Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
File: jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer (download)
Hash identifier: 0qCWJZN0sp61dy9ZDA7sjB7wLZkCptDcMLsw3tXPSvw=
Subject key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFB2957E8630995A0F24F82A1E7653F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate valid until: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:
1: AS: 210694
2: IP: 45.8.24.0/22
3: IP: 45.11.52.0/22
4: IP: 45.11.176.0/22
5: IP: 45.13.108.0/22
6: IP: 45.14.216.0/22
7: IP: 45.15.196.0/22
8: IP: 45.81.72.0/22
9: IP: 45.82.4.0/22
10: IP: 45.83.240.0/22
11: IP: 45.85.188.0/22
12: IP: 45.88.84.0/22
13: IP: 45.88.184.0/22
14: IP: 45.91.116.0/22
15: IP: 45.93.149.0 -- 45.93.151.255
16: IP: 45.132.120.0/22
17: IP: 45.133.140.0/22
18: IP: 45.146.60.0/22
19: IP: 45.146.192.0/22
20: IP: 45.152.4.0/22
21: IP: 45.153.200.0/22
22: IP: 91.212.20.0/24
23: IP: 91.212.27.0/24
24: IP: 91.212.38.0/24
25: IP: 91.212.45.0/24
26: IP: 193.39.215.0/24
27: IP: 193.39.246.0/24
28: IP: 193.39.250.0/24
29: IP: 193.41.32.0/24
30: IP: 195.80.230.0/23
31: IP: 195.82.132.0/23
32: IP: 2a06:7780::/29
33: IP: 2a0c:cc40::/29
34: IP: 2a0d:d000::/29
35: IP: 2a0e:4200::/29
36: IP: 2a0e:6300::/29
37: IP: 2a10:2380::/29
38: IP: 2a10:38c0::/29
39: IP: 2a10:3940::/29
40: IP: 2a10:39c0::/29
41: IP: 2a10:3a40::/29
42: IP: 2a10:3ac0::/29
43: IP: 2a10:3b40::/29
44: IP: 2a10:3bc0::/29
45: IP: 2a10:3c40::/29
46: IP: 2a10:3cc0::/29
47: IP: 2a10:3d40::/29
48: IP: 2a10:3dc0::/29
49: IP: 2a10:3e40::/29
50: IP: 2a10:5e80::/29
51: IP: 2a10:5f80::/29
52: IP: 2a10:6080::/29
53: IP: 2a10:6180::/29
54: IP: 2a10:6280::/29
55: IP: 2a10:6380::/29
56: IP: 2a10:6480::/29
57: IP: 2a10:6580::/29
58: IP: 2a10:6680::/29
59: IP: 2a10:6780::/29
60: IP: 2a10:6880::/29
61: IP: 2a10:6980::/29
62: IP: 2a10:7280::/29
Validation: OK
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fb:29:57:e8:63:09:95:a0:f2:4f:82:a1:e7:65:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:57:4b:50:1f:4f:7b:cb:fc:57:20:80:1c:1f:
3e:42:07:f8:50:23:c4:89:62:2d:44:d4:b2:d7:af:
55:7f:9d:e1:0f:a3:8f:cd:ff:d5:31:2f:85:4d:5b:
b3:f4:1c:73:50:25:4f:12:7a:d8:a3:bf:d5:2f:b0:
9c:70:ee:5b:b8:fa:7a:04:31:d4:9c:2a:65:b9:3d:
05:3a:57:9a:b0:9b:16:b7:70:cc:91:81:aa:b1:10:
