Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YB2c0uMMPqK6WGzYHz6yahoAD1Y.cer
File: YB2c0uMMPqK6WGzYHz6yahoAD1Y.cer (raw, json)
Hash identifier: ptxPkTUAByWevZ2THeQta2DmoVcKcXgU1gMbVb9o/fM=
Subject key identifier: 60:1D:9C:D2:E3:0C:3E:A2:BA:58:6C:D8:1F:3E:B2:6A:1A:00:0F:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AC2ED8414C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/YB2c0uMMPqK6WGzYHz6yahoAD1Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 22 Jan 2022 19:38:21 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 39619
AS: 41186
AS: 48028
AS: 209675
IP: 5.181.180.0/22
IP: 185.176.92.0/22
IP: 185.216.104.0/22
IP: 185.229.220.0/22
IP: 2a04:a700::/29
IP: 2a05:5480::/29
IP: 2a06:88c0::/29
IP: 2a09:dc80::/29
IP: 2a0b:b5c0::/29
IP: 2a0d:d200::/29
IP: 2a0e:a000::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 739520299340 (0xac2ed8414c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 22 19:38:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=601d9cd2e30c3ea2ba586cd81f3eb26a1a000f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:18:fa:26:0d:66:c9:1b:d1:bf:58:5e:d3:e5:
fb:7e:0c:c7:e2:8b:d4:14:48:92:39:fc:8f:e3:9c:
29:94:1b:ce:06:7c:87:25:21:30:96:0a:fa:3b:0a:
be:f8:e7:cf:18:1e:ff:a9:63:0a:49:d4:c1:dd:da:
3d:8c:6d:6d:4b:d5:66:18:5b:81:f4:15:62:aa:3e:
f1:58:bd:f2:f8:aa:a8:6e:6a:96:12:93:d5:b2:dd:
08:62:aa:0e:50:64:3e:70:99:74:b9:0a:f4:bb:1c:
c8:c8:b1:af:1c:30:97:0c:41:25:8f:33:2c:6c:b4:
09:99:fd:88:3c:38:cc:92:f2:f0:dd:74:7b:8d:e9:
95:42:34:9e:d8:8e:67:f7:9a:9a:1f:dd:8f:32:c9:
8d:39:a7:2c:27:bf:35:ac:76:1a:04:6d:67:ca:44:
db:42:e4:85:89:26:85:9f:9d:30:61:09:d7:47:7f:
2c:16:85:26:ed:e0:0e:b6:75:5e:7f:08:d0:f5:e0:
77:3e:02:f2:5e:f2:fa:60:b4:d2:8f:c2:81:c6:5f:
b0:44:65:6a:81:a3:80:b1:2a:1c:1e:f9:7a:d1:0c:
8e:12:03:d0:69:98:b8:4d:0c:d3:50:c6:1f:29:ac:
e8:f2:5f:d1:00:bd:98:1f:a8:98:be:39:4b:77:02:
a5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1D:9C:D2:E3:0C:3E:A2:BA:58:6C:D8:1F:3E:B2:6A:1A:00:0F:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/YB2c0uMMPqK6WGzYHz6yahoAD1Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.180.0/22
185.176.92.0/22
185.216.104.0/22
185.229.220.0/22
IPv6:
2a04:a700::/29
2a05:5480::/29
2a06:88c0::/29
2a09:dc80::/29
2a0b:b5c0::/29
2a0d:d200::/29
2a0e:a000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39619
41186
48028
209675
Signature Algorithm: sha256WithRSAEncryption
ae:d2:42:f8:5e:5b:6d:d5:bf:df:18:00:c3:67:ed:e5:c3:c2:
d3:c3:2a:c7:a6:ff:3d:94:1f:a6:67:3a:87:1f:6a:8d:58:e4:
ad:34:2b:70:57:f2:9b:f2:b4:d9:1c:1e:52:59:ba:c7:d0:c8:
bc:df:fa:49:45:bf:c0:6f:05:67:96:5e:12:27:99:fa:8d:d3:
f0:4f:27:65:c8:80:38:a3:0e:c6:98:d1:2d:d3:cd:56:bc:cc:
88:cd:23:a6:ab:85:57:5c:14:26:8c:22:82:cd:98:43:35:72:
82:a5:3a:53:3d:24:14:0c:96:64:8e:3b:e7:fc:c9:32:e5:56:
74:b7:1e:ae:4e:5a:f6:31:3e:0c:e2:15:40:6b:bf:a0:c5:fa:
ef:bc:6e:66:6c:01:16:5d:e9:6a:9d:b7:5a:e9:2f:59:78:a2:
4e:1a:5c:1a:8f:70:50:46:d8:62:cc:2a:8c:ba:96:13:80:fb:
e3:ed:e5:51:8e:26:5b:d2:5a:bd:74:19:aa:6f:75:ef:ce:a8:
10:09:db:d2:7d:1b:e6:a5:8c:e1:6d:63:a3:9b:dc:b4:9d:49:
bb:4a:7b:62:99:64:5b:4d:44:a1:71:48:2f:d2:67:61:3d:a8:
dd:21:60:dd:16:b3:21:8e:d2:45:ee:47:60:9b:99:e6:17:65:
f6:2f:3d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:13 2023 by rpki-client on console-ams.rpki-client.org