Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WY_jewM08vlS1-4rlkMilSdHeJg.cer
File: WY_jewM08vlS1-4rlkMilSdHeJg.cer (raw, json)
Hash identifier: 8kjkOkR72VTAyvmMKN3/k06MWN+fGmvp66q/5rLAcPk=
Subject key identifier: 59:8F:E3:7B:03:34:F2:F9:52:D7:EE:2B:96:43:22:95:27:47:78:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A91038B3E2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/13a3a3-180a-4bc1-a3e9-9ea6c0e61151/1/WY_jewM08vlS1-4rlkMilSdHeJg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/13a3a3-180a-4bc1-a3e9-9ea6c0e61151/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 14:07:31 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 194.169.92.0/22
IP: 2a0d:93c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 726121624546 (0xa91038b3e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:07:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=598fe37b0334f2f952d7ee2b9643229527477898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:4b:66:dd:cf:17:53:58:9e:90:95:5d:3f:
7a:e9:f3:c7:cc:7f:0e:9d:55:68:c9:df:6a:1d:ee:
5e:e3:9f:63:f7:bc:b1:3a:8c:92:93:3c:c5:1e:08:
22:56:e2:a6:32:ec:89:ed:43:89:e8:af:fb:bd:ad:
1a:f0:b0:60:9a:2a:a4:af:71:64:19:e0:90:2d:d0:
43:72:c1:1a:6a:3d:b6:f5:fe:d5:7e:37:1d:9f:f8:
1f:00:68:98:0a:1b:24:c4:47:cd:66:b3:12:6b:8e:
ca:ab:83:cf:28:6e:56:de:d2:6b:dc:2d:71:cb:ab:
7f:af:f2:23:e9:4a:bd:77:bf:62:13:86:2c:19:af:
77:e8:a9:88:54:cf:3f:31:22:dc:18:8a:52:5e:af:
b5:88:2a:d8:15:51:bc:1a:96:90:c8:e8:ab:a2:f9:
9a:ed:cc:b2:74:8c:f5:15:cb:cb:54:6b:a1:e7:8c:
7f:67:9a:dc:d6:c0:a8:1f:df:35:61:40:8f:46:a7:
86:6e:05:33:98:c1:5e:ba:22:c2:43:7a:14:38:d0:
2f:14:f4:9f:41:77:cb:67:c5:3f:f3:51:6f:f5:d5:
32:96:fa:1c:2b:7b:a9:41:53:1f:c6:6e:55:70:06:
d7:68:eb:e3:cb:56:de:7c:9e:25:35:23:bb:44:19:
ca:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8F:E3:7B:03:34:F2:F9:52:D7:EE:2B:96:43:22:95:27:47:78:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/13a3a3-180a-4bc1-a3e9-9ea6c0e61151/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/13a3a3-180a-4bc1-a3e9-9ea6c0e61151/1/WY_jewM08vlS1-4rlkMilSdHeJg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.92.0/22
IPv6:
2a0d:93c0::/29
Signature Algorithm: sha256WithRSAEncryption
9a:ad:d4:32:34:93:a3:d0:a9:73:d2:ef:51:6b:ab:94:6c:15:
8d:9a:55:ba:5e:10:1c:10:d0:48:03:fe:0a:48:3f:a5:1f:87:
01:ab:06:ae:83:52:d2:82:d1:87:61:ac:96:3d:a0:09:6a:99:
2d:dd:b7:f8:8f:67:93:87:0d:6f:dd:e4:2d:84:5c:98:a7:80:
a4:67:a7:24:00:0a:5f:e3:3a:f3:e5:af:56:62:28:af:1e:77:
d7:33:b8:67:33:62:4c:42:78:6b:68:3d:a9:e6:5e:ef:c5:75:
c8:01:fe:51:bd:e2:c0:ca:e2:fe:8c:0d:bf:43:1a:93:b3:4f:
62:c2:77:6b:14:8f:80:6d:3e:d2:dd:32:d4:09:94:11:9a:8e:
17:cc:29:26:44:22:6d:13:0c:8c:06:01:7a:90:a0:43:48:07:
6e:5f:61:87:26:a8:51:dd:59:ae:c6:b0:e9:3b:86:f4:ef:7a:
8a:d1:59:08:c9:04:30:ea:4e:dc:a2:05:44:fd:26:9c:e0:15:
39:41:c0:93:2a:22:73:82:57:56:ab:e9:f7:b8:49:cf:9c:e2:
ab:9f:ff:46:c7:d3:2b:fd:fc:ab:1e:d8:1b:d2:a7:ee:26:9d:
ab:6c:4a:f4:4b:30:03:76:ab:d4:a8:35:f0:69:e4:95:07:88:
53:51:32:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:34:12 2024 by rpki-client on console-ams.rpki-client.org