Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WhWcOJvhpjJ94qXJ7lci8S0f7No.cer
File: WhWcOJvhpjJ94qXJ7lci8S0f7No.cer (raw, json)
Hash identifier: anM828lVmBV73FGRPLTpK6vnLS7Q15bRR/Aq/wtrttY=
Subject key identifier: 5A:15:9C:38:9B:E1:A6:32:7D:E2:A5:C9:EE:57:22:F1:2D:1F:EC:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A5600D7241
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/0003ed-3de8-4721-b4b5-7a7060f4b5f9/1/WhWcOJvhpjJ94qXJ7lci8S0f7No.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/0003ed-3de8-4721-b4b5-7a7060f4b5f9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:01:16 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 210199
IP: 2.57.236.0/22
IP: 2a09:ddc0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 710281097793 (0xa5600d7241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:01:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a159c389be1a6327de2a5c9ee5722f12d1fecda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:61:4e:35:65:4d:ca:97:9c:38:32:41:85:
26:5e:f4:5d:b5:a7:b5:d7:a0:2f:19:0e:1f:53:d0:
87:06:eb:bc:af:60:d7:b1:35:3f:36:bd:c3:0c:7b:
c2:a3:7a:a8:84:8d:62:f1:bc:33:24:c3:08:66:11:
36:ac:99:73:17:3f:d0:68:a9:67:bf:5a:57:75:c1:
ad:91:ca:f5:85:89:3d:1d:3e:8e:5b:7c:c2:5a:5c:
e3:36:f4:65:c1:a8:42:d7:0e:5f:d6:03:03:a3:28:
13:ef:fc:e2:5f:ed:39:35:f0:c3:c1:fc:35:1f:32:
0b:d6:8e:d5:15:6c:1b:f6:86:e2:c3:b7:f2:6c:eb:
c4:a9:cd:f6:d5:f8:61:8a:ba:af:a1:07:da:a1:d1:
9f:fe:ae:7a:c2:6f:03:d8:c8:f2:14:1c:61:67:3e:
d2:4f:39:56:43:cd:2f:97:74:c3:71:cf:09:b8:98:
fd:a5:e6:7f:98:15:69:7b:62:68:32:13:dc:cb:a2:
45:bf:5c:4e:76:1b:40:a6:45:6c:08:8b:7f:87:3f:
9d:c5:ff:b6:95:91:eb:76:4d:d5:7c:b7:a4:40:69:
e4:0f:1a:d0:67:3d:8d:49:a2:99:e0:36:b5:95:e6:
02:d1:3d:dc:e8:2d:b0:46:64:f1:21:fd:ae:16:c1:
df:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:15:9C:38:9B:E1:A6:32:7D:E2:A5:C9:EE:57:22:F1:2D:1F:EC:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/0003ed-3de8-4721-b4b5-7a7060f4b5f9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/0003ed-3de8-4721-b4b5-7a7060f4b5f9/1/WhWcOJvhpjJ94qXJ7lci8S0f7No.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.236.0/22
IPv6:
2a09:ddc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210199
Signature Algorithm: sha256WithRSAEncryption
4f:b1:ce:5d:64:5c:22:6e:6f:59:6e:50:a7:c9:7f:fa:c6:45:
ba:48:c7:12:fe:93:27:77:2b:1c:fb:2e:54:2f:0e:6e:30:40:
e4:4d:3f:6c:b4:fd:72:c7:9e:98:08:45:f4:83:db:8a:98:a6:
0f:d0:72:d5:c0:01:2a:06:e4:7d:b5:3e:45:a3:43:d8:e8:15:
9e:a7:f0:c9:6c:4a:c3:9e:7f:37:ca:f8:c7:9f:7c:97:e2:53:
bf:b1:6d:40:98:4b:e5:9a:52:5e:d2:b5:87:c0:12:ef:a7:39:
41:0d:5c:67:3a:2e:22:9e:4d:21:89:ab:a0:66:eb:14:d6:b2:
52:4f:47:fb:cd:56:74:64:18:e3:b2:6d:ef:90:83:ab:7e:94:
f7:5d:d1:4d:33:e1:97:0a:0f:33:da:be:91:82:97:1f:40:c9:
ec:00:6a:bb:3f:1d:2f:47:65:ee:21:5e:4e:c3:27:ca:0c:08:
09:61:4a:f3:28:2a:75:90:d6:30:f8:d9:34:56:08:7f:ec:da:
55:77:07:13:7f:7a:09:9d:6a:83:8e:5f:86:f7:2d:72:67:2a:
a8:f0:aa:70:cb:46:df:65:7c:71:e7:71:bf:8c:54:39:10:7e:
36:8e:8b:99:cb:51:be:66:97:3b:c8:b9:c1:e1:9c:66:ca:fd:
7d:73:2d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:44 2024 by rpki-client on console-fra.rpki-client.org