Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WCzS8ZuRZoJeTPdcZy38w93oPfA.cer
File: WCzS8ZuRZoJeTPdcZy38w93oPfA.cer (raw, json)
Hash identifier: R5GyN/1Fw+0J9cYwKMMmn4m1oVeOvy33D169i3EONPw=
Subject key identifier: 58:2C:D2:F1:9B:91:66:82:5E:4C:F7:5C:67:2D:FC:C3:DD:E8:3D:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9909FC342E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/66699d-6f03-4d04-8e0d-0e003c75eb62/1/WCzS8ZuRZoJeTPdcZy38w93oPfA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/66699d-6f03-4d04-8e0d-0e003c75eb62/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 00:52:54 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 206496
IP: 185.185.64.0/22
IP: 2a0b:4a80::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657297519662 (0x9909fc342e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:52:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=582cd2f19b9166825e4cf75c672dfcc3dde83df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:f8:90:e8:cc:43:42:d1:b8:9c:d9:6e:2d:
d3:0b:2d:07:4a:b0:57:45:0c:60:e0:ea:b1:8c:b9:
eb:2d:7a:47:2b:71:a5:ae:ba:bd:62:91:b9:3c:21:
5c:1d:ab:03:75:ba:2e:e6:ca:dd:aa:3a:56:3f:6e:
ff:82:da:2b:d1:1c:d0:67:ac:88:fa:f7:be:73:26:
49:ad:92:8d:91:d7:d5:39:22:da:bf:25:74:ec:93:
6e:c6:12:38:7e:8f:31:8e:55:85:39:96:1a:61:bc:
d2:95:27:c5:21:4d:4b:d6:c1:84:f9:0d:ed:87:07:
84:4e:eb:79:dd:d0:bc:f7:d0:e7:51:56:30:f7:2c:
fd:f8:85:d4:91:d1:45:ae:de:43:b9:d8:97:46:bc:
60:dc:6e:4f:bf:06:85:ef:f2:69:c7:ec:93:20:56:
05:19:53:fb:61:42:f4:67:de:7b:41:52:e2:4b:66:
cc:fb:ba:02:a0:26:71:e3:b8:29:ae:d5:6d:c5:da:
2b:5f:a6:30:64:6c:d6:0d:c6:ac:ca:3b:20:c5:d9:
73:4f:bc:fc:48:2f:b4:4a:fe:60:7e:76:13:16:82:
f6:78:1f:6d:8d:bd:27:4f:9e:49:0f:5f:17:11:f7:
e9:18:e9:ea:06:7a:0d:b1:b6:b7:b2:b6:71:73:ac:
af:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2C:D2:F1:9B:91:66:82:5E:4C:F7:5C:67:2D:FC:C3:DD:E8:3D:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/66699d-6f03-4d04-8e0d-0e003c75eb62/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/66699d-6f03-4d04-8e0d-0e003c75eb62/1/WCzS8ZuRZoJeTPdcZy38w93oPfA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.64.0/22
IPv6:
2a0b:4a80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206496
Signature Algorithm: sha256WithRSAEncryption
21:69:73:a7:34:32:86:89:8a:bc:99:c2:40:3c:46:48:ab:6a:
78:44:f2:8f:b4:00:c9:2b:c8:c5:68:2e:c9:85:33:f9:64:cb:
e1:d7:af:49:fc:fb:38:05:82:41:5c:c1:9e:2f:19:a5:f8:d0:
bf:31:36:35:9f:e5:3d:e2:c6:86:03:26:d7:13:26:b9:0e:63:
27:06:bd:dc:96:57:ff:40:94:cd:0f:63:33:5c:c5:26:40:3b:
1b:a1:bd:7c:9b:f6:36:42:58:3d:72:4c:b5:ae:b2:5c:75:ea:
50:3e:47:96:32:5a:39:2c:f7:84:b6:67:94:85:8e:7f:29:41:
13:9a:c1:12:f1:4e:da:c9:2d:31:35:28:50:7b:97:e0:e5:61:
21:4d:8b:4b:f6:4c:09:1f:c4:ba:bf:ae:bb:b4:d0:59:fa:04:
f7:9b:8b:2e:e8:78:98:40:94:9a:35:ff:e7:69:8d:87:38:ef:
31:81:47:4c:ee:39:4a:db:53:77:b2:54:2e:95:6a:60:f6:13:
12:c8:d3:68:ce:d7:75:bc:a6:4c:eb:2d:8c:5a:b5:2f:26:9c:
12:f8:6c:65:d6:e0:10:8b:83:7a:55:e9:64:ab:5e:8f:1c:97:
d1:04:ff:d6:de:00:42:28:b2:15:fb:e0:f6:41:78:45:4d:6d:
7f:fa:90:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:38 2024 by rpki-client on console-fra.rpki-client.org