Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oWFT-dI9_wOJ0cjQUCAMte8cgik.cer
File: oWFT-dI9_wOJ0cjQUCAMte8cgik.cer (raw, json)
Hash identifier: wyCb8cbjlIhpCdO6QezzTMlVumheJgNB8BPRtNStbpA=
Subject key identifier: A1:61:53:F9:D2:3D:FF:03:89:D1:C8:D0:50:20:0C:B5:EF:1C:82:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018457D5B5743EAC28931DE4C3EC1B565C10
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/eeb70e-0763-4299-84fb-d80be21ce6ca/1/oWFT-dI9_wOJ0cjQUCAMte8cgik.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/eeb70e-0763-4299-84fb-d80be21ce6ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 08 Nov 2022 15:22:14 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 51.0.0.0/16
IP: 51.3.0.0/16
IP: 51.16.0.0/15
IP: 51.20.0.0 -- 51.32.255.255
IP: 51.34.0.0/15
IP: 51.40.0.0/16
IP: 51.44.0.0 -- 51.50.255.255
IP: 51.60.0.0/16
IP: 51.69.0.0 -- 51.70.255.255
IP: 51.72.0.0 -- 51.74.255.255
IP: 51.76.0.0/16
IP: 51.78.0.0/16
IP: 51.80.0.0/16
IP: 51.82.0.0/16
IP: 51.84.0.0 -- 51.88.255.255
IP: 51.90.0.0/16
IP: 51.92.0.0 -- 51.102.255.255
IP: 51.108.0.0/16
IP: 51.110.0.0/16
IP: 51.112.0.0 -- 51.114.255.255
IP: 51.117.0.0 -- 51.119.255.255
IP: 51.121.0.0 -- 51.123.255.255
IP: 51.125.0.0/16
IP: 51.127.0.0 -- 51.129.255.255
IP: 51.131.0.0/16
IP: 51.134.0.0/16
IP: 51.139.0.0/16
IP: 51.150.0.0 -- 51.153.255.255
IP: 51.156.0.0/15
IP: 51.160.0.0/16
IP: 51.164.0.0 -- 51.169.255.255
IP: 51.172.0.0/15
IP: 51.176.0.0/15
IP: 51.180.0.0/15
IP: 51.184.0.0/15
IP: 51.188.0.0/15
IP: 51.192.0.0/15
IP: 51.196.0.0/15
IP: 51.200.0.0 -- 51.209.255.255
IP: 51.212.0.0 -- 51.217.255.255
IP: 51.220.0.0/15
IP: 51.224.0.0 -- 51.229.255.255
IP: 51.232.0.0/15
IP: 51.236.0.0/15
IP: 51.240.0.0/16
IP: 51.244.0.0/15
IP: 51.248.0.0/15
IP: 57.65.0.0/16
IP: 57.85.0.0/16
IP: 57.95.0.0/16
IP: 57.99.0.0/16
IP: 57.101.0.0/16
IP: 57.104.0.0/13
IP: 62.230.0.0/16
IP: 80.203.128.0/17
IP: 83.116.0.0/15
IP: 83.118.228.0 -- 83.118.255.255
IP: 83.119.64.0 -- 83.119.255.255
IP: 83.129.0.0/16
IP: 84.48.128.0/17
IP: 85.151.0.0/16
IP: 85.213.0.0/16
IP: 130.24.0.0/16
IP: 143.65.0.0 -- 143.65.191.255
IP: 143.65.224.0/19
IP: 145.17.0.0/16
IP: 145.55.0.0/16
IP: 151.176.0.0/16
IP: 152.134.0.0/16
IP: 159.109.0.0/16
IP: 159.239.0.0/16
IP: 159.244.0.0/16
IP: 185.72.192.0/22
IP: 185.143.16.0/22
IP: 193.26.64.0/19
IP: 193.57.169.0 -- 193.57.171.255
IP: 193.57.181.0 -- 193.57.183.255
IP: 193.57.254.0/23
IP: 193.186.210.0/24
IP: 193.202.192.0/19
IP: 193.218.122.0/24
IP: 194.52.0.0/16
IP: 194.133.0.0/16
IP: 194.198.0.0/16
IP: 194.234.0.0/15
IP: 195.17.0.0/16
IP: 195.61.0.0/16
IP: 195.119.0.0/16
IP: 195.247.0.0/16
IP: 195.254.0.0/17
IP: 200.197.0.0/16
IP: 200.224.0.0/16
IP: 212.167.0.0/16
IP: 212.173.128.0/17
IP: 212.255.0.0/16
IP: 213.72.0.0/16
IP: 2a01:578::/29
IP: 2a11:47c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:57:d5:b5:74:3e:ac:28:93:1d:e4:c3:ec:1b:56:5c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 8 15:22:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a16153f9d23dff0389d1c8d050200cb5ef1c8229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fa:ac:06:88:05:3e:9e:19:4a:71:a7:b0:1e:
c8:d7:7b:8a:5d:49:a1:f6:ac:0f:87:e8:de:d6:0d:
ce:02:51:d3:64:7a:b7:87:4a:5c:fc:8e:b3:24:2c:
e5:c1:df:e7:ad:b0:38:4d:b6:9f:07:45:c4:7d:17:
9f:26:03:dd:d6:a3:32:9e:8d:d5:b2:da:b3:3e:9c:
c4:89:b8:c5:c4:78:88:e3:7b:4b:cf:ba:a2:89:d4:
4a:fe:38:8d:d5:22:3f:42:fc:3f:cb:69:1b:78:2c:
