Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w0S25LlPGUN700Mhfo5VJzlkY-s.cer
File: w0S25LlPGUN700Mhfo5VJzlkY-s.cer (raw, json)
Hash identifier: h4ZNBPl0snAFwRN4AVc/CzQQ5/RFTDeeqVIA+YyD3vk=
Subject key identifier: C3:44:B6:E4:B9:4F:19:43:7B:D3:43:21:7E:8E:55:27:39:64:63:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9E32B846FF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/504eee-65e2-4973-b994-c7ec0c919e97/1/w0S25LlPGUN700Mhfo5VJzlkY-s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/504eee-65e2-4973-b994-c7ec0c919e97/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:00:18 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 209044
IP: 5.183.48.0/22
IP: 2a0e:d200::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 679455770367 (0x9e32b846ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:00:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c344b6e4b94f19437bd343217e8e5527396463eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7f:38:d5:f0:ab:f0:b5:23:40:c3:af:ae:c1:
52:1c:f9:9e:9d:dc:69:eb:22:6b:68:c0:6b:ee:d0:
70:2a:37:6e:16:aa:59:30:c2:f1:a7:c8:c2:f3:ad:
e9:92:98:9a:dc:b9:31:49:4a:9d:17:cd:04:c1:4e:
de:31:8e:7a:62:7e:d7:e8:fa:bb:bd:fd:4e:c5:38:
eb:7d:d9:46:6e:a0:b5:81:71:5e:cb:48:e9:0a:ea:
01:b3:11:43:e3:7a:f2:08:5b:fc:bf:84:93:76:94:
92:32:42:9e:fe:1e:ae:0c:8c:f8:c8:ce:bb:2b:47:
e0:df:90:7a:c8:e5:d0:30:6b:d8:3e:fc:10:e1:d0:
0c:a4:5d:a8:39:f7:69:f2:50:f0:84:19:3b:04:3d:
21:29:5b:e2:e4:7e:53:99:96:da:57:46:ab:9b:2f:
d3:60:a6:7c:2b:3c:ea:f1:7f:c0:00:0f:8f:85:96:
b9:b1:30:f5:3e:34:86:81:5d:7f:26:85:a9:40:4e:
de:66:b3:f8:44:97:18:a5:91:4d:46:be:18:a1:41:
6e:1c:03:fe:98:ba:55:d8:a7:72:8f:e7:d5:03:d9:
5a:a3:6c:73:31:9f:c0:7a:1a:7a:40:d9:c7:40:6e:
e2:23:55:3c:63:d0:e4:18:b8:cd:6a:ac:ee:ba:0e:
6e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:44:B6:E4:B9:4F:19:43:7B:D3:43:21:7E:8E:55:27:39:64:63:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/504eee-65e2-4973-b994-c7ec0c919e97/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/504eee-65e2-4973-b994-c7ec0c919e97/1/w0S25LlPGUN700Mhfo5VJzlkY-s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.48.0/22
IPv6:
2a0e:d200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209044
Signature Algorithm: sha256WithRSAEncryption
32:a1:5e:27:55:e3:a4:80:0e:2c:b9:95:be:dd:42:7c:a4:de:
57:e0:4d:fb:5b:0e:2c:36:3c:bf:80:16:95:1a:af:11:bb:58:
f3:b9:b5:8f:12:7b:6a:37:f6:d8:08:84:72:35:8c:78:9f:bb:
17:c2:f0:b3:6b:9f:f1:d4:20:f4:f4:c1:c5:de:39:f2:1f:4a:
35:b7:c8:c1:9c:84:2b:74:7b:11:84:46:7c:5e:17:78:13:0e:
2a:cb:d9:f1:e8:17:1f:de:c5:f7:78:13:1f:bc:84:28:66:74:
c7:d7:4f:2f:66:b8:97:7b:20:a7:f0:1a:4b:0a:5b:9c:4f:b4:
6d:fe:60:fa:1b:17:ea:8c:d5:bf:e1:a9:a3:75:5e:98:9a:bd:
dc:a1:40:11:39:b0:8d:5f:84:ba:31:87:b7:4b:b9:72:a0:f3:
70:d1:cb:d7:81:42:24:79:24:f9:d6:58:a8:08:f6:33:34:60:
a5:b6:2e:98:4b:6e:c6:0d:b7:6d:60:3a:f1:59:f6:b4:21:10:
86:39:65:33:3d:cc:9e:1f:0f:37:85:a9:c5:d8:67:c6:cb:95:
b4:8b:58:c4:ea:59:04:62:cd:9e:9c:e1:8e:90:db:2b:9d:ad:
55:2c:23:eb:1c:42:8b:95:6a:f9:3c:dd:f0:cd:78:0b:fe:6d:
2d:58:46:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:46 2024 by rpki-client on console-fra.rpki-client.org