Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WHINTs7jT9rGmkIZTQFUlBR7TkM.cer
File: WHINTs7jT9rGmkIZTQFUlBR7TkM.cer (raw, json)
Hash identifier: ZpgzvnAYCEa2kgrHEJuuZVye/Xauquboqya8jkfbBbY=
Subject key identifier: 58:72:0D:4E:CE:E3:4F:DA:C6:9A:42:19:4D:01:54:94:14:7B:4E:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A1E7407595
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/35458e-8fd4-4e8a-92f0-cac8fb8ef99d/1/WHINTs7jT9rGmkIZTQFUlBR7TkM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/35458e-8fd4-4e8a-92f0-cac8fb8ef99d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:02:16 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 5.182.212.0/22
IP: 2a0e:3000::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 695369495957 (0xa1e7407595)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:02:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58720d4ecee34fdac69a42194d015494147b4e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ff:68:35:98:ee:b5:f4:e9:6b:72:fa:cf:46:
d9:d2:cc:27:e8:27:ff:11:99:39:2f:ef:d8:69:e8:
63:11:81:10:91:f5:82:df:ca:4e:b7:cf:df:80:10:
bd:4a:71:3f:e0:65:35:88:5e:9e:b7:9e:aa:a8:be:
4d:90:ff:07:19:19:7e:ed:be:09:9d:c9:22:14:a7:
e7:c0:5d:0f:eb:11:e3:9f:3d:af:32:9e:fb:0c:96:
ee:b7:fa:f1:24:f1:59:8b:63:71:6d:81:4a:70:7f:
c9:39:10:85:a8:47:fe:cf:00:64:47:d3:35:c5:ad:
e1:27:52:3d:d1:67:f9:55:1b:94:24:20:8b:75:68:
d3:6b:ed:15:23:5e:e6:73:fe:e2:9b:64:98:a6:00:
cb:97:9f:4f:9f:3e:f8:0e:88:b5:62:c4:85:9c:69:
c7:3a:e1:4f:ea:c0:cb:ea:eb:f4:d2:4a:66:f0:51:
21:37:6c:18:a9:6a:62:c7:64:72:27:4b:a7:22:55:
bb:9a:b2:91:50:9f:d7:68:d0:b3:b4:13:56:33:d3:
0c:5d:e0:e1:a0:76:2c:2d:6b:73:7c:05:24:4d:49:
69:61:0c:c0:18:02:da:9c:ce:a6:20:6c:7f:ec:3f:
2e:fe:6a:24:61:ff:b9:a3:cd:b9:5b:fb:56:1e:4d:
38:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:72:0D:4E:CE:E3:4F:DA:C6:9A:42:19:4D:01:54:94:14:7B:4E:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/35458e-8fd4-4e8a-92f0-cac8fb8ef99d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/35458e-8fd4-4e8a-92f0-cac8fb8ef99d/1/WHINTs7jT9rGmkIZTQFUlBR7TkM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.212.0/22
IPv6:
2a0e:3000::/29
Signature Algorithm: sha256WithRSAEncryption
b2:16:47:6d:68:b7:38:d9:08:16:32:f4:62:34:d1:b1:f8:8b:
f6:61:48:1a:9c:b4:39:95:96:64:5c:c9:49:89:fe:35:91:69:
e5:ca:de:e0:3c:12:d4:ea:58:d2:6b:58:60:d0:79:e4:d5:33:
74:bc:87:c6:4f:32:40:3d:57:89:a1:3c:5a:e6:ea:61:ac:85:
6e:6d:8e:6f:a8:82:c6:c9:ea:1d:dc:c3:0e:41:1f:2b:78:48:
65:ca:39:81:09:96:1a:1b:7d:f8:86:b2:c8:c4:5b:e1:8b:10:
aa:af:a4:19:55:fd:e0:f4:bb:b1:ca:78:35:22:70:f7:6e:93:
92:5b:78:8b:04:9e:cd:f9:24:19:e9:a3:20:89:74:aa:7c:98:
3c:cc:ed:25:75:aa:a6:8a:c2:e4:82:8c:c3:02:bd:9d:e2:58:
91:29:63:16:cb:8e:23:72:42:b3:53:4a:33:c8:b7:37:ab:b8:
9e:f6:79:a5:36:75:ca:5c:9c:96:d5:49:b1:d9:11:ad:f4:c5:
b0:92:18:d6:e0:fc:6e:ca:18:2a:9e:c3:1a:b4:e3:3d:f5:2c:
08:d2:67:ee:78:02:21:ed:91:64:6c:c1:9f:89:31:2f:dc:ff:
8d:d9:4c:83:f0:20:80:5e:25:45:49:39:98:83:cb:1e:fd:06:
09:46:5d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:34:07 2024 by rpki-client on console-ams.rpki-client.org