Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
File: gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer (raw, json)
Hash identifier: DL8obyVksVb7g6aNuOgTCyotDSxxlAv+bx1uaT0jz0Q=
Subject key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AED0A3B6FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 18 Mar 2022 10:46:24 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 2.57.176.0/22
IP: 45.135.248.0/22
IP: 45.140.236.0/22
IP: 45.142.236.0/22
IP: 45.146.80.0/22
IP: 45.148.36.0/22
IP: 45.149.100.0/22
IP: 45.149.184.0/22
IP: 45.151.44.0/22
IP: 45.152.240.0/22
IP: 45.153.4.0/22
IP: 45.154.104.0/22
IP: 45.155.16.0/22
IP: 45.157.16.0/22
IP: 45.158.8.0/22
IP: 45.158.168.0/22
IP: 91.198.66.0/24
IP: 91.198.77.0/24
IP: 91.198.115.0/24
IP: 91.198.123.0/24
IP: 91.199.163.0/24
IP: 91.199.166.0/24
IP: 91.199.168.0/24
IP: 91.199.172.0/24
IP: 91.206.2.0/24
IP: 141.98.156.0/22
IP: 147.78.120.0/22
IP: 152.89.248.0/22
IP: 176.105.224.0/22
IP: 185.155.220.0/22
IP: 192.166.82.0/23
IP: 192.166.114.0/23
IP: 193.0.234.0/23
IP: 193.5.10.0/23
IP: 193.25.207.0/24
IP: 193.29.96.0/22
IP: 193.111.116.0/23
IP: 193.111.124.0/23
IP: 193.142.4.0/24
IP: 193.142.6.0/24
IP: 193.142.18.0/24
IP: 193.142.22.0/24
IP: 193.151.180.0/22
IP: 193.161.206.0/24
IP: 193.161.245.0/24
IP: 193.164.1.0/24
IP: 193.164.10.0/24
IP: 193.176.54.0/23
IP: 193.176.128.0/23
IP: 194.5.146.0 -- 194.5.149.255
IP: 194.104.156.0/24
IP: 194.104.158.0/24
IP: 194.105.5.0/24
IP: 194.105.21.0/24
IP: 194.113.222.0/23
IP: 194.113.226.0/23
IP: 194.147.4.0/22
IP: 195.20.98.0/23
IP: 195.20.104.0/23
IP: 195.206.230.0/23
IP: 195.206.234.0/23
IP: 212.80.192.0/22
IP: 2a03:8b80::/29
IP: 2a03:f100::/29
IP: 2a04:7a80::/29
IP: 2a04:f3c0::/29
IP: 2a04:f700::/29
IP: 2a05:5040::/29
IP: 2a05:b600::/29
IP: 2a05:c580::/29
IP: 2a06:7680::/29
IP: 2a06:99c0::/29
IP: 2a07:6a40::/29
IP: 2a07:fc40::/29
IP: 2a09:40::/29
IP: 2a09:c0::/29
IP: 2a09:1c0::/29
IP: 2a09:240::/29
IP: 2a09:2240::/29
IP: 2a09:22c0::/29
IP: 2a09:fe80::/29
IP: 2a0a:5700::/29
IP: 2a0b:2e40::/29
IP: 2a0b:ca00::/29
IP: 2a0c:1c00::/29
IP: 2a0c:2cc0::/29
IP: 2a0c:43c0::/29
IP: 2a0c:4e00::/29
IP: 2a10:8740::/29
IP: 2a10:e180::/29
IP: 2a10:e280::/29
IP: 2a10:ec80::/29
IP: 2a10:ed80::/29
IP: 2a10:ee80::/29
IP: 2a10:ef80::/29
IP: 2a10:f080::/29
IP: 2a10:f100::/29
IP: 2a10:f180::/29
IP: 2a10:f280::/29
IP: 2a10:fd80::/29
IP: 2a10:fe80::/29
IP: 2a10:ff80::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 750824699643 (0xaed0a3b6fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 18 10:46:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bb:4e:bb:ed:7e:a0:99:6f:c2:81:38:a5:6f:
76:02:8f:12:f5:ed:3c:cc:5f:7b:78:07:8f:5e:2c:
7c:5e:ec:2a:3d:38:bc:58:a6:90:5b:2d:15:ce:d3:
60:f1:c7:d7:b9:17:a9:7e:3d:a8:4e:7a:05:ff:09:
12:0e:e2:d5:ef:c8:48:3a:2e:47:4f:9a:bc:63:f9:
3b:7b:3f:a2:93:7a:c3:8e:b6:ac:99:b3:3e:09:7f:
9d:b4:58:5e:e4:9a:86:b4:7b:f9:2c:7b:67:59:e2:
1f:07:23:b5:3f:d2:28:c6:74:ef:87:d5:2b:d6:bd:
fb:b8:81:ff:86:9d:c5:f0:2a:50:3c:33:b0:37:e2:
