Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VWGZL4zVj10Kd8BwieOn6A_i8l8.cer
File: VWGZL4zVj10Kd8BwieOn6A_i8l8.cer (raw, json)
Hash identifier: 1+253HXFU9yYGdmXSlG84R8oYm280zaLUdE8tiKGxRw=
Subject key identifier: 55:61:99:2F:8C:D5:8F:5D:0A:77:C0:70:89:E3:A7:E8:0F:E2:F2:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A5364AC16B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/9619e5-d648-4020-a5cd-de3f064d7692/1/VWGZL4zVj10Kd8BwieOn6A_i8l8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/9619e5-d648-4020-a5cd-de3f064d7692/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:59:21 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 194.56.184.0/22
IP: 2a0c:f9c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 709580472683 (0xa5364ac16b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:59:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5561992f8cd58f5d0a77c07089e3a7e80fe2f25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:77:1f:62:48:bb:c6:6b:85:12:ca:9f:05:a6:
4f:8e:40:2b:a3:3e:10:bb:18:cc:7a:d8:a9:94:ed:
19:2d:50:22:98:95:3b:1e:51:62:13:5d:ef:50:39:
f8:66:16:43:12:0f:12:f2:74:24:ca:76:63:44:a9:
4e:26:21:d9:21:63:a5:89:ac:74:90:15:7c:f9:f1:
1f:bc:db:24:18:d8:ea:8b:93:83:17:74:52:20:d0:
d9:40:e1:1c:6e:2d:5c:25:e5:f7:2f:32:11:a9:29:
d0:6a:81:79:ff:39:bb:10:4c:a2:9d:1f:29:2e:09:
d7:cd:76:91:90:5a:af:3f:e1:6c:20:7b:9e:98:f5:
da:37:97:ec:ed:9b:ca:b3:ae:e4:92:ea:89:08:a5:
fc:f9:02:5a:6a:77:c7:49:7d:ee:29:c2:ba:97:54:
fc:5a:15:d5:29:0d:f5:98:f6:88:0e:85:ad:68:ac:
58:a6:aa:31:7d:87:49:e3:ac:33:2a:58:13:95:7e:
bd:00:db:26:84:cb:f8:d5:5b:e0:c0:d9:ce:99:38:
01:e8:90:d4:aa:6b:b2:7a:27:8c:b5:5b:df:c3:1f:
48:75:60:83:cf:f9:25:ec:fa:e2:ab:f0:69:7c:9c:
6c:0b:9c:0c:20:bc:d2:c4:39:9e:e7:f9:ac:35:44:
04:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:61:99:2F:8C:D5:8F:5D:0A:77:C0:70:89:E3:A7:E8:0F:E2:F2:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9619e5-d648-4020-a5cd-de3f064d7692/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9619e5-d648-4020-a5cd-de3f064d7692/1/VWGZL4zVj10Kd8BwieOn6A_i8l8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.184.0/22
IPv6:
2a0c:f9c0::/29
Signature Algorithm: sha256WithRSAEncryption
70:41:55:2f:64:21:eb:21:ea:39:62:98:6f:a4:02:be:4f:55:
20:c6:d2:e0:89:fb:fa:51:44:b5:74:ae:fb:1c:50:ad:81:2d:
22:1a:ed:56:f0:04:32:98:ca:3b:6a:b9:65:af:bf:d0:e4:53:
7e:39:65:ca:eb:56:7f:a6:67:e8:09:0b:4d:43:ff:96:4f:69:
74:1c:e9:40:8e:08:3f:74:91:78:68:12:80:4a:25:c2:71:db:
4a:c6:12:af:ac:79:25:37:00:83:c0:14:7a:22:11:76:e4:23:
33:11:7b:ac:8c:07:7d:0b:a5:30:6b:08:21:ad:ff:b4:ae:85:
4a:1a:f7:61:43:a8:42:b9:72:f0:6c:ba:89:ad:66:fc:a4:c7:
fb:35:a4:f1:b1:4b:fb:3a:18:a3:7a:b6:d9:cf:e4:fe:77:ef:
d6:e3:91:f1:27:e2:42:42:d8:18:ce:b1:e9:b5:8b:50:56:de:
42:df:79:f4:e8:d0:c9:09:28:8e:6d:2c:40:ce:23:e2:5c:78:
53:31:bb:ab:cb:ad:6f:ca:8a:e2:c3:f3:35:3e:79:f7:77:0a:
85:8c:25:58:91:b2:a5:94:ef:6c:90:54:44:9c:f2:82:b4:d1:
d6:2e:a8:25:91:f6:ea:78:be:b5:42:a8:85:f3:2d:21:ab:f3:
17:46:69:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:28 2024 by rpki-client on console-fra.rpki-client.org