21:f5:a7:20:23:38:43:0b:38:e1:3b:f1:09:71:d4:
86:1a:b3:c8:d7:65:ef:e1:8d:11:0a:b3:1c:0a:6e:
a5:94:23:b4:dc:c6:23:48:01:f2:be:27:8f:0b:c3:
10:1f:c8:3a:b8:3a:da:4a:a0:01:93:7b:66:eb:02:
f2:b6:00:0a:97:7f:b7:96:c9:e9:c7:2b:3b:47:c3:
0c:e9:35:b7:e8:6b:51:d2:8e:01:27:60:e3:59:c4:
50:0f:8f:08:cf:7f:78:e7:90:25:61:35:ae:17:74:
38:30:bc:7d:73:9a:7f:50:70:da:cf:fb:93:74:fd:
2c:d5:bf:2c:8a:7d:e5:0b:db:ee:f8:ad:5d:10:20:
6f:2a:d1:d4:35:57:a6:5a:04:8b:f3:2b:12:ad:51:
cc:bc:10:f6:a7:2c:9f:6f:54:13:cb:e3:6d:08:d2:
14:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.24.0/22
45.11.52.0/22
45.11.176.0/22
45.13.108.0/22
45.14.216.0/22
45.15.196.0/22
45.81.72.0/22
45.82.4.0/22
45.83.240.0/22
45.85.188.0/22
45.88.84.0/22
45.88.184.0/22
45.91.116.0/22
45.93.149.0-45.93.151.255
45.132.120.0/22
45.133.140.0/22
45.146.60.0/22
45.146.192.0/22
45.152.4.0/22
45.153.200.0/22
91.212.20.0/24
91.212.27.0/24
91.212.38.0/24
91.212.45.0/24
193.39.215.0/24
193.39.246.0/24
193.39.250.0/24
193.41.32.0/24
195.80.230.0/23
195.82.132.0/23
IPv6:
2a06:7780::/29
2a0c:cc40::/29
2a0d:d000::/29
2a0e:4200::/29
2a0e:6300::/29
2a10:2380::/29
2a10:38c0::/29
2a10:3940::/29
2a10:39c0::/29
2a10:3a40::/29
2a10:3ac0::/29
2a10:3b40::/29
2a10:3bc0::/29
2a10:3c40::/29
2a10:3cc0::/29
2a10:3d40::/29
2a10:3dc0::/29
2a10:3e40::/29
2a10:5e80::/29
2a10:5f80::/29
2a10:6080::/29
2a10:6180::/29
2a10:6280::/29
2a10:6380::/29
2a10:6480::/29
2a10:6580::/29
2a10:6680::/29
2a10:6780::/29
2a10:6880::/29
2a10:6980::/29
2a10:7280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210694
Signature Algorithm: sha256WithRSAEncryption
2e:70:54:e4:76:52:9b:b2:1c:1a:39:3c:97:cb:e3:32:e6:59:
1c:ac:b7:3a:95:c6:db:45:93:50:d0:1f:45:51:8e:5b:82:c4:
e3:c8:c3:f6:8a:f2:8e:00:bf:bf:e2:c7:81:dc:f1:ce:a0:24:
b7:b0:69:4c:d2:b2:57:65:8d:85:b7:e6:70:58:70:66:7e:1c:
c8:e3:28:91:1a:9a:14:47:41:cb:94:dc:1b:15:41:27:f5:ac:
85:9e:37:4f:6f:da:7a:a0:61:ca:09:d6:a7:6a:a3:de:44:ea:
0f:b4:a8:5f:95:25:82:c0:72:e0:48:4b:8e:7c:87:46:37:d7:
ae:25:e7:73:8f:e8:94:8e:90:d8:cc:7d:f9:4d:0a:50:c3:ae:
b5:d8:ac:62:7b:8f:db:ef:d7:27:da:e2:24:4e:05:ce:17:69:
21:73:63:73:86:ad:41:e7:aa:a3:fb:e6:b4:89:98:e6:c3:bf:
1d:e2:35:81:8f:4e:77:1e:40:00:bb:b3:3d:19:10:27:f7:36:
a7:cf:6b:72:09:8f:6e:d4:78:ee:a3:52:84:a6:55:f5:e7:75:
