RPKI Certificate
Location: rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer (download)
Subject key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest: rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.mft
CA Repository: rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/
Notification URL: https://rrdp.ripe.net/notification.xml
Subject Public Key Info:
Subordinate resources:
until: 2023-07-01T00:00:00Z
Resources:
1: AS: 35375
2: AS: 49201
1: IP: 185.100.212.0/22
2: IP: 185.139.24.0/22
3: IP: 185.235.32.0/24
4: IP: 2a00:9c60::/32
5: IP: 2a07:1240::/29
6: IP: 2a10:f580::/29
--
$ openssl x509 -text -inform DER -in rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 711400945702 (0xa5a2ccf826)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:04:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:8f:81:36:55:64:52:5d:ed:0d:17:c6:41:
4f:6a:67:46:16:f5:57:20:e2:a1:05:f0:20:73:50:
02:c9:a2:e3:20:01:52:66:0e:51:c1:db:02:ef:45:
c7:c8:c5:ae:ac:f2:37:85:57:db:cc:13:b1:f6:93:
d1:3a:ad:72:6f:b5:96:69:ca:f6:bf:9f:3b:5e:8a:
8e:98:c2:d8:29:5c:f0:f4:eb:6c:ce:d3:b3:a8:52:
bb:23:3a:19:ba:91:ef:9c:d7:37:94:26:92:b7:6d:
e8:e3:79:64:2f:fe:23:2f:ca:25:5b:5b:48:05:41:
1b:7e:47:9c:c6:75:f6:38:3b:6d:ff:6e:af:76:61:
02:dd:7b:f8:f9:2d:bf:28:06:e1:3b:d5:e7:83:d1:
6e:58:e3:6e:d1:7d:80:7a:ea:c3:e8:8b:bc:31:3d:
61:53:93:d7:17:60:02:7e:5a:6a:80:96:e7:cc:4a:
a2:78:fa:c3:f3:94:47:12:5a:e1:04:4c:43:ba:db:
36:e6:37:57:8f:46:fb:4c:5a:5a:49:79:c3:48:6b:
34:4d:59:9f:32:9b:25:7d:e2:ba:55:c0:76:f8:bd:
a0:10:72:db:47:dd:5c:da:c1:42:82:42:b3:b7:75:
f1:41:7b:c8:b8:0e:06:26:6e:57:1b:46:a1:e9:3c:
0d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.212.0/22
185.139.24.0/22
185.235.32.0/24
IPv6:
2a00:9c60::/32
2a07:1240::/29
2a10:f580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35375
49201
Signature Algorithm: sha256WithRSAEncryption
b1:2e:ea:14:e0:75:b5:80:40:a4:9a:29:26:84:57:2a:75:d1:
7f:0f:a0:c1:87:9e:cf:f4:27:f6:c7:a0:ca:00:6e:49:40:d4:
f3:02:12:2b:12:07:63:3a:83:cd:ab:23:52:89:0c:47:71:95:
50:4c:9b:17:d8:2c:b5:fa:26:f2:60:02:52:0e:ae:16:98:45:
c7:5f:83:b4:47:38:b3:c7:d3:22:7e:fa:a0:75:76:d4:42:58:
f8:f5:6f:4c:28:c7:f2:6e:e5:04:70:6b:b0:5a:8a:6d:a2:6e:
d5:67:2f:f0:f5:e9:0a:78:ed:1f:03:a3:a9:23:a6:8e:87:15:
4c:9e:43:00:b9:32:03:d6:79:66:4a:2e:d6:5c:6a:f7:ea:ba:
86:5e:85:0e:11:45:8b:eb:34:1a:d5:a0:cd:74:9e:15:a0:86:
e4:db:5a:15:61:e1:bd:3f:3c:b0:2d:0d:12:e8:53:dc:cb:4e:
c9:dc:b4:d4:3a:fb:16:f1:ed:a4:36:9f:29:d0:2c:80:bc:8a:
11:17:c6:9f:67:cd:7b:78:d7:88:ad:18:dd:4a:c0:cb:ae:1a:
bb:7c:16:19:6b:93:54:8d:50:87:e4:c1:dc:c8:00:54:8f:5d:
ed:76:d2:70:eb:09:8b:a8:a9:7c:ed:6e:d1:e1:25:2d:d8:47:
9b:84:a8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 30 12:22:50 2022 by LibreSSL & rpki-client.