Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nrXnF8759mRM2ISbihjUHcdPQIo.cer
File: nrXnF8759mRM2ISbihjUHcdPQIo.cer (raw, json)
Hash identifier: Mifd8UBr05VBg0QbxGEWAIYJNMgAxXeGe79vA8K4sQo=
Subject key identifier: 9E:B5:E7:17:CE:F9:F6:64:4C:D8:84:9B:8A:18:D4:1D:C7:4F:40:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B1BD121EF1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/b8932a-0879-4751-988c-6ee3f5007eab/1/nrXnF8759mRM2ISbihjUHcdPQIo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/b8932a-0879-4751-988c-6ee3f5007eab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 16 May 2022 07:22:53 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 198435
IP: 31.172.160.0/22
IP: 46.231.216.0/21
IP: 82.163.36.0/22
IP: 82.196.24.0/21
IP: 88.202.236.0/22
IP: 88.212.144.0 -- 88.212.155.255
IP: 185.4.60.0 -- 185.4.62.255
IP: 185.91.220.0 -- 185.91.227.255
IP: 185.146.220.0/22
IP: 212.18.240.0/21
IP: 212.85.229.0 -- 212.85.231.255
IP: 2a00:78c0::/29
IP: 2a07:5300::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 763381292785 (0xb1bd121ef1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 16 07:22:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9eb5e717cef9f6644cd8849b8a18d41dc74f408a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:14:c8:d1:49:4f:1f:3e:3b:68:f6:c2:11:bc:
47:d4:61:3f:84:27:fd:b8:10:17:c5:6b:a0:6b:75:
51:4d:93:13:bc:c9:da:ea:44:2f:c1:d6:5a:8e:85:
cb:e8:54:c1:3d:f0:f6:a3:a6:2b:89:8c:97:49:eb:
e5:5e:2c:66:7d:4b:24:ff:be:a2:b4:a6:30:bb:a6:
e7:45:44:1e:92:fc:b2:49:d3:ef:49:bb:14:3b:df:
f2:1e:29:32:e4:8f:61:27:1a:91:a8:8f:d0:81:08:
4e:cf:df:53:24:c3:4f:fc:be:27:cf:c2:a1:e8:5b:
d9:9b:75:70:32:b3:97:b7:86:21:f3:e3:58:1d:53:
41:64:de:0b:ce:88:6f:b8:5d:1d:ff:99:90:b2:23:
c2:22:ec:c9:70:05:9c:e9:4e:78:66:49:5e:ae:19:
dd:64:00:11:8c:05:58:4c:41:76:e1:c9:ad:1c:92:
5a:81:4d:dd:da:85:a9:b4:06:6d:88:b5:3c:ed:6e:
4d:08:cc:0c:8a:6c:da:c9:0a:d2:6a:61:7d:6d:8b:
e8:c8:3d:28:c4:a1:c5:e0:62:dd:54:de:dd:b8:31:
11:26:94:85:4c:33:f8:c1:e0:74:55:61:40:41:15:
8b:74:ef:fe:1f:4c:ac:b3:a3:2c:2c:ea:f8:3a:3c:
f8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B5:E7:17:CE:F9:F6:64:4C:D8:84:9B:8A:18:D4:1D:C7:4F:40:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b8932a-0879-4751-988c-6ee3f5007eab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b8932a-0879-4751-988c-6ee3f5007eab/1/nrXnF8759mRM2ISbihjUHcdPQIo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.160.0/22
46.231.216.0/21
82.163.36.0/22
82.196.24.0/21
88.202.236.0/22
88.212.144.0-88.212.155.255
185.4.60.0-185.4.62.255
185.91.220.0-185.91.227.255
185.146.220.0/22
212.18.240.0/21
212.85.229.0-212.85.231.255
IPv6:
2a00:78c0::/29
2a07:5300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198435
Signature Algorithm: sha256WithRSAEncryption
6a:4b:bf:41:19:06:77:17:48:e6:2f:27:32:f5:c4:c0:c9:12:
39:2c:8d:ee:4b:bf:6e:cf:b1:41:06:db:60:d7:d3:08:2a:51:
f0:63:2a:cc:6b:10:e5:ca:fd:02:b6:71:63:ed:82:f3:79:f2:
34:d9:c9:0e:24:33:8c:39:ab:67:81:98:24:4c:9d:78:14:aa:
3a:c0:c4:8d:a9:d0:bb:9a:d9:39:1f:85:34:69:2c:a3:06:a6:
02:7a:93:c4:da:2a:b5:64:a6:be:c2:85:97:f6:2e:1a:1a:b9:
dc:70:70:03:35:b3:e5:53:97:11:6c:19:18:56:07:96:3d:c2:
04:42:da:4c:b8:05:b8:9d:cd:09:79:4e:93:72:9b:0a:d3:33:
15:b0:b6:39:2a:46:44:f1:6c:b7:a2:6e:6e:55:5b:97:ee:5d:
91:75:d2:be:72:29:66:79:00:d0:78:2c:14:c0:7c:ee:c4:37:
3d:e1:8c:de:50:f4:93:00:e8:d5:7c:df:52:7d:50:4b:02:08:
38:0a:68:7f:c3:fd:53:6a:4f:8f:0c:07:a5:ea:1b:3b:a2:10:
f1:e5:67:53:90:7c:2f:b2:1d:66:28:1f:9f:c9:7e:e4:1d:6a:
01:5d:43:6b:bb:20:7d:3d:8a:84:f6:9b:ec:10:a2:e7:2a:71:
c4:e2:a2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:37 2024 by rpki-client on console-ams.rpki-client.org