0f:af:15:b8:7e:7e:34:2d:3f:c6:88:52:33:9d:4f:21:93:e1:
ae:6c:3c:d9:71:85:b5:17:bd:1c:24:5a:d9:9c:5f:cf:86:32:
99:f4:c7:f3
-----BEGIN CERTIFICATE-----
MIIHNTCCBh2gAwIBAgISAYVu+ylX6GMJlaDyT4Kh52U/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjAxNzEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTFjMTE2NThkMjA0MWVhZjI1MDJmZTU0MDhlZDQ5M2JiZDRmMzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFdLUB9Pe8v8VyCAHB8+Qgf4UCPE
iWItRNSy169Vf53hD6OPzf/VMS+FTVuz9BxzUCVPEnrYo7/VL7CccO5buPp6BDHU
nCpluT0FOleasJsWt3DMkYGqsRAh9acgIzhDCzjhO/EJcdSGGrPI12Xv4Y0RCrMc
Cm6llCO03MYjSAHyviePC8MQH8g6uDraSqABk3tm6wLytgAKl3+3lsnpxys7R8MM
6TW36GtR0o4BJ2DjWcRQD48Iz39455AlYTWuF3Q4MLx9c5p/UHDaz/uTdP0s1b8s
in3lC9vu+K1dECBvKtHUNVemWgSL8ysSrVHMvBD2pyyfb1QTy+NtCNIUZQIDAQAB
o4IEQTCCBD0wHQYDVR0OBBYEFI4cEWWNIEHq8lAv5UCO1JO71PMYMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyLzcwYmY4
Yi1kOGM0LTQwYzMtOTAyMi02MzM0OGNkYmYwMjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvNzBiZjhi
LWQ4YzQtNDBjMy05MDIyLTYzMzQ4Y2RiZjAyNC8xL2pod1JaWTBnUWVyeVVDX2xR
STdVazd2VTh4Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBvgYIKwYB
BQUHAQcBAf8EggGtMIIBqTCBwwQCAAEwgbwDBAItCBgDBAItCzQDBAItC7ADBAIt
DWwDBAItDtgDBAItD8QDBAItUUgDBAItUgQDBAItU/ADBAItVbwDBAItWFQDBAIt
WLgDBAItW3QwDAMEAC1dlQMEAy1dkAMEAi2EeAMEAi2FjAMEAi2SPAMEAi2SwAME
Ai2YBAMEAi2ZyAMEAFvUFAMEAFvUGwMEAFvUJgMEAFvULQMEAMEn1wMEAMEn9gME
AMEn+gMEAMEpIAMEAcNQ5gMEAcNShDCB4AQCAAIwgdkDBQMqBneAAwUDKgzMQAMF
AyoN0AADBQMqDkIAAwUDKg5jAAMFAyoQI4ADBQMqEDjAAwUDKhA5QAMFAyoQOcAD
BQMqEDpAAwUDKhA6wAMFAyoQO0ADBQMqEDvAAwUDKhA8QAMFAyoQPMADBQMqED1A
AwUDKhA9wAMFAyoQPkADBQMqEF6AAwUDKhBfgAMFAyoQYIADBQMqEGGAAwUDKhBi
gAMFAyoQY4ADBQMqEGSAAwUDKhBlgAMFAyoQZoADBQMqEGeAAwUDKhBogAMFAyoQ
aYADBQMqEHKAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM3BjANBgkqhkiG9w0B
AQsFAAOCAQEALnBU5HZSm7IcGjk8l8vjMuZZHKy3OpXG20WTUNAfRVGOW4LE48jD
9oryjgC/v+LHgdzxzqAkt7BpTNKyV2WNhbfmcFhwZn4cyOMokRqaFEdBy5TcGxVB
J/WshZ43T2/aeqBhygnWp2qj3kTqD7SoX5UlgsBy4EhLjnyHRjfXriXnc4/olI6Q
2Mx9+U0KUMOutdisYnuP2+/XJ9riJE4FzhdpIXNjc4atQeeqo/vmtImY5sO/HeI1
gY9Odx5AALuzPRkQJ/c2p89rcgmPbtR47qNShKZV9ed1D68VuH5+NC0/xohSM51P
IZPhrmw82XGFtRe9HCRa2Zxfz4YymfTH8w==
-----END CERTIFICATE-----
Generated at Thu Feb 2 14:51:05 2023 by rpki-client.