Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UWjrwY-f_Lyl1uamoskEqKSn2To.cer
File: UWjrwY-f_Lyl1uamoskEqKSn2To.cer (raw, json)
Hash identifier: UO+ghec2rATPjhc0YSt3g60BcHhgauEcDkufVjfehVU=
Subject key identifier: 51:68:EB:C1:8F:9F:FC:BC:A5:D6:E6:A6:A2:C9:04:A8:A4:A7:D9:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B0A93E4C92
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/edd361-181a-4d80-8485-87501eb628e4/1/UWjrwY-f_Lyl1uamoskEqKSn2To.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/edd361-181a-4d80-8485-87501eb628e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 26 Apr 2022 14:32:58 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 51177
IP: 84.234.96.0/22
IP: 91.235.116.0/24
IP: 193.29.187.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 758753676434 (0xb0a93e4c92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 26 14:32:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5168ebc18f9ffcbca5d6e6a6a2c904a8a4a7d93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:04:d1:af:4b:d8:6b:e5:eb:d7:2b:5a:53:
ff:81:7a:b3:87:d9:9e:00:a8:c0:fb:44:41:61:e8:
55:b6:7e:7d:1f:02:86:b1:af:07:87:37:00:0b:dd:
a9:80:a7:a9:3f:ad:cf:f1:4a:05:cb:a6:eb:55:03:
5d:bb:3e:db:b0:01:32:20:8e:b8:80:24:d5:a5:2f:
c0:42:a8:53:db:48:4c:8b:c1:d4:f0:5a:c8:00:7a:
28:9d:7b:46:a9:06:0d:54:fd:18:ff:7c:ed:a9:5f:
40:13:a9:d3:33:6e:00:6b:3d:43:0d:d6:4c:11:29:
10:87:ef:f2:88:31:8d:c1:93:90:6c:99:fc:77:05:
ad:50:a6:78:04:46:6b:49:f8:63:94:34:d1:89:62:
6d:ad:e2:30:96:06:d6:af:22:21:ef:22:ec:ec:f0:
c5:6f:b8:f1:10:47:dd:df:c5:19:a1:92:c3:f9:7a:
06:77:66:d7:e8:a8:55:41:a1:69:dd:58:f5:02:c4:
32:6d:fa:63:8f:32:c8:30:ac:55:b6:eb:d5:b8:3b:
8e:d6:d3:74:1d:b4:b5:d1:9d:1a:8d:0a:70:7d:47:
d0:54:d3:9e:cb:a7:ca:56:1d:f6:a1:d1:64:96:3b:
b8:96:0a:72:a5:8a:d2:5f:af:c8:b0:0a:d9:55:f6:
d8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:68:EB:C1:8F:9F:FC:BC:A5:D6:E6:A6:A2:C9:04:A8:A4:A7:D9:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/edd361-181a-4d80-8485-87501eb628e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/edd361-181a-4d80-8485-87501eb628e4/1/UWjrwY-f_Lyl1uamoskEqKSn2To.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.234.96.0/22
91.235.116.0/24
193.29.187.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51177
Signature Algorithm: sha256WithRSAEncryption
9c:d2:db:b7:14:1d:e9:14:10:cd:b1:c7:43:b0:cb:16:e1:03:
de:08:bc:ee:77:d7:9f:f3:03:2d:5c:f3:57:ae:1d:b3:56:1e:
9f:17:30:fb:a5:ff:0a:cd:0e:ed:37:b9:f3:15:ec:40:72:1e:
14:4a:9a:5c:bb:b8:c0:cb:8a:45:b7:4a:fd:cb:69:1d:bb:c3:
16:db:54:73:2e:53:a3:cd:5c:07:2c:28:65:10:a4:24:c4:4f:
d7:80:f4:2f:4c:60:2d:be:04:2c:34:cf:f3:cb:1b:d0:5e:36:
40:a3:03:be:8d:8a:0e:75:56:5c:30:b7:94:2f:1a:7f:14:a4:
10:c5:d3:a3:55:95:ef:29:34:d3:83:f0:22:2a:1a:f3:0e:da:
3d:54:2b:89:35:1f:fe:92:db:8b:d7:7e:f3:c8:87:6e:6b:d4:
ad:1b:4a:8e:a8:81:5c:78:f8:a6:eb:d9:f6:06:8c:d6:de:bc:
0d:e7:8e:78:1b:69:b4:c6:f2:e5:10:47:b0:17:82:ba:20:9d:
4c:a2:43:e9:ad:72:ea:71:c4:44:68:19:49:65:87:d4:a4:49:
bd:ee:5a:7b:9a:14:d9:06:6a:c2:4f:c4:57:93:3a:72:ba:01:
8c:c6:78:0d:54:5a:3f:27:5a:42:d6:72:d3:51:57:cf:a3:0e:
4e:de:7b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-fra.rpki-client.org