Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
File: XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer (raw, json)
Hash identifier: OVVmuocblFukVt0iZFMoFiHYODGCvYX9XIUAO4Tuc+w=
Subject key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E46EE39983A5BC3160D836BCF672C992C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 16 Mar 2024 11:03:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200282
IP: 2.58.80.0/22
IP: 5.181.32.0/22
IP: 5.183.32.0/22
IP: 5.252.140.0/22
IP: 31.222.254.0/24
IP: 45.66.136.0/22
IP: 45.80.152.0/22
IP: 45.88.196.0/22
IP: 45.89.204.0/22
IP: 45.90.228.0/22
IP: 45.93.124.0/22
IP: 45.128.160.0/22
IP: 45.132.240.0/22
IP: 45.141.220.0/22
IP: 45.143.80.0/22
IP: 45.147.72.0/22
IP: 45.155.44.0/22
IP: 46.17.172.0/22
IP: 62.3.46.0/24
IP: 80.65.208.0/22
IP: 81.22.36.0/22
IP: 83.136.216.0/22
IP: 83.171.248.0/22
IP: 84.21.168.0/22
IP: 85.208.156.0/22
IP: 88.218.164.0/22
IP: 91.196.68.0/22
IP: 91.247.187.0/24
IP: 92.118.52.0/22
IP: 93.177.96.0/22
IP: 94.101.112.0/22
IP: 95.214.216.0/22
IP: 109.236.60.0/22
IP: 141.98.152.0/22
IP: 146.19.161.0/24
IP: 152.89.88.0/22
IP: 176.113.76.0/22
IP: 178.212.32.0/22
IP: 185.193.16.0/22
IP: 192.145.36.0/22
IP: 193.3.173.0/24
IP: 193.46.240.0/22
IP: 193.148.72.0/22
IP: 193.149.24.0/22
IP: 194.5.152.0/22
IP: 194.15.108.0/22
IP: 194.53.108.0/22
IP: 194.61.28.0/22
IP: 194.110.143.0/24
IP: 194.110.193.0/24
IP: 194.110.200.0/24
IP: 194.110.210.0/24
IP: 194.180.176.0/22
IP: 195.7.4.0/22
IP: 195.96.142.0/24
IP: 213.190.4.0/22
IP: 2a05:4300::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:46:ee:39:98:3a:5b:c3:16:0d:83:6b:cf:67:2c:99:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 16 11:03:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:53:24:11:2d:aa:60:42:4a:09:1c:68:d1:
18:69:42:43:c3:d1:3a:99:3a:ae:c2:c2:54:7e:6d:
01:fe:69:f8:c2:28:3c:1a:57:0f:b4:8b:5e:67:0a:
8f:ba:db:15:a9:51:b7:99:7d:1f:21:a3:7d:c0:68:
39:22:c7:b2:ee:b1:e3:ef:dd:97:c8:91:21:40:75:
55:51:8f:e6:83:25:1a:bc:d8:64:e8:cb:27:b9:e8:
15:d8:39:a3:39:c9:eb:2b:de:40:11:9d:f4:ad:43:
7c:6d:fa:5a:9b:a7:1a:6c:17:cf:19:bf:86:7e:bf:
88:f8:fa:a7:6a:fc:93:18:d9:46:b1:e3:58:8c:9a:
51:de:c9:c2:14:0c:30:66:b2:6e:1f:b6:62:29:91:
a8:65:d1:1a:ad:d0:bd:cb:1c:2a:55:be:41:4b:57:
02:b4:64:b1:b6:04:da:92:4d:0c:66:5f:69:bb:5c:
bf:d7:a1:12:1f:80:05:b2:11:f1:60:4f:49:62:47:
e5:3d:21:ef:b5:8d:4f:2a:8e:53:f1:2c:48:11:c2:
4a:3f:18:eb:0c:5d:58:45:e5:62:59:4d:81:17:ce:
b2:82:e1:cb:cb:af:4a:57:b7:57:ed:e6:a7:db:84:
0e:3d:15:60:48:e8:7c:5e:4a:98:2f:ec:68:e6:41:
06:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.80.0/22
5.181.32.0/22
5.183.32.0/22
5.252.140.0/22
31.222.254.0/24
45.66.136.0/22
45.80.152.0/22
45.88.196.0/22
45.89.204.0/22
45.90.228.0/22
45.93.124.0/22
45.128.160.0/22
45.132.240.0/22
45.141.220.0/22
45.143.80.0/22
45.147.72.0/22
45.155.44.0/22
46.17.172.0/22
62.3.46.0/24
80.65.208.0/22
81.22.36.0/22
83.136.216.0/22
83.171.248.0/22
84.21.168.0/22
85.208.156.0/22
88.218.164.0/22
91.196.68.0/22
91.247.187.0/24
92.118.52.0/22
93.177.96.0/22
94.101.112.0/22
95.214.216.0/22
109.236.60.0/22
141.98.152.0/22
146.19.161.0/24
152.89.88.0/22
176.113.76.0/22
178.212.32.0/22
185.193.16.0/22
192.145.36.0/22
193.3.173.0/24
193.46.240.0/22
193.148.72.0/22
193.149.24.0/22
194.5.152.0/22
194.15.108.0/22
194.53.108.0/22
194.61.28.0/22
194.110.143.0/24
194.110.193.0/24
194.110.200.0/24
194.110.210.0/24
194.180.176.0/22
195.7.4.0/22
195.96.142.0/24
213.190.4.0/22
IPv6:
2a05:4300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200282
Signature Algorithm: sha256WithRSAEncryption
89:60:53:b0:c2:ff:63:b5:28:d2:1a:43:1e:4a:2d:51:9f:15:
01:c8:c7:49:b7:72:20:a1:9b:30:77:7b:fa:5c:27:bb:ec:22:
13:cf:a5:ff:49:c1:22:f1:8e:a0:12:b9:75:fa:1c:f9:7d:b1:
02:a4:bd:e0:6a:8d:5b:c9:19:66:9f:9f:0d:aa:a4:e7:d1:01:
22:0f:db:1b:4c:27:25:f8:a6:f5:87:2e:54:81:04:65:a0:38:
ea:ca:16:98:7b:c3:3f:b3:40:b6:4c:4d:ab:49:a1:3f:81:de:
20:8c:98:91:dd:31:13:16:b4:c9:33:1a:e6:2f:8a:9f:39:71:
63:b9:02:7d:b9:6d:a6:22:e9:dd:6b:00:b1:dd:77:c7:ab:92:
d4:77:b1:42:9c:77:8d:ee:34:38:7a:af:02:82:70:e0:59:bb:
69:87:60:ca:ab:19:d5:45:99:22:5f:19:d6:3c:49:6c:cb:df:
cf:db:f2:0b:98:75:5b:16:52:2d:fa:97:12:d9:ec:10:2e:3c:
30:77:3b:2b:bb:e6:5d:83:de:25:59:37:e7:39:b7:dc:9f:52:
ed:7e:45:b9:5c:e6:2f:d0:8c:c5:24:80:3e:a6:81:8a:c6:77:
86:12:75:ec:4c:1e:32:83:da:26:05:11:cc:36:f5:2d:f5:01:
15:7b:53:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:22:25 2024 by rpki-client on console-ams.rpki-client.org