Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zzf6Z6ZmZklWh0mwNQL6J08DCxY.cer
File: Zzf6Z6ZmZklWh0mwNQL6J08DCxY.cer (raw, json)
Hash identifier: WKDudilPuan6BifPTeC8XOORx+LmbVOqJpwS5G6raJc=
Subject key identifier: 67:37:FA:67:A6:66:66:49:56:87:49:B0:35:02:FA:27:4F:03:0B:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A7ED7CD126
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/bb6563-9bf1-4aa6-9c6f-a1726feb9cec/1/Zzf6Z6ZmZklWh0mwNQL6J08DCxY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/bb6563-9bf1-4aa6-9c6f-a1726feb9cec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:06:38 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 30962
AS: 31243
AS: 39123
IP: 62.108.32.0/19
IP: 84.19.0.0/19
IP: 89.107.64.0/21
IP: 91.190.144.0/21
IP: 93.190.88.0/21
IP: 185.147.216.0/22
IP: 185.148.68.0/22
IP: 194.113.216.0/23
IP: 195.62.20.0/23
IP: 195.191.114.0/23
IP: 195.225.240.0/22
IP: 2a00:f70::/32
IP: 2a03:f200::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 721243918630 (0xa7ed7cd126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:06:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6737fa67a6666649568749b03502fa274f030b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c7:f6:3c:42:9b:5b:c8:88:58:6e:2e:33:11:
40:94:03:3f:48:9f:9d:70:6f:b3:c9:45:f2:9b:89:
9e:87:48:25:41:ef:24:5e:98:d6:b5:fd:33:45:21:
ed:ac:63:77:9d:2b:ba:3d:42:2d:c4:4c:26:e3:e9:
4c:cf:24:e7:a0:08:ef:32:b1:46:c3:59:9f:1f:f1:
6f:87:51:d6:78:d4:30:65:f2:87:b2:d7:33:12:47:
04:60:dd:ab:3e:ea:8b:11:9c:08:ab:8d:5e:02:48:
43:dc:ea:32:fd:b4:f5:4a:d5:88:1d:71:ff:3e:5e:
49:6e:1d:fa:66:f2:56:b2:f0:81:11:38:e5:ea:ef:
ba:42:6f:d8:0f:ee:17:24:36:12:cc:cd:15:88:c4:
f4:83:f8:6a:3e:6d:da:a2:4b:6d:3c:af:96:bb:81:
2a:5c:20:27:03:fd:a0:db:8e:74:b0:a0:3a:e5:32:
25:e4:1b:97:a8:c4:fb:60:22:b7:87:a5:c2:cc:f5:
51:3b:4d:1a:80:4a:34:c4:7f:05:a5:79:4d:ab:66:
85:94:4b:56:61:c5:d3:b0:9d:27:fb:04:32:c0:53:
ab:a0:4c:db:4c:d9:8c:6d:ca:2d:8e:bb:e4:12:a0:
62:41:28:82:0e:3a:a5:1f:d3:0f:b6:b9:ae:71:76:
27:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:37:FA:67:A6:66:66:49:56:87:49:B0:35:02:FA:27:4F:03:0B:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bb6563-9bf1-4aa6-9c6f-a1726feb9cec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bb6563-9bf1-4aa6-9c6f-a1726feb9cec/1/Zzf6Z6ZmZklWh0mwNQL6J08DCxY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.32.0/19
84.19.0.0/19
89.107.64.0/21
91.190.144.0/21
93.190.88.0/21
185.147.216.0/22
185.148.68.0/22
194.113.216.0/23
195.62.20.0/23
195.191.114.0/23
195.225.240.0/22
IPv6:
2a00:f70::/32
2a03:f200::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30962
31243
39123
Signature Algorithm: sha256WithRSAEncryption
9d:ba:0a:94:36:f9:47:fe:98:bd:3a:50:10:cd:26:74:36:cc:
4f:d1:d2:73:b6:e4:6e:13:e3:66:41:4f:6b:71:36:1d:09:94:
2c:69:fc:bc:32:d0:b8:e2:82:5b:7f:45:6c:d4:e4:61:c9:d2:
b0:5b:82:23:09:37:1a:70:42:4b:69:6e:f5:f5:b2:78:c1:d7:
b5:9c:e2:48:9b:f7:a2:1d:a4:d9:18:a1:44:3e:a8:29:3f:f0:
8a:c2:4b:1d:28:65:f1:ed:42:46:27:83:f2:2b:1d:b6:e8:62:
16:6e:9c:41:48:f1:de:6f:30:b2:af:cb:6e:7c:b0:3a:ec:89:
73:76:81:08:e5:2a:12:a2:0e:65:a7:e0:49:5b:cc:f1:97:3b:
9d:17:a0:19:1b:ac:c6:cf:86:5f:af:b3:c9:6a:a0:70:50:8a:
5d:8c:3f:1e:60:b3:04:97:e8:ec:74:e5:f6:0e:4a:42:42:fa:
b7:9c:8e:77:3b:97:fa:73:d7:91:3f:aa:cd:f6:40:2e:e1:72:
6c:75:8e:19:e2:40:26:af:2e:fa:24:e2:10:cd:5f:09:1c:b9:
2e:3f:f6:42:8c:f4:62:b2:7b:cf:0b:b9:6d:33:18:bb:d5:76:
f0:10:dc:e3:58:b8:b0:e1:f3:09:c8:15:dd:30:82:0e:8c:9e:
b4:1f:df:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:30 2024 by rpki-client on console-fra.rpki-client.org