Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WueVkGd2x1co9a8FbO-TpvtMmk4.cer
File: WueVkGd2x1co9a8FbO-TpvtMmk4.cer (raw, json)
Hash identifier: FOLjw9IFvFxyLjA9w5k98k0vB8jZINoKUhnh/gf4L/I=
Subject key identifier: 5A:E7:95:90:67:76:C7:57:28:F5:AF:05:6C:EF:93:A6:FB:4C:9A:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9E54288AD6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/67e24a-0449-4ccd-b81b-ed2f3a772848/1/WueVkGd2x1co9a8FbO-TpvtMmk4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/67e24a-0449-4ccd-b81b-ed2f3a772848/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:01:50 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.148.28.0/22
IP: 2a0f:9c00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680016775894 (0x9e54288ad6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:01:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ae795906776c75728f5af056cef93a6fb4c9a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:58:0f:b2:93:e9:fb:6a:a0:27:02:e9:88:38:
38:d6:70:2b:d2:f2:c9:ef:74:1a:c5:62:2d:18:6d:
cb:19:db:ab:15:94:d1:4c:c3:ac:44:1c:f4:85:90:
58:b3:da:c7:17:cd:f2:4a:0e:89:cf:e1:ba:d0:9a:
24:9f:36:64:6e:bf:89:04:13:6a:5a:ef:ac:bf:0b:
67:35:0a:d1:7e:b8:0e:73:3d:04:4b:6a:1f:34:f2:
36:a1:21:fb:01:97:4d:73:b6:6b:2e:58:0b:09:d0:
2b:e6:18:e4:ae:17:fe:b4:a8:cf:f4:8a:bf:fb:2d:
79:f9:f3:92:47:1b:14:c1:f1:13:c5:30:f8:93:fc:
0b:f0:70:5c:14:40:fa:08:54:03:eb:4f:57:52:70:
4f:2f:6e:e9:61:14:7e:79:c0:14:0a:84:1a:9f:59:
de:f2:a7:75:33:ba:1e:8d:49:ff:59:59:28:ab:08:
d3:74:0e:bc:2b:59:a9:7f:29:fd:be:c7:ef:cb:b3:
28:2e:c6:fe:3d:64:c1:41:61:d3:9a:ad:18:8c:a8:
3c:b3:68:e9:5b:cf:5a:14:03:38:01:eb:64:78:70:
26:09:0b:8e:9b:09:d1:a4:45:09:43:e6:3c:6f:3a:
3f:4e:52:8a:49:46:bb:d9:2e:71:fd:91:aa:8c:34:
1c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E7:95:90:67:76:C7:57:28:F5:AF:05:6C:EF:93:A6:FB:4C:9A:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/67e24a-0449-4ccd-b81b-ed2f3a772848/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/67e24a-0449-4ccd-b81b-ed2f3a772848/1/WueVkGd2x1co9a8FbO-TpvtMmk4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.28.0/22
IPv6:
2a0f:9c00::/29
Signature Algorithm: sha256WithRSAEncryption
29:e5:ca:83:e2:53:03:ea:69:e6:2f:e7:1c:ae:97:cd:3c:70:
ea:22:cf:36:45:50:63:83:77:c1:9c:76:5d:62:2d:25:58:56:
58:12:43:ad:a9:ad:eb:84:cb:3b:0b:72:a0:e3:e1:63:a4:1c:
00:0e:4a:73:11:aa:37:2b:d0:4f:c7:55:bd:98:d0:14:75:35:
9a:3c:b6:35:77:c3:17:8b:f8:ae:88:65:ad:91:f9:0e:25:d0:
c2:0e:2a:f2:0d:a6:51:1f:44:52:c7:e2:ab:ad:57:b1:07:2a:
f0:d3:ec:ab:d1:85:2d:9b:09:1e:46:b0:29:41:f7:9d:b1:1b:
0f:38:c6:56:ee:75:7a:39:82:26:85:ea:25:b6:59:b5:1b:00:
bb:6f:98:d2:88:e6:13:fb:7d:8e:3e:d0:32:44:9f:98:3f:3b:
76:ad:65:ea:61:31:e1:a0:c6:c3:99:93:d7:97:ce:af:d9:f3:
e1:16:d6:2a:de:1a:de:79:75:ff:6c:2a:37:c5:01:28:45:65:
02:71:f8:1b:43:4c:74:ef:68:11:f1:60:f7:3a:96:a3:be:be:
3e:df:04:9c:12:85:d9:91:ed:40:e6:4e:d3:83:84:67:87:d3:
07:84:89:18:5e:d6:23:ea:a2:6b:e5:bb:40:50:47:62:1f:3c:
2e:5c:6b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:34:18 2024 by rpki-client on console-ams.rpki-client.org