Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W63QOImjl33QFcl6_l0lxSrQzu8.cer
File: W63QOImjl33QFcl6_l0lxSrQzu8.cer (raw, json)
Hash identifier: 9KxKkeTLOFVO4+xdyvifV1LLMCkwiBGl6nk0ZN9wefc=
Subject key identifier: 5B:AD:D0:38:89:A3:97:7D:D0:15:C9:7A:FE:5D:25:C5:2A:D0:CE:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9DF744B9C2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/7fb25c-5f7e-4059-a18b-e089cc7ebb26/1/W63QOImjl33QFcl6_l0lxSrQzu8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/7fb25c-5f7e-4059-a18b-e089cc7ebb26/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 04:57:33 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 5.181.108.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 678458341826 (0x9df744b9c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:57:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5badd03889a3977dd015c97afe5d25c52ad0ceef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:8f:48:c4:19:b9:9f:e7:08:e1:d7:26:b3:
85:12:1a:5b:b5:22:3f:3f:d9:32:7f:ae:19:54:47:
a5:5e:35:e8:bd:57:eb:8b:46:1f:b4:d8:c0:e9:c5:
f6:73:f6:53:90:0c:ef:d1:e9:e7:13:f6:d8:35:f1:
6a:5f:5e:9c:63:3c:99:f7:fe:6d:63:63:f0:55:67:
dd:7c:11:dd:0f:b1:d1:03:cc:22:9b:44:ed:5e:4f:
e4:ef:d2:e1:78:45:49:09:e4:94:5e:d3:39:78:a6:
a8:87:17:ac:63:0a:d1:e5:2f:ef:48:02:0e:74:f8:
d6:65:0c:67:af:e1:4e:f2:ff:44:ea:5b:30:23:42:
c9:2b:bc:76:d3:02:9b:33:4e:0f:a9:d8:30:e1:5c:
f2:d5:93:33:17:01:b6:5f:4a:8e:38:d9:4d:5f:8b:
58:03:3f:af:8b:a6:6b:d6:d5:24:7d:b4:e0:0e:c1:
61:03:3c:d2:16:a7:ca:08:2e:c1:7b:ba:79:f7:55:
20:3f:eb:f2:d4:66:72:a3:41:e6:d9:3a:27:a0:5c:
da:54:cb:f4:80:d9:44:5c:49:7f:e1:77:17:ef:c3:
34:e1:f3:e0:c2:bc:8e:3c:65:4c:3f:2b:9e:7b:38:
e7:96:5c:7f:b2:a8:0c:49:6a:89:eb:29:7a:77:a0:
8e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AD:D0:38:89:A3:97:7D:D0:15:C9:7A:FE:5D:25:C5:2A:D0:CE:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7fb25c-5f7e-4059-a18b-e089cc7ebb26/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7fb25c-5f7e-4059-a18b-e089cc7ebb26/1/W63QOImjl33QFcl6_l0lxSrQzu8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.108.0/22
Signature Algorithm: sha256WithRSAEncryption
01:90:30:8c:20:e2:ee:08:73:e3:59:13:b7:ff:4e:13:ac:09:
84:05:53:42:fd:70:a0:62:53:8c:cf:65:05:d9:73:cd:a5:10:
3d:13:e8:98:64:d0:53:eb:b2:af:d9:b2:77:21:44:4b:6a:37:
99:5a:26:b3:e4:41:9d:2d:28:46:74:41:01:40:81:6e:e3:76:
41:7c:28:e8:d0:86:fc:bb:ea:c6:1b:c7:b2:1d:dd:ff:27:e0:
b7:a6:27:d8:54:69:75:26:83:62:fe:dd:38:34:51:75:2a:b2:
e5:f1:46:b2:c3:55:25:db:f3:af:a6:f8:e3:dd:04:02:99:98:
2c:a8:0f:7b:05:29:3e:d2:c9:ba:38:f5:a1:89:cf:3a:90:c6:
47:3a:e3:b0:a6:96:cf:09:cc:31:f0:42:ab:6c:c5:52:94:8e:
ad:70:bb:29:58:55:c2:e8:b9:c7:79:52:d3:b9:b0:38:a7:0b:
d6:dc:aa:6a:12:66:c4:3a:53:bb:df:24:75:3e:b8:64:d7:44:
d7:80:8b:e4:7a:f5:e6:e8:4a:bd:74:f6:6b:ef:aa:73:f4:db:
ba:67:2b:e0:b9:eb:81:86:00:0d:8a:7a:c9:72:47:d5:49:75:
dd:83:16:b5:59:e4:cc:0c:23:37:87:0b:4b:ce:57:1a:3e:5a:
a3:9e:4a:68
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAJ33RLnCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDQ1NzMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1YmFkZDAzODg5
YTM5NzdkZDAxNWM5N2FmZTVkMjVjNTJhZDBjZWVmMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAqnWPSMQZuZ/nCOHXJrOFEhpbtSI/P9kyf64ZVEelXjXo
vVfri0YftNjA6cX2c/ZTkAzv0ennE/bYNfFqX16cYzyZ9/5tY2PwVWfdfBHdD7HR
A8wim0TtXk/k79LheEVJCeSUXtM5eKaohxesYwrR5S/vSAIOdPjWZQxnr+FO8v9E
6lswI0LJK7x20wKbM04Pqdgw4Vzy1ZMzFwG2X0qOONlNX4tYAz+vi6Zr1tUkfbTg
DsFhAzzSFqfKCC7Be7p591UgP+vy1GZyo0Hm2TonoFzaVMv0gNlEXEl/4XcX78M0
4fPgwryOPGVMPyueezjnllx/sqgMSWqJ6yl6d6CO2QIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFFut0DiJo5d90BXJev5dJcUq0M7vMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyLzdmYjI1Yy01ZjdlLTQwNTkt
YTE4Yi1lMDg5Y2M3ZWJiMjYvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvN2ZiMjVjLTVmN2UtNDA1OS1h
MThiLWUwODljYzdlYmIyNi8xL1c2M1FPSW1qbDMzUUZjbDZfbDBseFNyUXp1OC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCBbVsMA0GCSqGSIb3DQEBCwUAA4IBAQABkDCMIOLuCHPjWRO3/04T
rAmEBVNC/XCgYlOMz2UF2XPNpRA9E+iYZNBT67Kv2bJ3IURLajeZWiaz5EGdLShG
dEEBQIFu43ZBfCjo0Ib8u+rGG8eyHd3/J+C3pifYVGl1JoNi/t04NFF1KrLl8Uay
w1Ul2/Ovpvjj3QQCmZgsqA97BSk+0sm6OPWhic86kMZHOuOwppbPCcwx8EKrbMVS
lI6tcLspWFXC6LnHeVLTubA4pwvW3KpqEmbEOlO73yR1Prhk10TXgIvkevXm6Eq9
dPZr76pz9Nu6ZyvgueuBhgANinrJckfVSXXdgxa1WeTMDCM3hwtLzlcaPlqjnkpo
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:34:03 2024 by rpki-client on console-ams.rpki-client.org