99:e4:f6:23:8a:e7:a0:d2:26:9f:c8:09:58:68:14:
54:84:18:6a:00:bd:18:0c:c3:ee:04:09:ce:bc:4f:
87:3a:4a:e5:ab:e3:d1:7f:27:ae:15:22:f7:35:25:
0b:42:0e:ee:31:93:09:e4:f6:10:02:70:00:c3:25:
84:db:07:df:7d:7d:55:ff:cd:35:6c:af:c9:34:02:
2f:c1:4b:d5:d4:f3:12:35:37:05:48:18:13:2a:7e:
dd:b8:44:88:ee:ca:17:f1:25:3b:11:16:8e:79:b5:
0b:58:d4:dd:9d:12:f7:0f:0a:bc:dc:25:d0:07:de:
4a:73:41:e8:65:e7:b9:69:7e:78:df:3e:e0:7c:dd:
ce:eb:51:0b:f1:65:1d:59:b8:71:cb:00:b6:a5:b9:
33:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:61:53:F9:D2:3D:FF:03:89:D1:C8:D0:50:20:0C:B5:EF:1C:82:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/eeb70e-0763-4299-84fb-d80be21ce6ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/eeb70e-0763-4299-84fb-d80be21ce6ca/1/oWFT-dI9_wOJ0cjQUCAMte8cgik.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.0.0/16
51.3.0.0/16
51.16.0.0/15
51.20.0.0-51.32.255.255
51.34.0.0/15
51.40.0.0/16
51.44.0.0-51.50.255.255
51.60.0.0/16
51.69.0.0-51.70.255.255
51.72.0.0-51.74.255.255
51.76.0.0/16
51.78.0.0/16
51.80.0.0/16
51.82.0.0/16
51.84.0.0-51.88.255.255
51.90.0.0/16
51.92.0.0-51.102.255.255
51.108.0.0/16
51.110.0.0/16
51.112.0.0-51.114.255.255
51.117.0.0-51.119.255.255
51.121.0.0-51.123.255.255
51.125.0.0/16
51.127.0.0-51.129.255.255
51.131.0.0/16
51.134.0.0/16
51.139.0.0/16
51.150.0.0-51.153.255.255
51.156.0.0/15
51.160.0.0/16
51.164.0.0-51.169.255.255
51.172.0.0/15
51.176.0.0/15
51.180.0.0/15
51.184.0.0/15
51.188.0.0/15
51.192.0.0/15
51.196.0.0/15
51.200.0.0-51.209.255.255
51.212.0.0-51.217.255.255
51.220.0.0/15
51.224.0.0-51.229.255.255
51.232.0.0/15
51.236.0.0/15
51.240.0.0/16
51.244.0.0/15
51.248.0.0/15
57.65.0.0/16
57.85.0.0/16
57.95.0.0/16
57.99.0.0/16
57.101.0.0/16
57.104.0.0/13
62.230.0.0/16
80.203.128.0/17
83.116.0.0/15
83.118.228.0-83.118.255.255
83.119.64.0-83.119.255.255
83.129.0.0/16
84.48.128.0/17
85.151.0.0/16
85.213.0.0/16
130.24.0.0/16
143.65.0.0-143.65.191.255
143.65.224.0/19
145.17.0.0/16
145.55.0.0/16
151.176.0.0/16
152.134.0.0/16
159.109.0.0/16
159.239.0.0/16
159.244.0.0/16
185.72.192.0/22
185.143.16.0/22
193.26.64.0/19
193.57.169.0-193.57.171.255
193.57.181.0-193.57.183.255
193.57.254.0/23
193.186.210.0/24
193.202.192.0/19
193.218.122.0/24
194.52.0.0/16
194.133.0.0/16
194.198.0.0/16
194.234.0.0/15
195.17.0.0/16
195.61.0.0/16
195.119.0.0/16
195.247.0.0/16
195.254.0.0/17
200.197.0.0/16
200.224.0.0/16
212.167.0.0/16
212.173.128.0/17
212.255.0.0/16
213.72.0.0/16
IPv6:
2a01:578::/29
2a11:47c0::/29
Signature Algorithm: sha256WithRSAEncryption
40:48:9b:63:e2:51:51:82:3f:2f:e5:55:13:41:d5:5d:0d:02:
bd:60:cb:1d:03:1c:66:1f:94:66:1c:00:72:ee:6e:c3:b7:2c:
b2:3a:0a:0b:f6:50:3f:9e:c8:e7:39:e5:70:1d:31:a7:f9:30:
ac:ab:f2:70:42:15:0d:f0:76:5e:90:87:83:ff:ec:7e:0e:4e:
23:a4:6f:9d:3c:27:38:0e:77:d5:1e:2b:9e:9e:2a:2d:a5:45:
f5:ed:07:6b:f4:ee:c0:6f:01:43:eb:8a:fe:16:74:4f:ae:21:
d5:90:2c:49:7a:25:f0:6e:b3:14:6e:67:cd:d7:ae:c3:59:bb:
6e:59:5f:84:f0:2a:e7:d2:cf:70:19:cb:b6:52:8f:71:c1:b7:
39:fe:19:b8:70:0b:03:82:df:96:f7:19:21:80:c0:b7:52:a1:
23:c4:98:d2:7a:c8:75:85:ea:4b:a8:af:33:a9:41:94:95:1e:
3e:4f:03:5a:b7:89:f9:1c:a8:51:52:75:c8:57:ca:f5:bc:0f:
cf:97:df:65:90:e7:1a:be:de:e2:00:67:d7:05:da:ef:ff:fe:
80:7f:21:f5:75:5c:78:4b:f2:d1:a5:ac:e9:ae:92:13:52:49:
3d:f0:a2:1f:9b:70:11:e4:27:04:82:0b:68:7c:48:aa:07:8e:
16:e4:f4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:46 2024 by rpki-client on console-ams.rpki-client.org