b:a0:91:fa:67:61:ac:
80:27:ca:f1:2d:0e:19:fd:21:fa:6f:b0:b7:d0:f4:4f:7e:b3:
fb:b6:bd:6f:66:83:ac:3a:2a:4a:14:25:15:6c:ba:52:c0:93:
7e:a9:25:fb:43:14:7a:fe:fe:bf:41:07:4e:87:36:cd:fa:76:
5e:40:b7:74:01:51:d5:90:73:5f:76:4a:62:16:99:42:3c:12:
d2:10:4b:33:b4:65:23:28:32:a1:d5:a8:98:7a:5b:2f:83:a4:
b3:97:2f:60:33:3a:83:b9:95:54:e3:e2:ae:54:b3:f6:af:ab:
49:00:92:40:b5:51:16:cf:66:55:1c:fa:7a:33:66:11:47:1d:
9a:ae:34:4e
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIGAKh6H2kMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTM1OTQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzMTY1YWVlYmZj
ZGZmMTg1Mzk1YjEwMTk4ZDY5ZDZkNTE0MDU0NGViMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAriIHn7y1WVGCSOpK7pdlhn9HYCsYLf5wj7LhiqlkvjZ1
KUT/WdnIs/tVzDAxFWFd7nYxVTNIni5KqD1xUzHNo5bLX0J6p5TXgyLx1qUAskiN
Mm7VPp9mMKxF80Ia/3j8dMvIxqjsw5j187AkTMAODfe5UpuHBoAMYpnqLjzOF5b6
FYyLgI/GHssFhlakS5Dc0jfZU1MCUbR3H1v7FVmQ/seK/Ub99KOW2kWZs9PCByGT
sIIJPHxZRs3oHlTyOhkZa8fxrE5i04dJGb4jEiIrRBRSg1yxA25NmiKqlEX1EGZI
VnFW8Am3n2rf51NopjWB+7Eq4kAVYDbbw6COd4VnewIDAQABo4ICnzCCApswHQYD
VR0OBBYEFDFlruv83/GFOVsQGY1p1tUUBUTrMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNiL2ZiOGI2ZS02ZmJkLTRhMWIt
YTIzOC0xZWJiN2ZjNWJhYjQvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvZmI4YjZlLTZmYmQtNGExYi1h
MjM4LTFlYmI3ZmM1YmFiNC8xL01XV3U2X3pmOFlVNVd4QVpqV25XMVJRRlJPcy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBwSKyMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnuHMA0GCSqGSIb3
DQEBCwUAA4IBAQCIy6bJMOTw3FVON6rREofBl2cA9+PeoYK1YHFiz5Vyjpfu+v3C
c8vCJ9dkOj8Io0+3uB4cCK4zLj0+xIc7UYY0YSXQ2llFS81mBwqECJXHfvkohEfV
56v6DlOHV4NfOvrFFjZvW4zRUfptaAJYOyfAAjcZMDGhKwugkfpnYayAJ8rxLQ4Z
/SH6b7C30PRPfrP7tr1vZoOsOipKFCUVbLpSwJN+qSX7QxR6/v6/QQdOhzbN+nZe
QLd0AVHVkHNfdkpiFplCPBLSEEsztGUjKDKh1aiYelsvg6Szly9gMzqDuZVU4+Ku
VLP2r6tJAJJAtVEWz2ZVHPp6M2YRRx2arjRO
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:58 2024 by rpki-client on console-ams.rpki-client.org