e5:bb:a3:a6:60:62:21:0f:05:bd:2b:3f:03:22:32:
5f:74:b2:8e:5d:49:5d:3c:8d:85:37:ba:03:d9:ac:
60:38:2d:f0:01:ef:4e:17:c8:ae:ce:e4:34:b8:2d:
fc:64:99:c1:c9:ff:7e:2b:e0:e0:29:af:98:01:5b:
39:86:8e:e9:31:d7:c7:4f:83:84:6b:6f:2b:69:77:
d9:3d:a4:ad:81:23:6e:e5:c7:39:7a:81:6b:17:4e:
63:3a:64:e3:f6:8a:8c:51:8d:ca:f6:0e:9a:2b:ef:
29:c0:66:40:10:79:ed:57:f3:eb:8b:cb:e2:fa:07:
10:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.176.0/22
45.135.248.0/22
45.140.236.0/22
45.142.236.0/22
45.146.80.0/22
45.148.36.0/22
45.149.100.0/22
45.149.184.0/22
45.151.44.0/22
45.152.240.0/22
45.153.4.0/22
45.154.104.0/22
45.155.16.0/22
45.157.16.0/22
45.158.8.0/22
45.158.168.0/22
91.198.66.0/24
91.198.77.0/24
91.198.115.0/24
91.198.123.0/24
91.199.163.0/24
91.199.166.0/24
91.199.168.0/24
91.199.172.0/24
91.206.2.0/24
141.98.156.0/22
147.78.120.0/22
152.89.248.0/22
176.105.224.0/22
185.155.220.0/22
192.166.82.0/23
192.166.114.0/23
193.0.234.0/23
193.5.10.0/23
193.25.207.0/24
193.29.96.0/22
193.111.116.0/23
193.111.124.0/23
193.142.4.0/24
193.142.6.0/24
193.142.18.0/24
193.142.22.0/24
193.151.180.0/22
193.161.206.0/24
193.161.245.0/24
193.164.1.0/24
193.164.10.0/24
193.176.54.0/23
193.176.128.0/23
194.5.146.0-194.5.149.255
194.104.156.0/24
194.104.158.0/24
194.105.5.0/24
194.105.21.0/24
194.113.222.0/23
194.113.226.0/23
194.147.4.0/22
195.20.98.0/23
195.20.104.0/23
195.206.230.0/23
195.206.234.0/23
212.80.192.0/22
IPv6:
2a03:8b80::/29
2a03:f100::/29
2a04:7a80::/29
2a04:f3c0::/29
2a04:f700::/29
2a05:5040::/29
2a05:b600::/29
2a05:c580::/29
2a06:7680::/29
2a06:99c0::/29
2a07:6a40::/29
2a07:fc40::/29
2a09:40::/29
2a09:c0::/29
2a09:1c0::/29
2a09:240::/29
2a09:2240::/29
2a09:22c0::/29
2a09:fe80::/29
2a0a:5700::/29
2a0b:2e40::/29
2a0b:ca00::/29
2a0c:1c00::/29
2a0c:2cc0::/29
2a0c:43c0::/29
2a0c:4e00::/29
2a10:8740::/29
2a10:e180::/29
2a10:e280::/29
2a10:ec80::/29
2a10:ed80::/29
2a10:ee80::/29
2a10:ef80::/29
2a10:f080::/29
2a10:f100::/29
2a10:f180::/29
2a10:f280::/29
2a10:fd80::/29
2a10:fe80::/29
2a10:ff80::/29
Signature Algorithm: sha256WithRSAEncryption
56:13:74:98:f1:27:7f:92:4d:22:76:61:f0:71:31:91:18:3d:
61:4b:83:4d:fa:9e:df:d6:46:2c:6b:82:43:f7:7d:26:c1:de:
ce:c0:9a:c6:6d:7d:1b:b3:da:fb:8e:64:60:b6:66:4c:7a:05:
c7:4f:31:bc:77:ff:42:80:fb:17:f2:57:d3:a5:1b:b7:4d:a8:
4b:90:4d:c4:87:2c:da:86:75:10:f9:b5:01:01:94:52:c6:d8:
de:af:28:3d:fa:ea:d2:5a:7e:9c:68:9b:29:c3:22:1b:2c:17:
de:99:16:13:ac:3c:f9:09:0d:f5:bc:89:57:b7:91:c4:3d:56:
54:20:dd:0e:5f:ee:0d:99:57:a3:74:98:1c:ea:96:3a:e1:ca:
73:e7:9b:1a:4d:f4:65:13:75:16:b8:bb:44:d9:ae:90:73:81:
9b:a5:90:ec:df:83:01:73:22:a9:f6:4f:33:4c:e0:16:ab:fe:
15:f3:ca:b7:bb:c8:e9:1e:b9:d0:69:df:71:48:4c:e8:11:b8:
0d:5c:a3:41:e3:ac:38:5d:74:0e:c1:74:8f:52:d1:5a:b6:67:
77:8f:05:e0:98:e8:9d:5f:da:a3:0d:2f:9a:32:da:b0:8d:e8:
50:cb:33:6a:0e:39:03:85:0f:6c:e1:89:8d:ad:92:e5:d7:36:
51:87:fa:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:58 2023 by rpki-client on console-ams.rpki-client.org