Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rIlYIiC1hBejqUWfVcW5R8w1fCU.cer
File: rIlYIiC1hBejqUWfVcW5R8w1fCU.cer (raw, json)
Hash identifier: Y3b0pLMl8RQu1Qh/X1crFmy7O+k9O1jE0a07LSRgNK0=
Subject key identifier: AC:89:58:22:20:B5:84:17:A3:A9:45:9F:55:C5:B9:47:CC:35:7C:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A866AA272E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/bab489-8a4e-4602-84b4-a1368eecb82b/1/rIlYIiC1hBejqUWfVcW5R8w1fCU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/bab489-8a4e-4602-84b4-a1368eecb82b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:58:42 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 28717
AS: 29542
IP: 5.83.24.0/21
IP: 78.109.208.0/20
IP: 78.111.160.0/20
IP: 78.153.160.0/19
IP: 80.243.112.0/20
IP: 88.212.64.0/18
IP: 91.143.112.0/20
IP: 94.18.0.0/16
IP: 109.202.128.0/19
IP: 176.222.232.0/21
IP: 188.120.64.0/19
IP: 195.93.176.0/23
IP: 195.93.182.0/23
IP: 212.60.96.0/19
IP: 217.74.208.0/20
IP: 2a01:4f0::/32
IP: 2a02:460::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723276932910 (0xa866aa272e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:58:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac89582220b58417a3a9459f55c5b947cc357c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e5:89:6e:4f:e7:9b:cc:33:48:c9:a8:dd:54:
d3:8b:b2:6d:0a:c3:fb:d1:ba:94:05:66:bd:3a:ea:
2a:36:27:3f:3d:17:03:13:8b:29:9f:c7:a8:d7:43:
48:3a:4b:da:d2:fe:15:f3:0c:b3:aa:94:fa:cb:d5:
28:0a:7b:dc:6c:0e:f0:7b:b8:e7:d2:c6:89:10:3d:
2c:53:fe:0b:a5:ff:cb:c4:cb:54:81:15:e3:4a:4d:
14:04:fe:7a:e4:6a:16:d3:55:85:97:d9:6e:d2:b9:
ff:31:de:69:bb:1b:33:fe:4b:70:8c:86:81:14:6d:
44:3c:3f:55:7e:4b:3d:86:a6:49:8a:78:4b:5c:57:
05:89:46:c5:aa:06:a8:37:39:b7:0a:ab:fb:19:d2:
b3:79:02:ab:63:58:01:7e:f0:40:ab:a8:55:b0:08:
5c:35:65:91:35:bf:ff:6a:63:64:69:66:77:55:f8:
a6:35:43:3c:95:1b:36:74:da:c2:a3:c0:6e:14:7f:
c5:d4:cb:56:09:9d:c0:c8:18:9f:a5:90:83:e1:6e:
fc:fc:e4:eb:16:f7:7d:d2:e7:c7:b8:f5:22:3a:3f:
7a:7a:a4:2c:fe:61:cf:c9:31:ac:a1:c4:3c:7e:70:
fa:72:ba:b1:2b:32:ad:18:b5:fd:87:01:8c:d7:93:
81:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:89:58:22:20:B5:84:17:A3:A9:45:9F:55:C5:B9:47:CC:35:7C:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bab489-8a4e-4602-84b4-a1368eecb82b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bab489-8a4e-4602-84b4-a1368eecb82b/1/rIlYIiC1hBejqUWfVcW5R8w1fCU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.24.0/21
78.109.208.0/20
78.111.160.0/20
78.153.160.0/19
80.243.112.0/20
88.212.64.0/18
91.143.112.0/20
94.18.0.0/16
109.202.128.0/19
176.222.232.0/21
188.120.64.0/19
195.93.176.0/23
195.93.182.0/23
212.60.96.0/19
217.74.208.0/20
IPv6:
2a01:4f0::/32
2a02:460::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28717
29542
Signature Algorithm: sha256WithRSAEncryption
38:01:bd:26:63:28:17:0a:40:86:aa:8e:98:16:00:ec:db:9c:
93:2e:32:b4:57:35:de:93:64:22:25:a2:a9:91:f8:b6:b8:ec:
d8:14:a8:0c:00:b2:f0:85:14:5f:61:71:20:3f:08:63:1a:c9:
57:d9:ca:ce:7f:19:b9:c1:1e:6d:8a:31:48:1f:08:bf:4c:01:
ec:4d:91:55:3e:68:1f:fb:6f:32:97:71:45:c7:b2:58:92:32:
78:6c:f7:65:5e:56:7e:95:6b:08:51:2a:71:c1:09:43:75:dc:
82:db:14:b7:e6:ca:95:16:c5:4c:88:2b:4e:4a:86:b1:5c:82:
ea:aa:b5:bb:d4:73:d8:d9:cc:10:6d:3f:32:43:62:a2:72:7a:
61:2d:df:82:24:6a:82:80:35:10:a5:3b:67:6b:d2:9c:68:be:
8f:4a:a3:fb:81:56:be:80:1d:10:5d:e0:29:b8:56:8c:56:f7:
9d:52:49:d2:6f:d9:8c:76:f6:a7:9b:46:12:b8:d5:1a:f8:41:
02:a0:c9:08:52:b2:98:04:1e:52:62:22:55:6d:55:d9:5a:0a:
05:1d:79:b0:b9:2c:69:11:91:c3:49:71:5c:40:c1:be:04:8d:
30:a2:c1:72:35:f1:38:4e:8c:01:38:db:58:0c:54:cd:89:8d:
1f:e5:f6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:02 2024 by rpki-client on console-fra.rpki-client.org