Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mWLRZaTCU_mzSrAQ_-NP8fRUV4c.cer
File: mWLRZaTCU_mzSrAQ_-NP8fRUV4c.cer (raw, json)
Hash identifier: dmcRVRGCC9UTsjlAY+heA0/UEJ+Fpx/UV1iTvsARjfI=
Subject key identifier: 99:62:D1:65:A4:C2:53:F9:B3:4A:B0:10:FF:E3:4F:F1:F4:54:57:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A0BD95DA7D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/e3c868-3199-4f21-9109-5aaacb724f9c/1/mWLRZaTCU_mzSrAQ_-NP8fRUV4c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/e3c868-3199-4f21-9109-5aaacb724f9c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:01:01 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 49385
IP: 94.231.220.0/22
IP: 2a11:9000::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 690375481981 (0xa0bd95da7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:01:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9962d165a4c253f9b34ab010ffe34ff1f4545787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c8:bf:1f:7d:71:30:19:f4:91:30:68:1a:a0:
8b:44:7d:36:b5:f6:4c:1a:e7:30:f9:ac:90:51:56:
f3:00:f6:04:11:06:0a:ed:f1:95:2c:0a:a7:11:c4:
b4:8d:ae:7c:4e:7c:99:e2:26:9e:e4:07:c2:45:82:
a3:4c:db:14:bb:c4:e8:d3:ab:84:1b:b5:62:be:a9:
12:d4:4f:31:ea:ae:e4:c0:76:00:47:71:e7:7b:0e:
bb:58:2e:1a:26:62:73:69:6e:a3:bd:d7:be:d7:e3:
fe:21:8c:2d:1f:8a:78:7c:72:cd:bf:ca:9c:d4:b4:
5f:6b:65:22:4c:3f:fc:2e:a4:f1:1c:ee:c5:bb:a6:
19:56:11:5a:99:b3:82:d3:c5:05:3d:96:77:de:28:
e8:c2:5e:5a:13:45:2a:ef:5a:f8:9b:c2:62:be:ce:
61:0f:fb:75:c2:aa:57:87:9f:92:29:3f:32:9b:23:
ee:bb:ad:05:e2:be:76:a7:27:5f:77:5b:49:24:09:
97:ea:93:0e:4d:10:e3:ba:64:9f:0e:fa:e5:9a:15:
a8:d7:90:f0:55:82:c2:c2:b9:4c:01:b8:6a:0a:95:
72:b9:cc:31:dd:31:60:32:0f:5a:d6:9c:a4:44:20:
21:dc:3e:c7:27:af:98:f7:13:06:58:85:c8:e6:4b:
b2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:62:D1:65:A4:C2:53:F9:B3:4A:B0:10:FF:E3:4F:F1:F4:54:57:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e3c868-3199-4f21-9109-5aaacb724f9c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e3c868-3199-4f21-9109-5aaacb724f9c/1/mWLRZaTCU_mzSrAQ_-NP8fRUV4c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.220.0/22
IPv6:
2a11:9000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49385
Signature Algorithm: sha256WithRSAEncryption
67:66:1a:6a:1e:ef:91:46:ce:ef:24:0a:01:fd:b8:0a:b1:69:
c8:6c:7e:23:84:cf:ac:29:3d:1c:8b:e0:99:b7:c4:5c:5d:9f:
3c:d0:67:60:78:20:e2:28:5c:aa:1e:5d:46:06:bd:de:a9:55:
00:7f:1d:6e:dd:4e:c6:e2:37:5c:9b:fc:6c:f6:9b:ed:fd:0c:
ed:60:eb:2b:c6:29:79:a7:5a:cd:8c:36:b1:87:0a:40:67:fa:
77:c9:4d:e0:3a:39:dd:01:fa:9e:28:10:89:e8:2f:fa:10:73:
0b:a1:e5:d3:57:f8:e6:31:4f:a7:c8:6c:c2:ca:39:2f:13:47:
02:9c:fe:23:2c:e9:1a:c9:77:ac:0a:60:ac:fa:55:39:e7:76:
a0:7b:83:6e:a5:dc:08:83:4a:3d:a8:82:62:f2:af:f2:e6:44:
82:f9:36:a1:99:e2:f2:78:01:e6:c4:9a:52:63:ab:44:5d:b8:
f2:23:cc:7e:3e:3f:73:bf:11:6b:2b:b7:ce:2c:cd:19:8c:6e:
6c:10:bf:bf:4a:d1:52:04:ae:64:9f:bf:5b:8a:90:0d:1a:4c:
40:86:eb:b7:9c:6b:5a:ee:ce:7c:15:f7:ef:27:9b:24:a7:fe:
bb:be:e8:42:a0:45:61:51:c2:7a:3a:89:4c:d7:63:ad:0d:70:
48:28:9a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:17 2024 by rpki-client on console-fra.rpki-client.org